request help: upgrade 2.0 failed! ingressClass does not match GatewayProxy

[Richard0706]

Issue description

Upgrade documentation:https://apisix.apache.org/zh/docs/ingress-controller/upgrade-guide/#apisix-version-dependency-data-plane;
The latest official chart.
ingress error log:

 2025-12-17T09:30:59.511Z	INFO	controllers.Ingress	controller/ingress_controller.go:153	reconciling ingress	{"ingress": "nacos"}

 2025-12-17T09:30:59.511Z	ERROR	controllers.Ingress	controller/utils.go:1367	failed to get GatewayProxy	{"namespace": "dev", "name": "apisix-config", "error": "GatewayProxy.apisix.apache.org \"apisix-config\" not found"}

 2025-12-17T09:30:59.511Z	ERROR	controllers.Ingress	controller/ingress_controller.go:175	failed to process IngressClass parameters	{"ingressClass": "apisix", "error": "GatewayProxy.apisix.apache.org \"apisix-config\" not found"}

 2025-12-17T09:30:59.511Z	ERROR	controller-runtime	controller/controller.go:347	Reconciler error	{"controller": "ingress", "controllerGroup": "networking.k8s.io", "controllerKind": "Ingress", "Ingress": {"name":"nacos","namespace":"dev"}, "namespace": "dev", "name": "nacos", "reconcileID": "613b8e99-c970-426e-9e86-68a480fc7d25", "error": "GatewayProxy.apisix.apache.org \"apisix-config\" not found"}

check GatewayProxy、IngressClass:

[root@master01 apisix]# kubectl -n apisix-ingress get gatewayproxies.apisix.apache.org apisix-config -o yaml
apiVersion: apisix.apache.org/v1alpha1
kind: GatewayProxy
metadata:
  annotations:
    meta.helm.sh/release-name: apisix
    meta.helm.sh/release-namespace: apisix-ingress
  creationTimestamp: "2025-12-17T09:29:42Z"
  generation: 1
  labels:
    app.kubernetes.io/managed-by: Helm
  name: apisix-config
  namespace: apisix-ingress
  resourceVersion: "120900463"
  uid: 19dfe556-57ac-48e0-8b67-843f03d1778c
spec:
  provider:
    controlPlane:
      auth:
        adminKey:
          value: edd1c9f034335f136f87ad84b625c8f1
        type: AdminKey
      service:
        name: apisix-admin
        port: 9180
    type: ControlPlane
[root@master01 apisix]# kubectl get ingressClass apisix -o yaml
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    meta.helm.sh/release-name: apisix
    meta.helm.sh/release-namespace: apisix-ingress
  creationTimestamp: "2025-12-17T09:29:42Z"
  generation: 1
  labels:
    app.kubernetes.io/managed-by: Helm
  name: apisix
  resourceVersion: "120900460"
  uid: cc5dc5f7-ff91-411b-910f-dde4af8bc924
spec:
  controller: apisix.apache.org/apisix-ingress-controller
  parameters:
    apiGroup: apisix.apache.org
    kind: GatewayProxy
    name: apisix-config
    scope: null
[root@master01 apisix]# kubectl patch ingressclass apisix --type=merge -p '{"spec":{"parameters":{"namespace":"apisix-ingress","scope":"Namespace"}}}'
Warning: Referenced GatewayProxy '/apisix-config' not found.
ingressclass.networking.k8s.io/apisix patched

ns in IngressClass parameters is not configured and cannot be modified.

Environment

• your apisix-ingress-controller version (output of apisix-ingress-controller version --long):ingress-controller 2.0
• your Kubernetes cluster version (output of kubectl version):
• if you run apisix-ingress-controller in Bare-metal environment, also show your OS version (uname -a):

[Richard0706]

The APISIX Ingress Controller is looking for a resource named apisix-config in the seed-dev namespace, but this resource is actually deployed in the apisix-ingress namespace. According to the Kubernetes specification, when referencing a namespace-level resource (such as GatewayProxy), if the namespace field is not specified in the parameters, Kubernetes assumes that the resource is in the same namespace as the Ingress that uses it.
Even though I added the following configuration when using Helm: --set ingress-controller.gatewayProxy.createDefault=tru
how to fix?

[Baoyuantop]

Hi @Richard0706, does adding a namespace to IngressClass still not work?

[Richard0706]

Hi @Richard0706, does adding a namespace to IngressClass still not work?

Yes, even after I manually edited and saved it, it still didn't take effect when I checked it again.
kubectl edit ingressclasses.networking.k8s.io apisix

[root@master01 ~]# kubectl get ingressclasses.networking.k8s.io apisix -o yaml
apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    meta.helm.sh/release-name: apisix
    meta.helm.sh/release-namespace: apisix-ingress
  creationTimestamp: "2025-12-17T13:36:58Z"
  generation: 2
  labels:
    app.kubernetes.io/managed-by: Helm
  name: apisix
  resourceVersion: "120959668"
  uid: 24c995b4-95d3-4cb9-bb90-4cb07613b9ec
spec:
  controller: apisix.apache.org/apisix-ingress-controller
  parameters:
    apiGroup: apisix.apache.org
    kind: GatewayProxy
    name: apisix-config
  #Adding here does not take effect
    scope: null

[Baoyuantop]

Hi @Richard0706, what is your kubernetes cluster version?

[Richard0706]

Hi @Richard0706, what is your kubernetes cluster version?

[root@master01 ~]# kubectl version
Client Version: version.Info{Major:"1", Minor:"21", GitVersion:"v1.21.14", GitCommit:"0f77da5bd4809927e15d1658fb4aa8f13ad890a5", GitTreeState:"clean", BuildDate:"2022-06-15T14:17:29Z", GoVersion:"go1.16.15", Compiler:"gc", Platform:"linux/amd64"}
Server Version: version.Info{Major:"1", Minor:"21", GitVersion:"v1.21.14", GitCommit:"0f77da5bd4809927e15d1658fb4aa8f13ad890a5", GitTreeState:"clean", BuildDate:"2022-06-15T14:11:36Z", GoVersion:"go1.16.15", Compiler:"gc", Platform:"linux/amd64"}

In the ingress chart, I set:

122 gatewayProxy:
123   # -- Controls whether to create a default GatewayProxy custom resource.
124   createDefault: true

and during Helm installation, --set ingress-controller.gatewayProxy.createDefault=true is still set.

[Baoyuantop]

Hi @Richard0706, ingress 2.0 requires cluster version 1.26+. You can refer to https://apisix.apache.org/docs/ingress-controller/install/#prerequisites

[john1337]

@Baoyuantop
my k8s cluster version is 1.22.x,can ingress 2.0 work with it if i dont't use gateway(a new feature in k8s),what if i just use ingress,use ingress yaml such as
kind: Ingress
annotations:
k8s.apisix.apache.org/rewrite-target-regex: /test(/|$)(.)
k8s.apisix.apache.org/rewrite-target-regex-template: /$2
k8s.apisix.apache.org/use-regex: 'true'
meta.helm.sh/release-name: xx-cor
spec:
ingressClassName: apisix
rules:
- http:
paths:
- path: /test(/|$)(.)
pathType: Prefix
backend:
service:
name: xxx
port:
number: 80

[Baoyuantop]

We haven't tested this, and using it this way might cause some resource verification failures.

[AlinsRan]

ref: dcf3b59
@Richard0706 You need to specify the target namespace for ingressClass.

apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
  annotations:
    meta.helm.sh/release-name: apisix
    meta.helm.sh/release-namespace: apisix-ingress
  creationTimestamp: "2025-12-17T13:36:58Z"
  generation: 2
  labels:
    app.kubernetes.io/managed-by: Helm
  name: apisix
  resourceVersion: "120959668"
  uid: 24c995b4-95d3-4cb9-bb90-4cb07613b9ec
spec:
  controller: apisix.apache.org/apisix-ingress-controller
  parameters:
    apiGroup: apisix.apache.org
    kind: GatewayProxy
    name: apisix-config
    namespace: "apisix-ingress"
    scope: "Namespace"

[Richard0706]

ref: dcf3b59 @Richard0706 You need to specify the target namespace for ingressClass.

apiVersion: networking.k8s.io/v1
kind: IngressClass
metadata:
annotations:
meta.helm.sh/release-name: apisix
meta.helm.sh/release-namespace: apisix-ingress
creationTimestamp: "2025-12-17T13:36:58Z"
generation: 2
labels:
app.kubernetes.io/managed-by: Helm
name: apisix
resourceVersion: "120959668"
uid: 24c995b4-95d3-4cb9-bb90-4cb07613b9ec
spec:
controller: apisix.apache.org/apisix-ingress-controller
parameters:
apiGroup: apisix.apache.org
kind: GatewayProxy
name: apisix-config
namespace: "apisix-ingress"
scope: "Namespace"

I've tried it, you can check this out.
#2681 (comment)
After I saved it and checked again, the save did not take effect.
Do we really need double quotes?

[AlinsRan]

@Richard0706
ref: https://kubernetes.io/blog/2021/12/07/kubernetes-1-23-release-announcement/#graduated-to-stable
Please check the k8s version.