Error: var '{CERTIFICATE_NAME cert-manager.io_v1_Certificate {metadata.name}}' cannot be mapped to a field in the set of known resources

[HenryXie1]

Hi there
I am testing make deploy a cronjob webhook via https://book.kubebuilder.io/cronjob-tutorial/running-webhook.html
I copied the code from github.
make install, make docker-build docker push , make run. ( run webhook locally ). They are all fine.
Then I proceed to make deploy,
I installed cert-manager
I create a selfsigned certs named "selfsigned-cert" in default namespace

bash-3.2$ k get certificate
NAME              READY   SECRET                AGE
selfsigned-cert   True    selfsigned-cert-tls   18min

I update a few kustomization.yaml according to the book. attached.

• config/default/kustomization.yaml

# Adds namespace to all resources.
namespace: project-system

# Value of this field is prepended to the
# names of all resources, e.g. a deployment named
# "wordpress" becomes "alices-wordpress".
# Note that it should also match with the prefix (text before '-') of the namespace
# field above.
namePrefix: project-

# Labels to add to all resources and selectors.
#commonLabels:
#  someName: someValue

bases:
- ../crd
- ../rbac
- ../manager
# [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix including the one in
# crd/kustomization.yaml
- ../webhook
# [CERTMANAGER] To enable cert-manager, uncomment all sections with 'CERTMANAGER'. 'WEBHOOK' components are required.
- ../certmanager
# [PROMETHEUS] To enable prometheus monitor, uncomment all sections with 'PROMETHEUS'.
- ../prometheus

patchesStrategicMerge:
# Protect the /metrics endpoint by putting it behind auth.
# If you want your controller-manager to expose the /metrics
# endpoint w/o any authn/z, please comment the following line.
- manager_auth_proxy_patch.yaml

# Mount the controller config file for loading manager configurations
# through a ComponentConfig type
#- manager_config_patch.yaml

# [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix including the one in
# crd/kustomization.yaml
- manager_webhook_patch.yaml

# [CERTMANAGER] To enable cert-manager, uncomment all sections with 'CERTMANAGER'.
# Uncomment 'CERTMANAGER' sections in crd/kustomization.yaml to enable the CA injection in the admission webhooks.
# 'CERTMANAGER' needs to be enabled to use ca injection
- webhookcainjection_patch.yaml

# the following config is for teaching kustomize how to do var substitution
vars:
# [CERTMANAGER] To enable cert-manager, uncomment all sections with 'CERTMANAGER' prefix.
- name: CERTIFICATE_NAMESPACE # namespace of the certificate CR
  objref:
    kind: Certificate
    group: cert-manager.io
    version: v1
    name: selfsigned-cert # this name should match the one in certificate.yaml
  fieldref:
    fieldpath: metadata.namespace
- name: CERTIFICATE_NAME
  objref:
    kind: Certificate
    group: cert-manager.io
    version: v1
    name: selfsigned-cert # this name should match the one in certificate.yaml
- name: SERVICE_NAMESPACE # namespace of the service
  objref:
    kind: Service
    version: v1
    name: webhook-service
  fieldref:
    fieldpath: metadata.namespace
- name: SERVICE_NAME
  objref:
    kind: Service
    version: v1
    name: webhook-service

• config/crd/kustomization.yaml

# This kustomization.yaml is not intended to be run by itself,
# since it depends on service name and namespace that are out of this kustomize package.
# It should be run by config/default
resources:
- bases/batch.tutorial.kubebuilder.io_cronjobs.yaml
#+kubebuilder:scaffold:crdkustomizeresource

patchesStrategicMerge:
# [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix.
# patches here are for enabling the conversion webhook for each CRD
- patches/webhook_in_cronjobs.yaml
#+kubebuilder:scaffold:crdkustomizewebhookpatch

# [CERTMANAGER] To enable cert-manager, uncomment all the sections with [CERTMANAGER] prefix.
# patches here are for enabling the CA injection for each CRD
- patches/cainjection_in_cronjobs.yaml
#+kubebuilder:scaffold:crdkustomizecainjectionpatch

# the following config is for teaching kustomize how to do kustomization for CRDs.
configurations:
- kustomizeconfig.yaml

but I got error when I run make deploy

/Users/xieho/myrepo/cronjob-repo1/bin/controller-gen "crd:trivialVersions=true,preserveUnknownFields=false" rbac:roleName=manager-role webhook paths="./..." output:crd:artifacts:config=config/crd/bases
cd config/manager && /Users/xieho/myrepo/cronjob-repo1/bin/kustomize edit set image controller=controller:latest
/Users/xieho/myrepo/cronjob-repo1/bin/kustomize build config/default | kubectl apply -f -
Error: var '{CERTIFICATE_NAME cert-manager.io_v1_Certificate {metadata.name}}' cannot be mapped to a field in the set of known resources
error: no objects passed to apply
make: *** [deploy] Error 1

wonder anything I miss here? thanks

[shu-ming]

I ran into the same issue. I guess the docs might skip some steps.

[bravelll]

I ran into the same issue. I guess the docs might skip some steps.

[Alokv11]

I have same issue, how it is fixed?

[nikfot]

In my case there was some problem with the certificate object in configs/certmanager/certtificate.yaml.
I had probably entered a wrong common name for validation or sth like that. When I replaced it with the defaults:

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: serving-cert  # this name should match the one appeared in kustomizeconfig.yaml
  namespace: cert-manager
spec:
  # $(SERVICE_NAME) and $(SERVICE_NAMESPACE) will be substituted by kustomize
  dnsNames:
  - $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc
  - $(SERVICE_NAME).$(SERVICE_NAMESPACE).svc.cluster.local
  issuerRef:
    kind: ClusterIssuer
    name: selfsigned-issuer
  secretName: webhook-server-cert

I got by this error.

[camilamacedo86]

@HenryXie1,

Could you please let us know:
a) What is the version. of kustomize used
b) The content of the PROJECT file
c) What is the KB CLI version used

If you create a project with go/v3 and bump kustomize v4+ then it might be the reason. In this scenario, we would recommend you use the new plugin kb init --plugins=go/v4-alpha which supports kustomize v4 and has changed in the scaffolds.

[camilamacedo86]

Marking this one as answered since the reason seems described above
However, feel free to raise issues in the repo if you still need a help with or find any issue

[camilamacedo86]

Closing since it is answered.