Hello World!
I’m trying to install cert-manager application, yet running into following message:
Something went wrong while installing Cert-Manager
- Operation failed. Check pod logs for install-certmanager for more details.
logs from install-certmanager pod (aka details):
$ kubectl logs -n gitlab-managed-apps install-certmanager
+ helm init --upgrade
Creating /root/.helm
Creating /root/.helm/repository
Creating /root/.helm/repository/cache
Creating /root/.helm/repository/local
Creating /root/.helm/plugins
Creating /root/.helm/starters
Creating /root/.helm/cache/archive
Creating /root/.helm/repository/repositories.yaml
Adding stable repo with URL: https://kubernetes-charts.storage.googleapis.com
Adding local repo with URL: http://127.0.0.1:8879/charts
$HELM_HOME has been configured at /root/.helm.
Tiller (the Helm server-side component) has been updated to gcr.io/kubernetes-helm/tiller:v2.16.1 .
+ seq 1 30
+ helm version --tls --tls-ca-cert /data/helm/certmanager/config/ca.pem --tls-cert /data/helm/certmanager/config/cert.pem --tls-key /data/helm/certmanager/config/key.pem
Client: &version.Version{SemVer:"v2.16.1", GitCommit:"bbdfe5e7803a12bbdf97e94cd847859890cf4050", GitTreeState:"clean"}
Server: &version.Version{SemVer:"v2.16.1", GitCommit:"bbdfe5e7803a12bbdf97e94cd847859890cf4050", GitTreeState:"clean"}
+ s=0
+ break
+ exit 0
+ helm repo add certmanager https://charts.jetstack.io
"certmanager" has been added to your repositories
+ helm repo update
Hang tight while we grab the latest from your chart repositories...
...Skip local chart repository
...Successfully got an update from the "certmanager" chart repository
...Successfully got an update from the "stable" chart repository
Update Complete.
+ kubectl apply -f https://raw.githubusercontent.com/jetstack/cert-manager/release-0.9/deploy/manifests/00-crds.yaml
customresourcedefinition.apiextensions.k8s.io/certificates.certmanager.k8s.io configured
customresourcedefinition.apiextensions.k8s.io/certificaterequests.certmanager.k8s.io configured
customresourcedefinition.apiextensions.k8s.io/challenges.certmanager.k8s.io configured
customresourcedefinition.apiextensions.k8s.io/clusterissuers.certmanager.k8s.io configured
customresourcedefinition.apiextensions.k8s.io/issuers.certmanager.k8s.io configured
customresourcedefinition.apiextensions.k8s.io/orders.certmanager.k8s.io configured
+ kubectl label --overwrite namespace gitlab-managed-apps 'certmanager.k8s.io/disable-validation=true'
namespace/gitlab-managed-apps not labeled
+ helm upgrade certmanager certmanager/cert-manager --install --reset-values --tls --tls-ca-cert /data/helm/certmanager/config/ca.pem --tls-cert /data/helm/certmanager/config/cert.pem --tls-key /data/helm/certmanager/config/key.pem --version v0.9.1 --set 'rbac.create=true,rbac.enabled=true' --namespace gitlab-managed-apps -f /data/helm/certmanager/config/values.yaml
E0215 18:56:12.721393 42 portforward.go:372] error copying from remote stream to local connection: readfrom tcp4 127.0.0.1:45041->127.0.0.1:50416: write tcp4 127.0.0.1:45041->127.0.0.1:50416: write: broken pipe
Release "certmanager" has been upgraded.
LAST DEPLOYED: Sat Feb 15 18:56:12 2020
NAMESPACE: gitlab-managed-apps
STATUS: DEPLOYED
RESOURCES:
==> v1/ClusterRole
NAME AGE
certmanager-cert-manager-edit 37h
certmanager-cert-manager-view 37h
certmanager-webhook:webhook-requester 37h
==> v1/Deployment
NAME AGE
certmanager-cainjector 37h
certmanager-cert-manager 37h
certmanager-webhook 37h
==> v1/Pod(related)
NAME AGE
certmanager-cainjector-58d455db44-g2nq6 37h
certmanager-cert-manager-576b787ffb-bg8vp 37h
certmanager-webhook-585d7cf9fb-gltdq 37h
==> v1/Service
NAME AGE
certmanager-webhook 37h
==> v1/ServiceAccount
NAME AGE
certmanager-cainjector 37h
certmanager-cert-manager 37h
certmanager-webhook 37h
==> v1alpha1/Certificate
NAME AGE
certmanager-webhook-ca 37h
certmanager-webhook-webhook-tls 37h
==> v1alpha1/Issuer
NAME AGE
certmanager-webhook-ca 37h
certmanager-webhook-selfsign 37h
==> v1beta1/APIService
NAME AGE
v1beta1.admission.certmanager.k8s.io 1s
==> v1beta1/ClusterRole
NAME AGE
certmanager-cainjector 37h
certmanager-cert-manager-controller-certificates 37h
certmanager-cert-manager-controller-challenges 37h
certmanager-cert-manager-controller-clusterissuers 37h
certmanager-cert-manager-controller-ingress-shim 37h
certmanager-cert-manager-controller-issuers 37h
certmanager-cert-manager-controller-orders 37h
certmanager-cert-manager-leaderelection 37h
==> v1beta1/ClusterRoleBinding
NAME AGE
certmanager-cainjector 37h
certmanager-cert-manager-controller-certificates 37h
certmanager-cert-manager-controller-challenges 37h
certmanager-cert-manager-controller-clusterissuers 37h
certmanager-cert-manager-controller-ingress-shim 37h
certmanager-cert-manager-controller-issuers 37h
certmanager-cert-manager-controller-orders 37h
certmanager-cert-manager-leaderelection 37h
certmanager-webhook:auth-delegator 37h
==> v1beta1/RoleBinding
NAME AGE
certmanager-webhook:webhook-authentication-reader 37h
==> v1beta1/ValidatingWebhookConfiguration
NAME AGE
certmanager-webhook 37h
NOTES:
cert-manager has been deployed successfully!
In order to begin issuing certificates, you will need to set up a ClusterIssuer
or Issuer resource (for example, by creating a 'letsencrypt-staging' issuer).
More information on the different types of issuers and how to configure them
can be found in our documentation:
https://docs.cert-manager.io/en/latest/reference/issuers.html
For information on how to configure cert-manager to automatically provision
Certificates for Ingress resources, take a look at the `ingress-shim`
documentation:
https://docs.cert-manager.io/en/latest/reference/ingress-shim.html
+ seq 1 90
+ kubectl apply -f /data/helm/certmanager/config/cluster_issuer.yaml
Error from server (InternalError): error when creating "/data/helm/certmanager/config/cluster_issuer.yaml": Internal error occurred: failed calling webhook "clusterissuers.admission.certmanager.k8s.io": the server is currently unable to handle the request
+ s=1
+ sleep 1s
Retrying (1)...
+ echo 'Retrying (1)...'
+ kubectl apply -f /data/helm/certmanager/config/cluster_issuer.yaml
Error from server (InternalError): error when creating "/data/helm/certmanager/config/cluster_issuer.yaml": Internal error occurred: failed calling webhook "clusterissuers.admission.certmanager.k8s.io": the server is currently unable to handle the request
...
+ s=1
+ sleep 1s
+ echo 'Retrying (90)...'
Retrying (90)...
+ exit 1
$
GitLab (self-managed): 12.7.6 (61654d25b20)
Please advise.