Webhook tls error on k8

Vault
1

Hi

I am getting the below error when I configure tls cert for the webhook. why is this happening.

2022-07-31T22:52:40.845Z [WARN]  handler.certwatcher: Could not load TLS keypair: tls: failed to find any PEM data in certificate input. Trying again...
2022-07-31T22:52:40.845Z [INFO]  handler.certwatcher: Webhooks changed. Updating certs...
2022-07-31T22:52:40.845Z [WARN]  handler.certwatcher: Could not load TLS keypair: tls: failed to find any PEM data in certificate input. Trying again...
2022-07-31T22:52:40.994Z [INFO]  handler.certwatcher: Updated certificate bundle received. Updating certs...
2

Sounds like the cert tool you’re using doesn’t have access to the PEM files. This is more of a k8s question, and not related to Vault.

3

Is the below output a problem? because my request to inject secrets are not getting to the vault-agent-injector. This is on GKE

2022-08-01T09:53:58.174Z [INFO]  handler.certwatcher: Updated certificate bundle received. Updating certs...
2022-08-01T09:53:58.182Z [INFO]  handler.certwatcher: Webhooks changed. Updating certs...
2022-08-01T09:53:58.183Z [INFO]  handler.certwatcher: Webhooks changed. Updating certs...
2022-08-01T09:53:58.183Z [INFO]  handler.certwatcher: Webhooks changed. Updating certs...
2022-08-01T09:53:58.183Z [INFO]  handler.certwatcher: Webhooks changed. Updating certs...
2022-08-01T09:53:58.183Z [INFO]  handler.certwatcher: Webhooks changed. Updating certs...
2022-08-01T09:53:58.183Z [INFO]  handler.certwatcher: Webhooks changed. Updating certs...
4

I’m not the right person to diagnose issues with k8 or certmanager. I can tell you that these are not from Vault.

5

Did you get to resolve this issue? Same issue is happening on my GKE cluster, too.

6

Cpl of weeks ago I faced with the same problem and I fixed the problem but I couldn’t have understaood how it was fixed. Today I faced with same problem.

7

Hey bud,

were you able to figure out how you fixed the issue?

I am still stuck and tried various tricks from google and kubernetes. But found nada…