Skip to content

Unable to install cert-manager from kubernetes gitlab managed apps dashboard

Summary

Installing of cert-manager from the Kubernetes dashboard is failing with Error: "certmanager" has no deployed releases

I had a previous install of cert-manager which was installed manually. I did, however, purge that install before attempting to install the Gitlab managed version. I don't know if this error is related to my previous install.

Steps to reproduce

Attempt to install cert-manager. All other Gitlab managed Kubernetes apps seem to work. Cert-manager is not (for me, at least).

Example Project

N/A

What is the current bug behavior?

Shortly after clicking install, Gitlab reports:

 Something went wrong while installing Cert-Manager

    Operation failed. Check pod logs for install-certmanager for more details.

Full pod log included below.

What is the expected correct behavior?

Cert-manager to install without any issues like the other apps listed on that dashboard or, if there is an error, be more descriptive on the dashboard.

Relevant logs and/or screenshots

+ helm init --upgrade                                                                                                                                         
Creating /root/.helm                                                                                                                                          
Creating /root/.helm/repository                                                                                                                               
Creating /root/.helm/repository/cache                                                                                                                         
Creating /root/.helm/repository/local                                                                                                                         
Creating /root/.helm/plugins                                                                                                                                  
Creating /root/.helm/starters                                                                                                                                 
Creating /root/.helm/cache/archive                                                                                                                            
Creating /root/.helm/repository/repositories.yaml                                                                                                             
Adding stable repo with URL: https://kubernetes-charts.storage.googleapis.com                                                                                 
Adding local repo with URL: http://127.0.0.1:8879/charts                                                                                                      
$HELM_HOME has been configured at /root/.helm.                                                                                                                
                                                                                                                                                              
Tiller (the Helm server-side component) has been upgraded to the current version.                                                                             
+ seq 1 30                                                                                                                                                    
+ helm version --tls --tls-ca-cert /data/helm/certmanager/config/ca.pem --tls-cert /data/helm/certmanager/config/cert.pem --tls-key /data/helm/certmanager/conf
ig/key.pem                                                                                                                                                    
Client: &version.Version{SemVer:"v2.14.3", GitCommit:"0e7f3b6637f7af8fcfddb3d2941fcc7cbebb0085", GitTreeState:"clean"}                                        
Server: &version.Version{SemVer:"v2.14.3", GitCommit:"0e7f3b6637f7af8fcfddb3d2941fcc7cbebb0085", GitTreeState:"clean"}                                        
+ break                                                                                                                                                       
+ helm repo add certmanager https://charts.jetstack.io                                                                                                        
"certmanager" has been added to your repositories                                                                                                             
+ helm repo update                                                                                                                                            
Hang tight while we grab the latest from your chart repositories...                                                                                           
...Skip local chart repository
...Successfully got an update from the "certmanager" chart repository
...Successfully got an update from the "stable" chart repository
Update Complete.
+ kubectl apply -f https://raw.githubusercontent.com/jetstack/cert-manager/release-0.9/deploy/manifests/00-crds.yaml  
customresourcedefinition.apiextensions.k8s.io/certificates.certmanager.k8s.io configured                                                                      
customresourcedefinition.apiextensions.k8s.io/certificaterequests.certmanager.k8s.io configured                                                               
customresourcedefinition.apiextensions.k8s.io/challenges.certmanager.k8s.io configured                                                                        
customresourcedefinition.apiextensions.k8s.io/clusterissuers.certmanager.k8s.io configured                                                                    
customresourcedefinition.apiextensions.k8s.io/issuers.certmanager.k8s.io configured                                                                           
customresourcedefinition.apiextensions.k8s.io/orders.certmanager.k8s.io configured                                                                            
+ kubectl label --overwrite namespace gitlab-managed-apps 'certmanager.k8s.io/disable-validation=true'                                                        
namespace/gitlab-managed-apps not labeled
+ helm upgrade certmanager certmanager/cert-manager --install --reset-values --tls --tls-ca-cert /data/helm/certmanager/config/ca.pem --tls-cert /data/helm/certmanager/config/cert.pem --tls-key /data/helm/certmanager/config/key.pem --version v0.9.1 --set 'rbac.create=true,rbac.enabled=true' --namespace gitlab-managed-apps -f /data/helm/certmanager/config/values.yaml
E1004 05:28:25.269151      38 portforward.go:372] error copying from remote stream to local connection: readfrom tcp4 127.0.0.1:38951->127.0.0.1:37554: write tcp4 127.0.0.1:38951->127.0.0.1:37554: write: broken pipe
UPGRADE FAILED
Error: "certmanager" has no deployed releases
Error: UPGRADE FAILED: "certmanager" has no deployed releases

Output of checks

This bug happens on GitLab.com

Results of GitLab environment info

Expand for output related to GitLab environment info

(For installations with omnibus-gitlab package run and paste the output of: sudo gitlab-rake gitlab:env:info)

(For installations from source run and paste the output of: sudo -u git -H bundle exec rake gitlab:env:info RAILS_ENV=production)

Results of GitLab application Check

Expand for output related to the GitLab application check

(For installations with omnibus-gitlab package run and paste the output of: sudo gitlab-rake gitlab:check SANITIZE=true)

(For installations from source run and paste the output of: sudo -u git -H bundle exec rake gitlab:check RAILS_ENV=production SANITIZE=true)

(we will only investigate if the tests are passing)

Possible fixes

If it isn't just me, perhaps there's something wrong with the cert-manager deployment or auto-install configuration