Cert-manager: [Solved] Stuck in (re)installation

[Azylog]

Hello,
I tried a lot of things and don't really remember all. Probably not a bug, I'm just doing something wrong. After trying to read more and more documentation, the only thing I can do is ask here.

I'm just trying to re-deploy cert-manager from start :
$ ./helm install --set webhook.enabled=false --name cert-manager --namespace ingress-nginx --version v0.10.0 jetstack/cert-manager
Error: Could not get apiVersions from Kubernetes: unable to retrieve the complete list of server APIs: webhook.certmanager.k8s.io/v1beta1: the server is currently unable to handle the request

What I've done :
$ kubectl apply --validate=false -f https://raw.githubusercontent.com/jetstack/cert-manager/release-0.10/deploy/manifests/00-crds.yaml
kubectl label namespace ingress-nginx certmanager.k8s.io/disable-validation=true

I also tried to delete the CRD with :
$ kubectl delete -f https://raw.githubusercontent.com/jetstack/cert-manager/release-0.10/deploy/manifests/00-crds.yaml

And re-aply it, same error.

$ kubectl version
Client Version: version.Info{Major:"1", Minor:"12", GitVersion:"v1.12.0", GitCommit:"0ed33881dc4355495f623c6f22e7dd0b7632b7c0", GitTreeState:"clean", BuildDate:"2018-09-27T17:05:32Z", GoVersion:"go1.10.4", Compiler:"gc", Platform:"linux/amd64"}
Server Version: version.Info{Major:"1", Minor:"12", GitVersion:"v1.12.3", GitCommit:"435f92c719f279a3a67808c80521ea17d5715c66", GitTreeState:"clean", BuildDate:"2018-11-26T12:46:57Z", GoVersion:"go1.10.4", Compiler:"gc", Platform:"linux/amd64"}

$ kubectl get customresourcedefinition | grep certmanager
certificaterequests.certmanager.k8s.io 2019-09-09T17:25:06Z
certificates.certmanager.k8s.io 2019-09-09T17:25:07Z
challenges.certmanager.k8s.io 2019-09-09T17:25:08Z
clusterissuers.certmanager.k8s.io 2019-09-09T17:25:09Z
issuers.certmanager.k8s.io 2019-09-09T17:25:10Z
orders.certmanager.k8s.io 2019-09-09T17:25:11Z

$ kubectl get issuer --namespace ingress-nginx
No resources found.

This is the main reason I tried to reinstall everything.

This is a private kubernetes cluster, I don't think it's RBAC related (but can't be sure).

Any way to get rid of this error message ? Or at least, find the reason.

Thanks for your help !

[munnerz]

It looks like you've got a half-installed installation of cert-manager. Please first of all remove all cert-manager resources from your cluster (either using helm delete --purge or kubectl delete -f ... depending on your installation method), before trying again.

Helm can be a bit difficult with this sort of thing too, so it's worth double checking what's left after you uninstall.

Error: Could not get apiVersions from Kubernetes: unable to retrieve the complete list of server APIs: webhook.certmanager.k8s.io/v1beta1: the server is currently unable to handle the request

You should be able to resolve this by running kubectl delete apiservice v1beta1.webhook.certmanager.k8s.io 😄

[Azylog]

Thank you !
You're right, running :
kubectl delete apiservice v1beta1.webhook.certmanager.k8s.io
and deleting cert-manager with helm got me unstuck.

for the records, I had next to re-run the install with :
helm install --set webhook.enabled=false --set ingressShim.defaultIssuerName=letsencrypt-prod --set ingressShim.defaultIssuerKind=ClusterIssuer --name cert-manager --namespace ingress-nginx --version v0.10.0 jetstack/cert-manager

And finally, the whole started to works again in version 0.10 !

Thanks again

[Azylog]

#