[System] Can't install cert-manager with kustomize
Issue
I get a kubectl error when I try to create a certificate with cert-manager.
Description of the bug
Error I try to create a test certficate with kubectl :
Error from server (InternalError): error when creating
"test-resources.yaml": Internal error occurred: failed calling webhook
"webhook.cert-manager.io": failed to call webhook: Post
"https://cert-manager-webhook.cert-manager.svc:443/validate?timeout=30s":
tls: failed to verify certificate: x509: certificate signed by unknown
authority
Error from the webhook pod :
E0830 16:54:55.857471 1 leaderelection.go:436] error retrieving
resource lock kube-system/cert-manager-controller:
leases.coordination.k8s.io "cert-manager-controller" is forbidden: User
"system:serviceaccount:cert-manager:cert-manager" cannot get resource
"leases" in API group "coordination.k8s.io" in the namespace "kube-system
Steps to Reproduce
- Go to
cluster/system/cert-manager/ - Install the software
kubectl kustomize | kubectl apply -f - - Create a self sign certificate
- See error
Additional Information
Self signed certificate :
apiVersion: v1
kind: Namespace
metadata:
name: cert-manager-test
---
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
name: test-selfsigned
namespace: cert-manager-test
spec:
selfSigned: {}
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: selfsigned-cert
namespace: cert-manager-test
spec:
dnsNames:
- example.com
secretName: selfsigned-cert-tls
issuerRef:
name: test-selfsigned