不仅如此，貌似对于ClusterConfiguration的所有修改都不能生效，包括worker集群配置开启这种，修改完都没有效果
TASK [ks-core/ks-core : KubeSphere | Patch admin user] *************************
changed: [localhost]
TASK [ks-core/ks-core : KubeSphere | Getting ks-core helm charts] **************
ok: [localhost] => (item=ks-core)
TASK [ks-core/ks-core : KubeSphere | Checking KubeSphere Admin User] ***********
changed: [localhost]
TASK [ks-core/ks-core : set_fact] **********************************************
skipping: [localhost]
TASK [ks-core/ks-core : shell] *************************************************
skipping: [localhost]
TASK [ks-core/ks-core : KubeSphere | Creating manifests] ***********************
ok: [localhost] => (item={'path': 'ks-core', 'file': 'custom-values-ks-core.yaml'})
TASK [ks-core/ks-core : KubeSphere | Upgrade CRDs] *****************************
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/alerting.kubesphere.io_clusterrulegroups.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/alerting.kubesphere.io_globalrulegroups.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/alerting.kubesphere.io_rulegroups.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/app_v1beta1_application.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/application.kubesphere.io_helmapplications.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/application.kubesphere.io_helmapplicationversions.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/application.kubesphere.io_helmcategories.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/application.kubesphere.io_helmreleases.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/application.kubesphere.io_helmrepos.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/cluster.kubesphere.io_clusters.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/gateway.kubesphere.io_gateways.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/gateway.kubesphere.io_nginxes.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_federatedrolebindings.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_federatedroles.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_federatedusers.yaml)
failed: [localhost] (item=/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_globalrolebindings.yaml) => {"ansible_loop_var": "item", "changed": true, "cmd": "/usr/local/bin/kubectl apply -f /kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_globalrolebindings.yaml", "delta": "0:00:00.307614", "end": "2025-10-22 11:01:46.573197", "item": "/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_globalrolebindings.yaml", "msg": "non-zero return code", "rc": 1, "start": "2025-10-22 11:01:46.265583", "stderr": "Warning: resource customresourcedefinitions/globalrolebindings.iam.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.\nThe CustomResourceDefinition \"globalrolebindings.iam.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions", "stderr_lines": ["Warning: resource customresourcedefinitions/globalrolebindings.iam.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.", "The CustomResourceDefinition \"globalrolebindings.iam.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions"], "stdout": "", "stdout_lines": []}
failed: [localhost] (item=/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_globalroles.yaml) => {"ansible_loop_var": "item", "changed": true, "cmd": "/usr/local/bin/kubectl apply -f /kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_globalroles.yaml", "delta": "0:00:00.306420", "end": "2025-10-22 11:01:47.030874", "item": "/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_globalroles.yaml", "msg": "non-zero return code", "rc": 1, "start": "2025-10-22 11:01:46.724454", "stderr": "Warning: resource customresourcedefinitions/globalroles.iam.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.\nThe CustomResourceDefinition \"globalroles.iam.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions", "stderr_lines": ["Warning: resource customresourcedefinitions/globalroles.iam.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.", "The CustomResourceDefinition \"globalroles.iam.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions"], "stdout": "", "stdout_lines": []}
failed: [localhost] (item=/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_groupbindings.yaml) => {"ansible_loop_var": "item", "changed": true, "cmd": "/usr/local/bin/kubectl apply -f /kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_groupbindings.yaml", "delta": "0:00:00.281072", "end": "2025-10-22 11:01:47.466863", "item": "/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_groupbindings.yaml", "msg": "non-zero return code", "rc": 1, "start": "2025-10-22 11:01:47.185791", "stderr": "Warning: resource customresourcedefinitions/groupbindings.iam.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.\nThe CustomResourceDefinition \"groupbindings.iam.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions", "stderr_lines": ["Warning: resource customresourcedefinitions/groupbindings.iam.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.", "The CustomResourceDefinition \"groupbindings.iam.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions"], "stdout": "", "stdout_lines": []}
failed: [localhost] (item=/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_groups.yaml) => {"ansible_loop_var": "item", "changed": true, "cmd": "/usr/local/bin/kubectl apply -f /kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_groups.yaml", "delta": "0:00:00.280673", "end": "2025-10-22 11:01:47.901524", "item": "/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_groups.yaml", "msg": "non-zero return code", "rc": 1, "start": "2025-10-22 11:01:47.620851", "stderr": "Warning: resource customresourcedefinitions/groups.iam.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.\nThe CustomResourceDefinition \"groups.iam.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions", "stderr_lines": ["Warning: resource customresourcedefinitions/groups.iam.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.", "The CustomResourceDefinition \"groups.iam.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions"], "stdout": "", "stdout_lines": []}
failed: [localhost] (item=/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_loginrecords.yaml) => {"ansible_loop_var": "item", "changed": true, "cmd": "/usr/local/bin/kubectl apply -f /kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_loginrecords.yaml", "delta": "0:00:00.306113", "end": "2025-10-22 11:01:48.354536", "item": "/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_loginrecords.yaml", "msg": "non-zero return code", "rc": 1, "start": "2025-10-22 11:01:48.048423", "stderr": "Warning: resource customresourcedefinitions/loginrecords.iam.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.\nThe CustomResourceDefinition \"loginrecords.iam.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions", "stderr_lines": ["Warning: resource customresourcedefinitions/loginrecords.iam.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.", "The CustomResourceDefinition \"loginrecords.iam.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions"], "stdout": "", "stdout_lines": []}
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_rolebases.yaml)
failed: [localhost] (item=/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_users.yaml) => {"ansible_loop_var": "item", "changed": true, "cmd": "/usr/local/bin/kubectl apply -f /kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_users.yaml", "delta": "0:00:00.305309", "end": "2025-10-22 11:01:49.263755", "item": "/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_users.yaml", "msg": "non-zero return code", "rc": 1, "start": "2025-10-22 11:01:48.958446", "stderr": "Warning: resource customresourcedefinitions/users.iam.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.\nThe CustomResourceDefinition \"users.iam.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions", "stderr_lines": ["Warning: resource customresourcedefinitions/users.iam.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.", "The CustomResourceDefinition \"users.iam.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions"], "stdout": "", "stdout_lines": []}
failed: [localhost] (item=/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_workspacerolebindings.yaml) => {"ansible_loop_var": "item", "changed": true, "cmd": "/usr/local/bin/kubectl apply -f /kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_workspacerolebindings.yaml", "delta": "0:00:00.301806", "end": "2025-10-22 11:01:49.718395", "item": "/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_workspacerolebindings.yaml", "msg": "non-zero return code", "rc": 1, "start": "2025-10-22 11:01:49.416589", "stderr": "Warning: resource customresourcedefinitions/workspacerolebindings.iam.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.\nThe CustomResourceDefinition \"workspacerolebindings.iam.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions", "stderr_lines": ["Warning: resource customresourcedefinitions/workspacerolebindings.iam.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.", "The CustomResourceDefinition \"workspacerolebindings.iam.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions"], "stdout": "", "stdout_lines": []}
failed: [localhost] (item=/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_workspaceroles.yaml) => {"ansible_loop_var": "item", "changed": true, "cmd": "/usr/local/bin/kubectl apply -f /kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_workspaceroles.yaml", "delta": "0:00:00.273189", "end": "2025-10-22 11:01:50.137340", "item": "/kubesphere/kubesphere/ks-core/crds/iam.kubesphere.io_workspaceroles.yaml", "msg": "non-zero return code", "rc": 1, "start": "2025-10-22 11:01:49.864151", "stderr": "Warning: resource customresourcedefinitions/workspaceroles.iam.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.\nThe CustomResourceDefinition \"workspaceroles.iam.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions", "stderr_lines": ["Warning: resource customresourcedefinitions/workspaceroles.iam.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.", "The CustomResourceDefinition \"workspaceroles.iam.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions"], "stdout": "", "stdout_lines": []}
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/network.kubesphere.io_ipamblocks.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/network.kubesphere.io_ipamhandles.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/network.kubesphere.io_ippools.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/network.kubesphere.io_namespacenetworkpolicies.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/quota.kubesphere.io_resourcequotas.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/servicemesh.kubesphere.io_servicepolicies.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/servicemesh.kubesphere.io_strategies.yaml)
changed: [localhost] => (item=/kubesphere/kubesphere/ks-core/crds/storage.kubesphere.io_storageclasseraccessor.yaml)
failed: [localhost] (item=/kubesphere/kubesphere/ks-core/crds/tenant.kubesphere.io_workspaces.yaml) => {"ansible_loop_var": "item", "changed": true, "cmd": "/usr/local/bin/kubectl apply -f /kubesphere/kubesphere/ks-core/crds/tenant.kubesphere.io_workspaces.yaml", "delta": "0:00:00.286384", "end": "2025-10-22 11:01:54.289440", "item": "/kubesphere/kubesphere/ks-core/crds/tenant.kubesphere.io_workspaces.yaml", "msg": "non-zero return code", "rc": 1, "start": "2025-10-22 11:01:54.003056", "stderr": "Warning: resource customresourcedefinitions/workspaces.tenant.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.\nThe CustomResourceDefinition \"workspaces.tenant.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions", "stderr_lines": ["Warning: resource customresourcedefinitions/workspaces.tenant.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.", "The CustomResourceDefinition \"workspaces.tenant.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions"], "stdout": "", "stdout_lines": []}
failed: [localhost] (item=/kubesphere/kubesphere/ks-core/crds/tenant.kubesphere.io_workspacetemplates.yaml) => {"ansible_loop_var": "item", "changed": true, "cmd": "/usr/local/bin/kubectl apply -f /kubesphere/kubesphere/ks-core/crds/tenant.kubesphere.io_workspacetemplates.yaml", "delta": "0:00:00.315344", "end": "2025-10-22 11:01:54.752753", "item": "/kubesphere/kubesphere/ks-core/crds/tenant.kubesphere.io_workspacetemplates.yaml", "msg": "non-zero return code", "rc": 1, "start": "2025-10-22 11:01:54.437409", "stderr": "Warning: resource customresourcedefinitions/workspacetemplates.tenant.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.\nThe CustomResourceDefinition \"workspacetemplates.tenant.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions", "stderr_lines": ["Warning: resource customresourcedefinitions/workspacetemplates.tenant.kubesphere.io is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.", "The CustomResourceDefinition \"workspacetemplates.tenant.kubesphere.io\" is invalid: status.storedVersions[0]: Invalid value: \"v1beta1\": must appear in spec.versions"], "stdout": "", "stdout_lines": []}
PLAY RECAP *********************************************************************
localhost : ok=20 changed=9 unreachable=0 failed=1 skipped=8 rescued=0 ignored=0
