Hi Kritis Team,
I am trying to setup Grafeas and Kritis Standalone setup in AWS EKS cluster v1.27.0
The error i am facing is working fine in v1.18 version and it's not even working in v1.19+ k8s.
I can see that this issue is still in open and i am not getting any proper docs to solve that issue..just need a clarity whether this issue is solved or not???
time="2023-06-08T08:02:20Z" level=info msg="contents of /var/run/secrets/kubernetes.io/serviceaccount/namespace: default"
time="2023-06-08T08:02:20Z" level=info msg="running preinstall\nversion v0.2.2\ncommit: bea073f"
Error from server (NotFound): certificatesigningrequests.certificates.k8s.io "tls-webhook-secret-cert" not found
Error from server (NotFound): secrets "tls-webhook-secret" not found
time="2023-06-08T08:02:20Z" level=info msg="[cfssl genkey -]"
time="2023-06-08T08:02:20Z" level=info msg="{"csr":"-----BEGIN CERTIFICATE REQUEST-----\nMIICFzCCAbwCAQAwADBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABP35F/7UYI5U\n+pemIneq8syPmjGK4smHznGFda7huCT7drtKy6jpQpHNCCpZkkxJR7wDTPZKR8kB\n470OGc+TFyigggFYMIIBVAYJKoZIhvcNAQkOMYIBRTCCAUEwggE9BgNVHREEggE0\nMIIBMIIWa3JpdGlzLXZhbGlkYXRpb24taG9va4Iia3JpdGlzLXZhbGlkYXRpb24t\naG9vay5rdWJlLXN5c3RlbYIea3JpdGlzLXZhbGlkYXRpb24taG9vay5kZWZhdWx0\ngiJrcml0aXMtdmFsaWRhdGlvbi1ob29rLmRlZmF1bHQuc3ZjgiJrcml0aXMtdmFs\naWRhdGlvbi1ob29rLWRlcGxveW1lbnRzgi5rcml0aXMtdmFsaWRhdGlvbi1ob29r\nLWRlcGxveW1lbnRzLmt1YmUtc3lzdGVtgiprcml0aXMtdmFsaWRhdGlvbi1ob29r\nLWRlcGxveW1lbnRzLmRlZmF1bHSCLmtyaXRpcy12YWxpZGF0aW9uLWhvb2stZGVw\nbG95bWVudHMuZGVmYXVsdC5zdmMwCgYIKoZIzj0EAwIDSQAwRgIhAIzUYI8088U9\nVuA3BPhV39LmQv1bjk0jH9Nf9iFpXHtdAiEA1UpTKaVFEdVHk2Br2whx61h/euvo\nwSo5pKmKEmqzmIU=\n-----END CERTIFICATE REQUEST-----\n","key":"-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIHiBBHaPWL29ZAaBxiJQ5S3mTdmczgvfbqCByFC+TEukoAoGCCqGSM49\nAwEHoUQDQgAE/fkX/tRgjlT6l6Yid6ryzI+aMYriyYfOcYV1ruG4JPt2u0rLqOlC\nkc0IKlmSTElHvANM9kpHyQHjvQ4Zz5MXKA==\n-----END EC PRIVATE KEY-----\n"}\n"
time="2023-06-08T08:02:20Z" level=info msg="[cfssljson -bare server]"
time="2023-06-08T08:02:20Z" level=info
apiVersion: certificates.k8s.io/v1beta1
kind: CertificateSigningRequest
metadata:
name: tls-webhook-secret-cert
labels:
kritis.grafeas.io/install: ""
spec:
groups:
- system:authenticated
request: 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
usages:
- digital signature
- key encipherment
- server auth
time="2023-06-08T08:02:21Z" level=info msg="[kubectl apply -f -]"
time="2023-06-08T08:02:21Z" level=info
time="2023-06-08T08:02:21Z" level=error msg="error: unable to recognize "STDIN": no matches for kind "CertificateSigningRequest" in version "certificates.k8s.io/v1beta1"\n"
time="2023-06-08T08:02:21Z" level=fatal msg="exit status 1"
@aysylu @dragon3
Hi Kritis Team,
I am trying to setup Grafeas and Kritis Standalone setup in AWS EKS cluster v1.27.0
The error i am facing is working fine in v1.18 version and it's not even working in v1.19+ k8s.
I can see that this issue is still in open and i am not getting any proper docs to solve that issue..just need a clarity whether this issue is solved or not???
time="2023-06-08T08:02:20Z" level=info msg="contents of /var/run/secrets/kubernetes.io/serviceaccount/namespace: default"
time="2023-06-08T08:02:20Z" level=info msg="running preinstall\nversion v0.2.2\ncommit: bea073f"
Error from server (NotFound): certificatesigningrequests.certificates.k8s.io "tls-webhook-secret-cert" not found
Error from server (NotFound): secrets "tls-webhook-secret" not found
time="2023-06-08T08:02:20Z" level=info msg="[cfssl genkey -]"
time="2023-06-08T08:02:20Z" level=info msg="{"csr":"-----BEGIN CERTIFICATE REQUEST-----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\nwSo5pKmKEmqzmIU=\n-----END CERTIFICATE REQUEST-----\n","key":"-----BEGIN EC PRIVATE KEY-----\nMHcCAQEEIHiBBHaPWL29ZAaBxiJQ5S3mTdmczgvfbqCByFC+TEukoAoGCCqGSM49\nAwEHoUQDQgAE/fkX/tRgjlT6l6Yid6ryzI+aMYriyYfOcYV1ruG4JPt2u0rLqOlC\nkc0IKlmSTElHvANM9kpHyQHjvQ4Zz5MXKA==\n-----END EC PRIVATE KEY-----\n"}\n"
time="2023-06-08T08:02:20Z" level=info msg="[cfssljson -bare server]"
time="2023-06-08T08:02:20Z" level=info
apiVersion: certificates.k8s.io/v1beta1
kind: CertificateSigningRequest
metadata:
name: tls-webhook-secret-cert
labels:
kritis.grafeas.io/install: ""
spec:
groups:
- system:authenticated
request: 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
usages:
- digital signature
- key encipherment
- server auth
time="2023-06-08T08:02:21Z" level=info msg="[kubectl apply -f -]"
time="2023-06-08T08:02:21Z" level=info
time="2023-06-08T08:02:21Z" level=error msg="error: unable to recognize "STDIN": no matches for kind "CertificateSigningRequest" in version "certificates.k8s.io/v1beta1"\n"
time="2023-06-08T08:02:21Z" level=fatal msg="exit status 1"
@aysylu @dragon3