Skip to content

csr job failed #3

@Rinshad

Description

@Rinshad

I am getting below error when I try to deploy the cert manager.

$ kubectl logs -f webhook-cert-setup-9pzr8 Generating RSA private key, 2048 bit long modulus (2 primes) creating certs in tmpdir /tmp/tmp.PIKoDA ...................+++++ ................................+++++ e is 65537 (0x010001) creating csr: hello-webhook-service.default NAME AGE SIGNERNAME REQUESTOR CONDITION hello-webhook-service.default 15s kubernetes.io/legacy-unknown system:serviceaccount:default:webhook-cert-sa Pending certificatesigningrequest.certificates.k8s.io "hello-webhook-service.default" deleted WARN: Previous CSR was found and removed. certificatesigningrequest.certificates.k8s.io/hello-webhook-service.default created NAME AGE SIGNERNAME REQUESTOR CONDITION hello-webhook-service.default 0s kubernetes.io/legacy-unknown system:serviceaccount:default:webhook-cert-sa Pending No resources found Error from server (Forbidden): certificatesigningrequests.certificates.k8s.io "hello-webhook-service.default" is forbidden: user not permitted to approve requests with signerName "kubernetes.io/legacy-unknown"

Kubernetes version = v1.21.0

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions