Global Plugin - Config update error

[mheap]

Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

A user could not apply a global exit-transformer plugin using KIC:

error    Entity tags missing fields    {"name": "exit-transformer", "error": "no namespace"}

error    dataplane-synchronizer    Could not update kong admin    {"error": "performing update for https://localhost:8444/ fail
ed: failed posting new config to /config: got status code 400"}

The error occurred when untrusted_lua: "off" was set.

Expected Behavior

The error logs return a useful error message to help debug the issue

Steps To Reproduce

1. Deploy KIC with `KONG_UNTRUSTED_LUA="off"` in `gateway.env`
2. Create a `KongClusterPlugin` that adds `exit-transformer`

Kong Ingress Controller version

No response

Kubernetes version

No response

Anything else?

No response

[pmalek]

This should already be fixed in nightly via #5764 (and will be released in 3.1.3 via #5789)

[pmalek]

In 3.1.3 when you apply a global exit transformer KIC properly logs an error warning:

2024-04-09T18:09:33+02:00	error	dataplane-synchronizer	Could not update kong admin	{"error": "performing update for https://10.244.0.20:8444 failed: failed posting new config to /config: got status code 400"}
2024-04-09T18:09:36+02:00	error	recording a Warning event for object	{"name": "exit-transformer", "namespace": "default", "kind": "KongPlugin", "apiVersion": "configuration.konghq.com/v1", "reason": "KongConfigurationApplyFailed", "message": "invalid config.functions.1: Error parsing function: /usr/local/share/lua/5.1/kong/tools/sandbox.lua:128: loading of untrusted Lua code disabled because 'untrusted_lua' config option is set to 'off'", "error": "object failed to apply"}

and an event will be emitted correctly:

k get events --field-selector reason=KongConfigurationApplyFailed -n default
lt
LAST SEEN   TYPE      REASON                         OBJECT                                      MESSAGE
10m         Warning   KongConfigurationApplyFailed   kongplugin/exit-transformer                 invalid config.functions.1: Error parsing function: /usr/local/share/lua/5.1/kong/tools/sandbox.lua:128: loading of untrusted Lua code disabled because 'untrusted_lua' config option is set to 'off'

---

There's an issue with creating event for cluster scoped resources though. Events are namespaced and hence cannot be created without one. I've created #5847 to track this.