无法调用 webhook "mutate.runner.actions.summerwind.dev": x509: 证书由未知机构签名

问题描述

Kubernetes: v1.19.9-gke.1900 
Helm actions-runner-controller: 0.12.7

我有 Github Actions Controller 创建的 CRD:

❯ kubectl api-resources | grep summerwind.dev
horizontalrunnerautoscalers                    actions.summerwind.dev/v1alpha1   true         HorizontalRunnerAutoscaler
runnerdeployments                              actions.summerwind.dev/v1alpha1   true         RunnerDeployment
runnerreplicasets                              actions.summerwind.dev/v1alpha1   true         Runnerreplicaset
runners                                        actions.summerwind.dev/v1alpha1   true         Runner
runnersets                                     actions.summerwind.dev/v1alpha1   true         RunnerSet

而且我还有一个包含两个简化资源的示例文件:pod 和 runner

❯ cat test.yml
apiVersion: v1
kind: Pod
Metadata:
  name: pod-1
spec:
  containers:
  - name: main
    image: busyBox

---
apiVersion: actions.summerwind.dev/v1alpha1
kind: Runner
Metadata:
  name: runner-1
spec:
  organization: my-org
  env: []

现在,当我对这两个资源运行 apply 时,Pod 运行良好,但 Runner 失败:

❯ kubectl apply -f test.yml
pod/pod-1 created
Error from server (InternalError): error when creating "test.yml": Internal error occurred: Failed calling webhook "mutate.runner.actions.summerwind.dev": Post "https://actions-runner-controller-webhook.tools.svc:443/mutate-actions-summerwind-dev-v1alpha1-runner?timeout=30s": x509: certificate signed by unkNown authority

如您所见,此调用转到 MutatingWebhookConfiguration。并且这个 webhook 将请求发送到仅打印的控制器:

❯ kubectl -n tools logs actions-runner-controller-6cd6fbdd56-qlzrd -c manager
...
http: TLS handshake error from 10.128.0.3:59736: remote error: tls: bad certificate

问题: 故障排除的下一步是什么?

解决方法

暂无找到可以解决该程序问题的有效方法,小编努力寻找整理中!

如果你已经找到好的解决方法,欢迎将解决方案带上本链接一起发送给小编。

小编邮箱:dio#foxmail.com (将#修改为@)