grafeas / kritis

Deploy-time Policy Enforcer for Kubernetes applications
https://github.com/grafeas/kritis/blob/master/docs/binary-authorization.md
Apache License 2.0
694 stars 134 forks source link

Installation Failed in k8s v1.27 #630

Open Jayakumar6 opened 1 year ago

Jayakumar6 commented 1 year ago

Hi Kritis Team,

I am trying to setup Grafeas and Kritis Standalone setup in AWS EKS cluster v1.27.0 The error i am facing is working fine in v1.18 version and it's not even working in v1.19+ k8s. I can see that this issue is still in open and i am not getting any proper docs to solve that issue..just need a clarity whether this issue is solved or not???

time="2023-06-08T08:02:20Z" level=info msg="contents of /var/run/secrets/kubernetes.io/serviceaccount/namespace: default" time="2023-06-08T08:02:20Z" level=info msg="running preinstall\nversion v0.2.2\ncommit: bea073f2a2f299af94363dc399b7780fde8f2afc" Error from server (NotFound): certificatesigningrequests.certificates.k8s.io "tls-webhook-secret-cert" not found Error from server (NotFound): secrets "tls-webhook-secret" not found time="2023-06-08T08:02:20Z" level=info msg="[cfssl genkey -]" time="2023-06-08T08:02:20Z" level=info msg="{\"csr\":\"-----BEGIN CERTIFICATE REQUEST-----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\nwSo5pKmKEmqzmIU=\n-----END CERTIFICATE REQUEST-----\n\",\"key\":\"-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIHiBBHaPWL29ZAaBxiJQ5S3mTdmczgvfbqCByFC+TEukoAoGCCqGSM49\nAwEHoUQDQgAE/fkX/tRgjlT6l6Yid6ryzI+aMYriyYfOcYV1ruG4JPt2u0rLqOlC\nkc0IKlmSTElHvANM9kpHyQHjvQ4Zz5MXKA==\n-----END EC PRIVATE KEY-----\n\"}\n" time="2023-06-08T08:02:20Z" level=info msg="[cfssljson -bare server]" time="2023-06-08T08:02:20Z" level=info apiVersion: certificates.k8s.io/v1beta1 kind: CertificateSigningRequest metadata: name: tls-webhook-secret-cert labels: kritis.grafeas.io/install: "" spec: groups:

@aysylu @dragon3