Error: failed to call webhook while deploying NGINX Kubernetes Gateway

[bluedog13]

Describe the bug I get the below error

Error from server (InternalError): error when creating "deploy/manifests/gatewayclass.yaml": Internal error occurred: failed calling webhook "validate.gateway.networking.k8s.io": failed to call webhook: Post "https://gateway-api-admission-server.gateway-system.svc:443/validate?timeout=10s": service "gateway-api-admission-server" not found

To Reproduce I am following the steps mentioned here to deploy NGINX Kubernetes Gateway. I see the above error at the below step

5. Create the GatewayClass resource:
kubectl apply -f deploy/manifests/nginx-gateway.yaml

Expected behavior Should be able to deploy NGINX Kubernetes Gateway

Your environment

• Version of the NGINX Kubernetes Gateway - release version or a specific commit. The first line of the nginx-gateway container logs includes the commit info.
• Version of Kubernetes

  Client Version: version.Info{Major:"1", Minor:"25", GitVersion:"v1.25.2", GitCommit:"5835544ca568b757a8ecae5c153f317e5736700e", GitTreeState:"clean", BuildDate:"2022-09-21T14:33:49Z", GoVersion:"go1.19.1", Compiler:"gc", Platform:"darwin/amd64"}
  Kustomize Version: v4.5.7
  Server Version: version.Info{Major:"1", Minor:"25", GitVersion:"v1.25.3", GitCommit:"434bfd82814af038ad94d62ebe59b133fcb50506", GitTreeState:"clean", BuildDate:"2022-10-25T19:35:11Z", GoVersion:"go1.19.2", Compiler:"gc", Platform:"linux/amd64"}

• Kubernetes platform (e.g. Mini-kube or GCP)

  kind v0.17.0 go1.19.2 darwin/amd64

• Details on how you expose the NGINX Gateway Pod (e.g. Service of type LoadBalancer or port-forward)
• Logs of NGINX container: kubectl -n nginx-gateway logs -l app=nginx-gateway -c nginx
• NGINX Configuration: kubectl -n nginx-gateway exec <gateway-pod> -c nginx -- nginx -T

Additional context Add any other context about the problem here. Any log files you want to share.

Aha! Link: https://nginx.aha.io/features/NKG-22

[pleshakov]

Hi @bluedog13

As part of the standard Gateway API installation -- https://gateway-api.sigs.k8s.io/guides/#install-standard-channel -- it installs the weebhook (https://github.com/kubernetes-sigs/gateway-api/tree/v0.5.1/config/webhook) . The error Error from server (InternalError): error when creating "deploy/manifests/gatewayclass.yaml": Internal error occurred: failed calling webhook "validate.gateway.networking.k8s.io": failed to call webhook: Post "https://gateway-api-admission-server.gateway-system.svc:443/validate?timeout=10s": service "gateway-api-admission-server" not found indicates that the webhook wasn't fully installed - the service wasn't created. I suggest reinstalling it.

At the same time, to try NGINX Kubernetes Gateway, it is not necessary to deploy the webhook -- so you can just deploy CRDs without the webhook, as described in step 2 https://github.com/nginxinc/nginx-kubernetes-gateway/blob/main/docs/installation.md#deploy-nginx-kubernetes-gateway , but make sure to remove any installed webhook-related resources.

[bluedog13]

Thank you for the reply.

I did follow all the steps 1-4 before applying step 5. The error I came across was on step 5.

[pleshakov]

@bluedog13 I suggest removing any installed webhook-related files and try to install NGINX Gateway again. This way the API server will not try to validate any resources using the webhook and you won't see that error.

[pleshakov]

closing this issue due to inactivity