k8s-hello-mutating-webhook icon indicating copy to clipboard operation
k8s-hello-mutating-webhook copied to clipboard

csr job failed

Open Rinshad opened this issue 3 years ago • 0 comments
trafficstars

I am getting below error when I try to deploy the cert manager.

$ kubectl logs -f webhook-cert-setup-9pzr8 Generating RSA private key, 2048 bit long modulus (2 primes) creating certs in tmpdir /tmp/tmp.PIKoDA ...................+++++ ................................+++++ e is 65537 (0x010001) creating csr: hello-webhook-service.default NAME AGE SIGNERNAME REQUESTOR CONDITION hello-webhook-service.default 15s kubernetes.io/legacy-unknown system:serviceaccount:default:webhook-cert-sa Pending certificatesigningrequest.certificates.k8s.io "hello-webhook-service.default" deleted WARN: Previous CSR was found and removed. certificatesigningrequest.certificates.k8s.io/hello-webhook-service.default created NAME AGE SIGNERNAME REQUESTOR CONDITION hello-webhook-service.default 0s kubernetes.io/legacy-unknown system:serviceaccount:default:webhook-cert-sa Pending No resources found Error from server (Forbidden): certificatesigningrequests.certificates.k8s.io "hello-webhook-service.default" is forbidden: user not permitted to approve requests with signerName "kubernetes.io/legacy-unknown"

Kubernetes version = v1.21.0

Rinshad avatar Mar 04 '22 12:03 Rinshad