Crossplane "cannot resolve package dependencies" in CI

By Daniel Zoghalchali·Latchkey

Configuration and Provider packages declare dependsOn other packages with version constraints. If those constraints cannot be satisfied against what is installed or pullable, the package manager reports it cannot resolve dependencies and the package stays unhealthy.

What this error means

A Configuration or Provider stays HEALTHY False with an event "cannot resolve package dependencies" naming a dependency and constraint.

cannot resolve package dependencies: cannot resolve dependencies:
missing dependency xpkg.upbound.io/upbound/provider-aws-s3
incompatible dependencies: existing provider-family-aws v1.2.0 does not satisfy >=v1.5.0

Common causes

A dependency version constraint is unsatisfiable

An installed dependency is older than a dependsOn >= constraint, and no compatible upgrade is allowed, so resolution fails.

A dependency cannot be pulled

The declared dependency image or tag does not exist or is unreachable, so the manager cannot resolve it.

How to fix it

Upgrade the conflicting dependency

1. Read which dependency and constraint the event names.
2. Upgrade the installed dependency to a version that satisfies the constraint.
3. Wait for the Configuration/Provider to become healthy.

kubectl get providers,configurations
kubectl describe configuration platform-ref-aws | sed -n '/Events/,$p'

Pin compatible dependency versions

Set explicit, compatible versions across the dependent packages so the manager has a resolvable set.

spec:
  package: xpkg.upbound.io/upbound/provider-aws-s3:v1.5.0

How to prevent it

• Pin compatible versions across dependent packages.
• Upgrade dependencies together so constraints stay satisfiable.
• Verify dependency images and tags exist before installing.

Frequently asked questions

Related guides

References

• Terraform documentation
• GitHub Actions documentation