MountVolume.SetUp failed for volume "kfserving-webhook-server-cert" : secret "kfserving-webhook-server-cert" not found

[wenjunGU]

我的k8s版本是1.18.3，然后一直都有三个pod起不来，报找不到密文的错误。后面查到了yaml中这些内容。 apiVersion: cert-manager.io/v1alpha2 kind: Certificate metadata: labels: app: kfserving app.kubernetes.io/component: kfserving app.kubernetes.io/name: kfserving kustomize.component: kfserving name: serving-cert namespace: kubeflow spec: commonName: kfserving-webhook-server-service.kubeflow.svc dnsNames:

• kfserving-webhook-server-service.kubeflow.svc issuerRef: kind: Issuer name: selfsigned-issuer secretName: kfserving-webhook-server-cert

  apiVersion: cert-manager.io/v1alpha2 kind: Certificate metadata: name: katib-webhook-cert namespace: kubeflow spec: commonName: katib-controller.kubeflow.svc dnsNames:

• katib-controller.kubeflow.svc

• katib-controller.kubeflow.svc.cluster.local isCA: true issuerRef: kind: Issuer name: katib-selfsigned-issuer secretName: katib-webhook-cert

  apiVersion: cert-manager.io/v1alpha2 kind: Certificate metadata: labels: app: poddefaults app.kubernetes.io/component: poddefaults app.kubernetes.io/name: poddefaults kustomize.component: poddefaults name: admission-webhook-cert namespace: kubeflow spec: commonName: admission-webhook-service.kubeflow.svc dnsNames:

• admission-webhook-service.kubeflow.svc
• admission-webhook-service.kubeflow.svc.cluster.local isCA: true issuerRef: kind: Issuer name: admission-webhook-selfsigned-issuer secretName: webhook-certs

但是也无法apply进去。尝试create的时候会报如下错误。请问这个有解决办法吗？ Error from server (InternalError): error when creating "rbac.yaml": Internal error occurred: failed calling webhook "webhook.cert-manager.io": mutations.webhook.cert-manager.io is forbidden: User "system:metrics-server" cannot create resource "mutations" in API group "webhook.cert-manager.io" at the cluster scope Error from server (InternalError): error when creating "rbac.yaml": Internal error occurred: failed calling webhook "webhook.cert-manager.io": mutations.webhook.cert-manager.io is forbidden: User "system:metrics-server" cannot create resource "mutations" in API group "webhook.cert-manager.io" at the cluster scope Error from server (InternalError): error when creating "rbac.yaml": Internal error occurred: failed calling webhook "webhook.cert-manager.io": mutations.webhook.cert-manager.io is forbidden: User "system:metrics-server" cannot create resource "mutations" in API group "webhook.cert-manager.io" at the cluster scope

并且我的cert-manager的三个pod也都正常启动，并且没有任何报错信息。

[zy410692]

看一下apiserver 里面加下这个配置能不能解决 ？--enable-admission-plugins=MutatingAdmissionWebhook,ValidatingAdmissionWebhook