Kritis Installation Failed

[Jayakumar Sakthivel]

Hi Team,

I am facing a issue in kritis installation. pre install pod is failing
here the pod logs,
time="2023-06-07T06:43:11Z" level=info msg="contents of /var/run/secrets/kubernetes.io/serviceaccount/namespace: default"
time="2023-06-07T06:43:11Z" level=info msg="running preinstall\nversion v0.2.2\ncommit: bea073f2a2f299af94363dc399b7780fde8f2afc"
Error from server (NotFound): certificatesigningrequests.certificates.k8s.io "tls-webhook-secret-cert" not found
Error from server (NotFound): secrets "tls-webhook-secret" not found
time="2023-06-07T06:43:12Z" level=info msg="[cfssl genkey -]"
time="2023-06-07T06:43:12Z" level=info msg="{\"csr\":\"-----BEGIN CERTIFICATE REQUEST-----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\\nDrqalloGWrYH\\n-----END CERTIFICATE REQUEST-----\\n\",\"key\":\"-----BEGIN EC PRIVATE KEY-----\\nMHcCAQEEIB8Yuk3qGzc4/KYZOTXPAhkIpey6RT9hbtHsCT8rDTpaoAoGCCqGSM49\\nAwEHoUQDQgAEQU8ssCz30xs2hpNhd/ufZdbCNN7Tgm3TtlCsx1DvVnaJjeQ20MaF\\nyajBxuM48tMnIJm0J04AyfM6SAjfyrzSaA==\\n-----END EC PRIVATE KEY-----\\n\"}\n"
time="2023-06-07T06:43:12Z" level=info msg="[cfssljson -bare server]"
time="2023-06-07T06:43:12Z" level=info
apiVersion: certificates.k8s.io/v1beta1
kind: CertificateSigningRequest
metadata:
    name: tls-webhook-secret-cert
    labels:
        kritis.grafeas.io/install: ""
spec:
    groups:
    - system:authenticated
    request: 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
    usages:
    - digital signature
    - key encipherment
    - server auth
time="2023-06-07T06:43:12Z" level=info msg="[kubectl apply -f -]"
time="2023-06-07T06:43:12Z" level=info
time="2023-06-07T06:43:12Z" level=error msg="error: unable to recognize \"STDIN\": no matches for kind \"CertificateSigningRequest\" in version \"certificates.k8s.io/v1beta1\"\n"
time="2023-06-07T06:43:12Z" level=fatal msg="exit status 1"

Need a update on this very soon...

Regards,
Jayakumar S

[Jayakumar Sakthivel]

I am trying to setup on AWS EKS cluster and the cluster version is v1.27.1-eks-2f008fe