Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

k8s1.22 部署web.yaml失败.Internal error occurred: failed calling webhook "mutating.lxcfs-admission-webhook.aliyun.com": failed to call webhook: Post "https://lxcfs-admission-webhook-svc.default.svc:443/mutate?timeout=10s": x509: certificate specifies an incompatible key usage #26

Open
its-space opened this issue Jun 1, 2022 · 2 comments

Comments

@its-space
Copy link

Internal error occurred: failed calling webhook "mutating.lxcfs-admission-webhook.aliyun.com": failed to call webhook: Post "https://lxcfs-admission-webhook-svc.default.svc:443/mutate?timeout=10s": x509: certificate specifies an incompatible key usage

@its-space its-space changed the title 部署web.yaml失败 k8s1.22 部署web.yaml失败.Internal error occurred: failed calling webhook "mutating.lxcfs-admission-webhook.aliyun.com": failed to call webhook: Post "https://lxcfs-admission-webhook-svc.default.svc:443/mutate?timeout=10s": x509: certificate specifies an incompatible key usage Jun 1, 2022
@ishallbethat
Copy link

any update ?
I have this error too

@ishallbethat
Copy link

ishallbethat commented Oct 14, 2022

I found the register cert with kubernetes api is misleading. Nothing to do with k8s version.
https://github.com/denverdino/lxcfs-admission-webhook/blob/master/deployment/webhook-create-signed-cert.sh#L87

Just to create a tls with openssl is enough.Like below
https://pet2cattle.com/2021/08/kubernetes-mutating-webhook

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants