How to reconfigure k8ssandra to point to https://abc-cert-manager-webhook.cert-manager.svc/. instead of https://cert-manager-

K8ssandra help
1

We have cert-manager preinstalled on our aws k8 cluster. When I try to install k8ssandra-operator in our cluster using below command, we get below error.

helm install k8ssandra-operator k8ssandra/k8ssandra-operator -n k8ssandra-operator --create-namespace

Error: INSTALLATION FAILED: Internal error occurred: failed calling webhook “webhook.cert-manager.io”: failed to call webhook: Post “https://cert-manager-webhook.cert-manager.svc/mutate?timeout=10s”: service “cert-manager-webhook” not found

Our cert-manager web hook service is abc-cert-manager-webhook
e.g →

kubectl get svc -n cert-manager

NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
abc-cert-manager ClusterIP
abc-cert-manager-webhook

How to reconfigure k8ssandra to point to https://abc-cert-manager-webhook.cert-manager.svc/. instead of https://cert-manager-webhook.cert-manager.svc/ ?

2

Hey,

This address isn’t coming from our installation, but from cert-manager itself (the way it registers the webhook for the APIs). We only push Certificate / Issuer to the Kubernetes API and that has no knowledge of the location of the webhook. Kubernetes itself finds out the registered address and tries to call it.

It’s registered by cert-manager in the MutatingWebhookConfiguration, for example the default installation has:

webhooks:

Perhaps your installation of cert-manager is missing something?

  • Micke