search

denverdino / lxcfs-admission-webhook

Apache License 2.0
158 stars 81 forks source link

k8s1.22 部署web.yaml失败.Internal error occurred: failed calling webhook "mutating.lxcfs-admission-webhook.aliyun.com": failed to call webhook: Post "https://lxcfs-admission-webhook-svc.default.svc:443/mutate?timeout=10s": x509: certificate specifies an incompatible key usage #26

Open its-space opened 2 years ago

its-space commented 2 years ago

Internal error occurred: failed calling webhook "mutating.lxcfs-admission-webhook.aliyun.com": failed to call webhook: Post "https://lxcfs-admission-webhook-svc.default.svc:443/mutate?timeout=10s": x509: certificate specifies an incompatible key usage

ishallbethat commented 2 years ago

any update ? I have this error too

ishallbethat commented 2 years ago

I found the register cert with kubernetes api is misleading. Nothing to do with k8s version. https://github.com/denverdino/lxcfs-admission-webhook/blob/master/deployment/webhook-create-signed-cert.sh#L87

Just to create a tls with openssl is enough.Like below https://pet2cattle.com/2021/08/kubernetes-mutating-webhook