cert-manager webhook not reachable

[Dhinesh-devops]

While installing Kubeflow using the following command:

while ! kustomize build example | kubectl apply -f -; do echo "Retrying to apply resources"; sleep 10; done

I am having following errors in a loop :

Error from server (InternalError): error when creating "STDIN": Internal error occurred: failed calling webhook "webhook.cert-manager.io": failed to call webhook: Post "https://cert-manager-webhook.cert-manager.svc:443/mutate?timeout=10s": dial tcp 10.102.59.155:443: connect: no route to host

here are my kubectl version

WARNING: This version information is deprecated and will be replaced with the output from kubectl version --short.  Use --output=yaml|json to get the full version.
Client Version: version.Info{Major:"1", Minor:"26", GitVersion:"v1.26.11", GitCommit:"3cd242c51317aed8858119529ccab22079f523b1", GitTreeState:"clean", BuildDate:"2023-11-15T17:00:54Z", GoVersion:"go1.20.11", Compiler:"gc", Platform:"linux/amd64"}
Kustomize Version: v4.5.7
Server Version: version.Info{Major:"1", Minor:"26", GitVersion:"v1.26.11", GitCommit:"3cd242c51317aed8858119529ccab22079f523b1", GitTreeState:"clean", BuildDate:"2023-11-15T16:50:12Z", GoVersion:"go1.20.11", Compiler:"gc", Platform:"linux/amd64"}

kustomize version

v5.3.0

Here are my pods by kubectl get pods -A

**kubectl get ns**

kubectl get pods -n cert-manager

kubectl get nodes

kubectl describe node node1

Can you help to fix this issue

[Dhinesh-devops]

Any help would be great !!

[juliusvonkohout]

"dial tcp 10.102.59.155:443: connect: no route to host" looks like a kubetnetes level issue

[juliusvonkohout]

There are also commercial distributions and consultants available if needed.

[deltawi]

I am facing the same issue installing this on my local kubernetes cluster.

[RmKuma]

Hi guys,

I was suffered the same issue,

in my case, the reason was custom CNI (especially, calico). please refer this page https://cert-manager.io/docs/troubleshooting/webhook/#cause-2-eks-on-a-custom-cni

When i install calico at my cluster, i used helm and added below options. Then, kubeflow works!! --set webhook.hostNetwork=true --set webhook.securePort=10260

[juliusvonkohout]

Please try the master branch with the new readme and create a new issue if necessary