Failed handling admission request

Products

• VMware Tanzu Kubernetes Grid Integrated Edition

Issue/Introduction

During push application you may received

"Warning: failed handling admission request: failed verifying images [harbor.sys.#############projectcontour/contour:v1.33.2]: failed patching images: failed patching images: failed getting image [harbor.sys.#############projectcontour/contour:v1.33.2] digest: failed fetching image digest: Get \"https://harbor.sys.#########/v2/\": tls: failed to verify certificate: x509: certificate signed by unknown authority"

 

Environment

TKGI

Cause

This could be caused by a company security policy maintained through validation and mutation of webhook configurations. 

Resolution

1. List all webhook configurations to get the exact name:

kubectl get validatingwebhookconfigurations
kubectl get mutatingwebhookconfigurations

2. To identify the problematic webhook, back up and delete the webhook configuration one by one.

# Delete validating webhook
kubectl delete validatingwebhookconfiguration <WEBHOOK_NAME>

# Delete mutating webhook (if applicable)
kubectl delete mutatingwebhookconfiguration <WEBHOOK_NAME>

3. Once you’ve identified the webhook casing issue, update it with the necessary information depending on your needs.