<p>So i have this project that i already deployed in GKE and i am trying to make the CI/CD from github action. So i added the workflow file which contains</p>
<pre><code>name: Build and Deploy to GKE

on:
  push:
    branches:
      - main

env:
  PROJECT_ID: ${{ secrets.GKE_PROJECT }}
  GKE_CLUSTER: ${{ secrets.GKE_CLUSTER }}    # Add your cluster name here.
  GKE_ZONE: ${{ secrets.GKE_ZONE }}   # Add your cluster zone here.
  DEPLOYMENT_NAME: ems-app # Add your deployment name here.
  IMAGE: ciputra-ems-backend

jobs:
  setup-build-publish-deploy:
    name: Setup, Build, Publish, and Deploy
    runs-on: ubuntu-latest
    environment: production

    steps:
    - name: Checkout
      uses: actions/checkout@v2

    # Setup gcloud CLI
    - uses: google-github-actions/setup-gcloud@94337306dda8180d967a56932ceb4ddcf01edae7
      with:
        service_account_key: ${{ secrets.GKE_SA_KEY }}
        project_id: ${{ secrets.GKE_PROJECT }}

    # Configure Docker to use the gcloud command-line tool as a credential
    # helper for authentication
    - run: |-
        gcloud --quiet auth configure-docker

    # Get the GKE credentials so we can deploy to the cluster
    - uses: google-github-actions/get-gke-credentials@fb08709ba27618c31c09e014e1d8364b02e5042e
      with:
        cluster_name: ${{ env.GKE_CLUSTER }}
        location: ${{ env.GKE_ZONE }}
        credentials: ${{ secrets.GKE_SA_KEY }}

    # Build the Docker image
    - name: Build
      run: |-
        docker build \
          --tag &quot;gcr.io/$PROJECT_ID/$IMAGE:$GITHUB_SHA&quot; \
          --build-arg GITHUB_SHA=&quot;$GITHUB_SHA&quot; \
          --build-arg GITHUB_REF=&quot;$GITHUB_REF&quot; \
          .

    # Push the Docker image to Google Container Registry
    - name: Publish
      run: |-
        docker push &quot;gcr.io/$PROJECT_ID/$IMAGE:$GITHUB_SHA&quot;

    # Set up kustomize
    - name: Set up Kustomize
      run: |-
        curl -sfLo kustomize https://github.com/kubernetes-sigs/kustomize/releases/download/v3.1.0/kustomize_3.1.0_linux_amd64
        chmod u+x ./kustomize

    # Deploy the Docker image to the GKE cluster
    - name: Deploy
      run: |-
        ./kustomize edit set image LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY/IMAGE:TAG=$GAR_LOCATION-docker.pkg.dev/$PROJECT_ID/$REPOSITORY/$IMAGE:$GITHUB_SHA
        ./kustomize build . | kubectl apply -k ./
        kubectl rollout status deployment/$DEPLOYMENT_NAME
        kubectl get services -o wide

</code></pre>
<p>but when the workflow gets to the deploy part, it shows an error</p>
<pre><code>The Service &quot;ems-app-service&quot; is invalid: metadata.resourceVersion: Invalid value: &quot;&quot;: must be specified for an update
</code></pre>
<p>Now i have searched that this is actually not true because the resourceVersion is supposed to change for every update so i just removed it</p>
<p>Here is my kustomization.yaml</p>
<pre><code>apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

resources:
  - service.yaml
  - deployment.yaml
</code></pre>
<p>my deployment.yaml</p>
<pre><code>apiVersion: apps/v1
kind: Deployment
metadata:
  annotations:
    deployment.kubernetes.io/revision: &quot;1&quot;
  generation: 1
  labels:
    app: ems-app
  name: ems-app
  namespace: default
spec:
  progressDeadlineSeconds: 600
  replicas: 3
  revisionHistoryLimit: 10
  selector:
    matchLabels:
      app: ems-app
  strategy:
    rollingUpdate:
      maxSurge: 25%
      maxUnavailable: 25%
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: ems-app
    spec:
      containers:
      - image: gcr.io/ciputra-nusantara/ems@sha256:70c34c5122039cb7fa877fa440fc4f98b4f037e06c2e0b4be549c4c992bcc86c
        imagePullPolicy: IfNotPresent
        name: ems-sha256-1
        resources: {}
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
      dnsPolicy: ClusterFirst
      restartPolicy: Always
      schedulerName: default-scheduler
      securityContext: {}
      terminationGracePeriodSeconds: 30

</code></pre>
<p>and my service.yaml</p>
<pre><code>apiVersion: v1
kind: Service
metadata:
  annotations:
    cloud.google.com/neg: '{&quot;ingress&quot;:true}'
  finalizers:
  - service.kubernetes.io/load-balancer-cleanup
  labels:
    app: ems-app
  name: ems-app-service
  namespace: default
spec:
  clusterIP: 10.88.10.114
  clusterIPs:
  - 10.88.10.114
  externalTrafficPolicy: Cluster
  ipFamilies:
  - IPv4
  ipFamilyPolicy: SingleStack
  ports:
  - nodePort: 30261
    port: 80
    protocol: TCP
    targetPort: 80
  selector:
    app: ems-app
  sessionAffinity: None
  type: LoadBalancer
status:
  loadBalancer:
    ingress:
    - ip: 34.143.255.159

</code></pre>

<p>As the title of this question is more Kubernetes related than GCP related, I will answer since I had this same problem using AWS EKS.</p>
<p><code>How to fix metadata.resourceVersion: Invalid value: 0x0: must be specified for an update</code> is an error that may appear when using <code>kubectl apply</code></p>
<p><code>Kubectl apply</code> makes a <a href="https://kubernetes.io/docs/tasks/manage-kubernetes-objects/declarative-config/" rel="noreferrer">three-way-merge</a> between your local file, the live kubernetes object manifest and the annotation <code>kubectl.kubernetes.io/last-applied-configuration</code> in that live object manifest.</p>
<p>So, for some reason, the value <code>resourceVersion</code> managed to be written in your <code>last-applied-configuration</code>, probably because of someone exporting the live manifests to a file, modifying it, and applying it back again.</p>
<p>When you try to apply your new local file that doesn't have that value -and should not have it-, but the value is present in the <code>last-applied-configuration</code>, it thinks it should be removed from thye live manifest and specifically send it in the subsequent <code>patch</code> operation like <code>resourceVersion: null</code>, which should get rid of it. But it won't work and the local file breakes the rules (out of my knowledge as now) and becomes invalid.</p>
<p>As <a href="https://feichashao.com/kubectl-apply-fail/" rel="noreferrer">feichashao</a> mentions, the way to solve it is to delete the <code>last-applied-configuration</code> annotation and apply again your local file.</p>
<p>Once you did solved, you <code>kubectl apply</code> output will be like:</p>
<pre><code>Warning: resource &lt;your_resource&gt; is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.
</code></pre>
<p>And your live manifests will be updated.</p>
