search

kelseyhightower / grafeas-tutorial

A step by step guide for getting started with Grafeas and Kubernetes.
Apache License 2.0
190 stars 45 forks source link

Error applying pods/echod: admission webhook denied the request without explanation #8

Closed dansepp closed 6 years ago

dansepp commented 6 years ago

When I run the following, I get the error:

$ kubectl apply -f pods/echod.yaml Error from server: error when creating "pods/echod.yaml": admission webhook "image-signature.hightowerlabs.com" denied the request without explanation

The nginx pod creation is denied, as expected. I don't see anything obvious in the pod logs.

My kubectl version:

$ kubectl version Client Version: version.Info{Major:"1", Minor:"10", GitVersion:"v1.10.3", GitCommit:"2bba0127d85d5a46ab4b778548be28623b32d0b0", GitTreeState:"clean", BuildDate:"2018-05-21T09:17:39Z", GoVersion:"go1.9.3", Compiler:"gc", Platform:"windows/amd64"} Server Version: version.Info{Major:"1", Minor:"10", GitVersion:"v1.10.3", GitCommit:"2bba0127d85d5a46ab4b778548be28623b32d0b0", GitTreeState:"clean", BuildDate:"2018-05-21T09:05:37Z", GoVersion:"go1.9.3", Compiler:"gc", Platform:"linux/amd64"}

dansepp commented 6 years ago

Tried a different k8s cluster (AWS EKS running k8s v1.10.3), and everything worked as expected. Cluster which was returning this error was a Heptio cluster (k8s v1.10.3)...finally figured out the admission controller webhook wasn't configured properly.