ayamGelo

> Hey, thanks for the report. > > For the first point, `kumactl install` checks secret in kuma-system namespace so we don't override the secret when we upgrade with it....

> Are you transforming a standalone default install into a global install? I might be wrong but I think the secrets might just be different. Have you looked at the...

> `failed calling webhook "namespace-kuma-injector.kuma.io"` maybe the expected, `data-plane` still created in `global-cp` but not connected, i don't know how this blocking works with changing certificate or delete the webhook...

> Maybe the upgrade didn't delete the webhooks. That's something to look into I try it with fresh install too, with values to make them `global-cp` in multi-zone mode, Because...

> [We fixed the charts so that no webhooks are created in global mode](https://github.com/kumahq/kuma/pull/4673) > > @ayamGelo that should cover the issue with the failing webhook. Does that cover everything?...