Error from server (InternalError): error when creating "v2_0_0_full.yaml": Internal error occurred: failed calling webhook " Error from server (InternalError): error when creating "v2_0_0_full.yaml": Internal error occurred: failed calling webhook " kubernetes kubernetes

Error from server (InternalError): error when creating "v2_0_0_full.yaml": Internal error occurred: failed calling webhook "


It seems that cert-manager doesn't run on Fargate as expected - #1606.

First option as a workaround is to install the helm chart which doesn't have the cert-manager dependency. Helm will generate the self-signed cert, and secret resources.

Different option is to remove all cert-manager stuff from the YAML manifest and provide your own self-signed certificate if you don't have helm as a dependency.

Take a look: alb-cert-manager, alb-eks-cert-manager.

Useful article: aws-fargate.


For EKS with Fargate, cert-manager-webhook server's port clashes with kubelet on the Fargate MicroVM.

Ref: https://github.com/jetstack/cert-manager/issues/3237#issuecomment-827523656

To remedy this, when installing the chart set the parameter webhook.securePort to a port that is not 10250 (e.g. 10260)

helm install
cert-manager jetstack/cert-manager
--namespace cert-manager
--create-namespace
--version v1.3.1
--set webhook.securePort=10260--set installCRDs=true

Or you could edit the cert-manager-webhook Deployment and Service to use this new port if cert-manager is already deployed.