search

kubernetes-sigs / aws-load-balancer-controller

A Kubernetes controller for Elastic Load Balancers
https://kubernetes-sigs.github.io/aws-load-balancer-controller/
Apache License 2.0
3.93k stars 1.46k forks source link

Failed remove finalizer due to Internal error occurred: failed calling webhook #3337

Closed nikitadtastewise closed 1 year ago

nikitadtastewise commented 1 year ago

Describe the bug After update form 2.4.6 to 2.5.4 version Controller can not create Ingress. Error: Failed remove finalizer due to Internal error occurred: failed calling webhook "mtargetgroupbinding.elbv2.k8s.aws": failed to call webhook: Post "https://aws-load-balancer-webhook-service.kube-system.svc:443/mutate-elbv2-k8s-aws-v1beta1-targetgroupbinding?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "aws-load-balancer-controller-ca") Steps to reproduce

Expected outcome A concise description of what you expected to happen.

Environment

nikitadtastewise commented 1 year ago

There is process update TLS cert which breaks webhook every 23 hours. If ALB Ingress Controller resources are recreated, all good.