> kubectl apply -f cert-manager.yaml error

kubectl apply -f cert-manager.yaml error

> kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v0.10.0/cert-manager.yaml
customresourcedefinition.apiextensions.k8s.io/certificaterequests.certmanager.k8s.io configured
customresourcedefinition.apiextensions.k8s.io/certificates.certmanager.k8s.io configured
customresourcedefinition.apiextensions.k8s.io/challenges.certmanager.k8s.io configured
customresourcedefinition.apiextensions.k8s.io/clusterissuers.certmanager.k8s.io configured
customresourcedefinition.apiextensions.k8s.io/issuers.certmanager.k8s.io configured
customresourcedefinition.apiextensions.k8s.io/orders.certmanager.k8s.io configured
namespace/cert-manager unchanged
serviceaccount/cert-manager-cainjector unchanged
serviceaccount/cert-manager unchanged
serviceaccount/cert-manager-webhook unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-cainjector unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-cainjector unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-leaderelection unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-issuers unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-certificates unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-orders unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-challenges unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-leaderelection unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-issuers unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-certificates unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-orders unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-challenges unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-view unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-edit unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-webhook:auth-delegator configured
rolebinding.rbac.authorization.k8s.io/cert-manager-webhook:webhook-authentication-reader configured
clusterrole.rbac.authorization.k8s.io/cert-manager-webhook:webhook-requester unchanged
service/cert-manager unchanged
service/cert-manager-webhook unchanged
apiservice.apiregistration.k8s.io/v1beta1.webhook.certmanager.k8s.io unchanged
mutatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
validatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
Error from server (Invalid): error when applying patch:
{"metadata":{"annotations":{"kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"cainjector\",\"app.kubernetes.io/instance\":\"cert-manager\",\"app.kubernetes.io/managed-by\":\"Tiller\",\"app.kubernetes.io/name\":\"cainjector\",\"helm.sh/chart\":\"cainjector-v0.10.0\"},\"name\":\"cert-manager-cainjector\",\"namespace\":\"cert-manager\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"cainjector\",\"app.kubernetes.io/instance\":\"cert-manager\",\"app.kubernetes.io/managed-by\":\"Tiller\",\"app.kubernetes.io/name\":\"cainjector\"}},\"template\":{\"metadata\":{\"annotations\":null,\"labels\":{\"app\":\"cainjector\",\"app.kubernetes.io/instance\":\"cert-manager\",\"app.kubernetes.io/managed-by\":\"Tiller\",\"app.kubernetes.io/name\":\"cainjector\",\"helm.sh/chart\":\"cainjector-v0.10.0\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=2\",\"--leader-election-namespace=$(POD_NAMESPACE)\"],\"env\":[{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"quay.io/jetstack/cert-manager-cainjector:v0.10.0\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"cainjector\",\"resources\":{}}],\"serviceAccountName\":\"cert-manager-cainjector\"}}}}\n"},"labels":{"app.kubernetes.io/instance":"cert-manager","app.kubernetes.io/managed-by":"Tiller","app.kubernetes.io/name":"cainjector","chart":null,"helm.sh/chart":"cainjector-v0.10.0","heritage":null,"release":null}},"spec":{"selector":{"matchLabels":{"app.kubernetes.io/instance":"cert-manager","app.kubernetes.io/managed-by":"Tiller","app.kubernetes.io/name":"cainjector","release":null}},"template":{"metadata":{"annotations":null,"labels":{"app.kubernetes.io/instance":"cert-manager","app.kubernetes.io/managed-by":"Tiller","app.kubernetes.io/name":"cainjector","helm.sh/chart":"cainjector-v0.10.0","release":null}},"spec":{"$setElementOrder/containers":[{"name":"cainjector"}],"containers":[{"args":["--v=2","--leader-election-namespace=$(POD_NAMESPACE)"],"image":"quay.io/jetstack/cert-manager-cainjector:v0.10.0","name":"cainjector"}]}}}}
to:
Resource: "apps/v1, Resource=deployments", GroupVersionKind: "apps/v1, Kind=Deployment"
Name: "cert-manager-cainjector", Namespace: "cert-manager"
Object: &{map["apiVersion":"apps/v1" "metadata":map["uid":"2fc416fd-be84-11e9-a85b-0e6765f31c5f" "resourceVersion":"1251" "creationTimestamp":"2019-08-14T11:10:55Z" "labels":map["app":"cainjector" "chart":"cainjector-v0.7.2" "heritage":"Tiller" "release":"cert-manager"] "annotations":map["deployment.kubernetes.io/revision":"1" "kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"apps/v1beta1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"cainjector\",\"chart\":\"cainjector-v0.7.2\",\"heritage\":\"Tiller\",\"release\":\"cert-manager\"},\"name\":\"cert-manager-cainjector\",\"namespace\":\"cert-manager\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"cainjector\",\"release\":\"cert-manager\"}},\"template\":{\"metadata\":{\"annotations\":null,\"labels\":{\"app\":\"cainjector\",\"release\":\"cert-manager\"}},\"spec\":{\"containers\":[{\"args\":[\"--leader-election-namespace=$(POD_NAMESPACE)\"],\"env\":[{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"quay.io/jetstack/cert-manager-cainjector:v0.7.2\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"cainjector\",\"resources\":{}}],\"serviceAccountName\":\"cert-manager-cainjector\"}}}}\n"] "name":"cert-manager-cainjector" "namespace":"cert-manager" "selfLink":"/apis/apps/v1/namespaces/cert-manager/deployments/cert-manager-cainjector" "generation":'\x01'] "spec":map["strategy":map["type":"RollingUpdate" "rollingUpdate":map["maxUnavailable":"25%" "maxSurge":"25%"]] "revisionHistoryLimit":'\x02' "progressDeadlineSeconds":'\u0258' "replicas":'\x01' "selector":map["matchLabels":map["app":"cainjector" "release":"cert-manager"]] "template":map["metadata":map["creationTimestamp":<nil> "labels":map["app":"cainjector" "release":"cert-manager"]] "spec":map["securityContext":map[] "schedulerName":"default-scheduler" "containers":[map["name":"cainjector" "image":"quay.io/jetstack/cert-manager-cainjector:v0.7.2" "args":["--leader-election-namespace=$(POD_NAMESPACE)"] "env":[map["name":"POD_NAMESPACE" "valueFrom":map["fieldRef":map["apiVersion":"v1" "fieldPath":"metadata.namespace"]]]] "resources":map[] "terminationMessagePath":"/dev/termination-log" "terminationMessagePolicy":"File" "imagePullPolicy":"IfNotPresent"]] "restartPolicy":"Always" "terminationGracePeriodSeconds":'\x1e' "dnsPolicy":"ClusterFirst" "serviceAccountName":"cert-manager-cainjector" "serviceAccount":"cert-manager-cainjector"]]] "status":map["replicas":'\x01' "updatedReplicas":'\x01' "readyReplicas":'\x01' "availableReplicas":'\x01' "conditions":[map["message":"Deployment has minimum availability." "type":"Available" "status":"True" "lastUpdateTime":"2019-08-14T11:11:00Z" "lastTransitionTime":"2019-08-14T11:11:00Z" "reason":"MinimumReplicasAvailable"] map["type":"Progressing" "status":"True" "lastUpdateTime":"2019-08-14T11:11:00Z" "lastTransitionTime":"2019-08-14T11:10:55Z" "reason":"NewReplicaSetAvailable" "message":"ReplicaSet \"cert-manager-cainjector-78bbcdc47c\" has successfully progressed."]] "observedGeneration":'\x01'] "kind":"Deployment"]}
for: "https://github.com/jetstack/cert-manager/releases/download/v0.10.0/cert-manager.yaml": Deployment.apps "cert-manager-cainjector" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"app":"cainjector", "app.kubernetes.io/instance":"cert-manager", "app.kubernetes.io/managed-by":"Tiller", "app.kubernetes.io/name":"cainjector"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable
Error from server (Invalid): error when applying patch:
{"metadata":{"annotations":{"kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"cert-manager\",\"app.kubernetes.io/instance\":\"cert-manager\",\"app.kubernetes.io/managed-by\":\"Tiller\",\"app.kubernetes.io/name\":\"cert-manager\",\"helm.sh/chart\":\"cert-manager-v0.10.0\"},\"name\":\"cert-manager\",\"namespace\":\"cert-manager\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"cert-manager\",\"app.kubernetes.io/instance\":\"cert-manager\",\"app.kubernetes.io/managed-by\":\"Tiller\",\"app.kubernetes.io/name\":\"cert-manager\"}},\"template\":{\"metadata\":{\"annotations\":{\"prometheus.io/path\":\"/metrics\",\"prometheus.io/port\":\"9402\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"app\":\"cert-manager\",\"app.kubernetes.io/instance\":\"cert-manager\",\"app.kubernetes.io/managed-by\":\"Tiller\",\"app.kubernetes.io/name\":\"cert-manager\",\"helm.sh/chart\":\"cert-manager-v0.10.0\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=2\",\"--cluster-resource-namespace=$(POD_NAMESPACE)\",\"--leader-election-namespace=$(POD_NAMESPACE)\",\"--webhook-namespace=$(POD_NAMESPACE)\",\"--webhook-ca-secret=cert-manager-webhook-ca\",\"--webhook-serving-secret=cert-manager-webhook-tls\",\"--webhook-dns-names=cert-manager-webhook,cert-manager-webhook.cert-manager,cert-manager-webhook.cert-manager.svc\"],\"env\":[{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"quay.io/jetstack/cert-manager-controller:v0.10.0\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"cert-manager\",\"ports\":[{\"containerPort\":9402}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"32Mi\"}}}],\"serviceAccountName\":\"cert-manager\"}}}}\n"},"labels":{"app.kubernetes.io/instance":"cert-manager","app.kubernetes.io/managed-by":"Tiller","app.kubernetes.io/name":"cert-manager","chart":null,"helm.sh/chart":"cert-manager-v0.10.0","heritage":null,"release":null}},"spec":{"selector":{"matchLabels":{"app.kubernetes.io/instance":"cert-manager","app.kubernetes.io/managed-by":"Tiller","app.kubernetes.io/name":"cert-manager","release":null}},"template":{"metadata":{"labels":{"app.kubernetes.io/instance":"cert-manager","app.kubernetes.io/managed-by":"Tiller","app.kubernetes.io/name":"cert-manager","helm.sh/chart":"cert-manager-v0.10.0","release":null}},"spec":{"$setElementOrder/containers":[{"name":"cert-manager"}],"containers":[{"args":["--v=2","--cluster-resource-namespace=$(POD_NAMESPACE)","--leader-election-namespace=$(POD_NAMESPACE)","--webhook-namespace=$(POD_NAMESPACE)","--webhook-ca-secret=cert-manager-webhook-ca","--webhook-serving-secret=cert-manager-webhook-tls","--webhook-dns-names=cert-manager-webhook,cert-manager-webhook.cert-manager,cert-manager-webhook.cert-manager.svc"],"image":"quay.io/jetstack/cert-manager-controller:v0.10.0","name":"cert-manager"}]}}}}
to:
Resource: "apps/v1, Resource=deployments", GroupVersionKind: "apps/v1, Kind=Deployment"
Name: "cert-manager", Namespace: "cert-manager"
Object: &{map["kind":"Deployment" "apiVersion":"apps/v1" "metadata":map["annotations":map["deployment.kubernetes.io/revision":"1" "kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"apps/v1beta1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"cert-manager\",\"chart\":\"cert-manager-v0.7.2\",\"heritage\":\"Tiller\",\"release\":\"cert-manager\"},\"name\":\"cert-manager\",\"namespace\":\"cert-manager\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"cert-manager\",\"release\":\"cert-manager\"}},\"template\":{\"metadata\":{\"annotations\":{\"prometheus.io/path\":\"/metrics\",\"prometheus.io/port\":\"9402\",\"prometheus.io/scrape\":\"true\"},\"labels\":{\"app\":\"cert-manager\",\"release\":\"cert-manager\"}},\"spec\":{\"containers\":[{\"args\":[\"--cluster-resource-namespace=$(POD_NAMESPACE)\",\"--leader-election-namespace=$(POD_NAMESPACE)\"],\"env\":[{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"quay.io/jetstack/cert-manager-controller:v0.7.2\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"cert-manager\",\"ports\":[{\"containerPort\":9402}],\"resources\":{\"requests\":{\"cpu\":\"10m\",\"memory\":\"32Mi\"}}}],\"serviceAccountName\":\"cert-manager\"}}}}\n"] "namespace":"cert-manager" "selfLink":"/apis/apps/v1/namespaces/cert-manager/deployments/cert-manager" "labels":map["chart":"cert-manager-v0.7.2" "heritage":"Tiller" "release":"cert-manager" "app":"cert-manager"] "generation":'\x01' "creationTimestamp":"2019-08-14T11:10:56Z" "name":"cert-manager" "uid":"2fe7f847-be84-11e9-a85b-0e6765f31c5f" "resourceVersion":"1264"] "spec":map["selector":map["matchLabels":map["app":"cert-manager" "release":"cert-manager"]] "template":map["metadata":map["creationTimestamp":<nil> "labels":map["app":"cert-manager" "release":"cert-manager"] "annotations":map["prometheus.io/port":"9402" "prometheus.io/scrape":"true" "prometheus.io/path":"/metrics"]] "spec":map["serviceAccount":"cert-manager" "securityContext":map[] "schedulerName":"default-scheduler" "containers":[map["image":"quay.io/jetstack/cert-manager-controller:v0.7.2" "args":["--cluster-resource-namespace=$(POD_NAMESPACE)" "--leader-election-namespace=$(POD_NAMESPACE)"] "resources":map["requests":map["cpu":"10m" "memory":"32Mi"]] "imagePullPolicy":"IfNotPresent" "name":"cert-manager" "ports":[map["containerPort":'\u24ba' "protocol":"TCP"]] "env":[map["valueFrom":map["fieldRef":map["apiVersion":"v1" "fieldPath":"metadata.namespace"]] "name":"POD_NAMESPACE"]] "terminationMessagePath":"/dev/termination-log" "terminationMessagePolicy":"File"]] "restartPolicy":"Always" "terminationGracePeriodSeconds":'\x1e' "dnsPolicy":"ClusterFirst" "serviceAccountName":"cert-manager"]] "strategy":map["type":"RollingUpdate" "rollingUpdate":map["maxSurge":"25%" "maxUnavailable":"25%"]] "revisionHistoryLimit":'\x02' "progressDeadlineSeconds":'\u0258' "replicas":'\x01'] "status":map["replicas":'\x01' "updatedReplicas":'\x01' "readyReplicas":'\x01' "availableReplicas":'\x01' "conditions":[map["type":"Available" "status":"True" "lastUpdateTime":"2019-08-14T11:11:01Z" "lastTransitionTime":"2019-08-14T11:11:01Z" "reason":"MinimumReplicasAvailable" "message":"Deployment has minimum availability."] map["type":"Progressing" "status":"True" "lastUpdateTime":"2019-08-14T11:11:01Z" "lastTransitionTime":"2019-08-14T11:10:56Z" "reason":"NewReplicaSetAvailable" "message":"ReplicaSet \"cert-manager-7c8d697cf8\" has successfully progressed."]] "observedGeneration":'\x01']]}
for: "https://github.com/jetstack/cert-manager/releases/download/v0.10.0/cert-manager.yaml": Deployment.apps "cert-manager" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"app":"cert-manager", "app.kubernetes.io/instance":"cert-manager", "app.kubernetes.io/managed-by":"Tiller", "app.kubernetes.io/name":"cert-manager"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable
Error from server (Invalid): error when applying patch:
{"metadata":{"annotations":{"kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"apps/v1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"webhook\",\"app.kubernetes.io/instance\":\"cert-manager\",\"app.kubernetes.io/managed-by\":\"Tiller\",\"app.kubernetes.io/name\":\"webhook\",\"helm.sh/chart\":\"cert-manager-v0.10.0\"},\"name\":\"cert-manager-webhook\",\"namespace\":\"cert-manager\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"webhook\",\"app.kubernetes.io/instance\":\"cert-manager\",\"app.kubernetes.io/managed-by\":\"Tiller\",\"app.kubernetes.io/name\":\"webhook\"}},\"template\":{\"metadata\":{\"annotations\":null,\"labels\":{\"app\":\"webhook\",\"app.kubernetes.io/instance\":\"cert-manager\",\"app.kubernetes.io/managed-by\":\"Tiller\",\"app.kubernetes.io/name\":\"webhook\",\"helm.sh/chart\":\"cert-manager-v0.10.0\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=2\",\"--secure-port=6443\",\"--tls-cert-file=/certs/tls.crt\",\"--tls-private-key-file=/certs/tls.key\"],\"env\":[{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"quay.io/jetstack/cert-manager-webhook:v0.10.0\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"cert-manager\",\"resources\":{},\"volumeMounts\":[{\"mountPath\":\"/certs\",\"name\":\"certs\"}]}],\"serviceAccountName\":\"cert-manager-webhook\",\"volumes\":[{\"name\":\"certs\",\"secret\":{\"secretName\":\"cert-manager-webhook-tls\"}}]}}}}\n"},"labels":{"app.kubernetes.io/instance":"cert-manager","app.kubernetes.io/managed-by":"Tiller","app.kubernetes.io/name":"webhook","chart":null,"helm.sh/chart":"cert-manager-v0.10.0","heritage":null,"release":null}},"spec":{"selector":{"matchLabels":{"app.kubernetes.io/instance":"cert-manager","app.kubernetes.io/managed-by":"Tiller","app.kubernetes.io/name":"webhook","release":null}},"template":{"metadata":{"annotations":null,"labels":{"app.kubernetes.io/instance":"cert-manager","app.kubernetes.io/managed-by":"Tiller","app.kubernetes.io/name":"webhook","helm.sh/chart":"cert-manager-v0.10.0","release":null}},"spec":{"$setElementOrder/containers":[{"name":"cert-manager"}],"$setElementOrder/volumes":[{"name":"certs"}],"containers":[{"args":["--v=2","--secure-port=6443","--tls-cert-file=/certs/tls.crt","--tls-private-key-file=/certs/tls.key"],"env":[{"name":"POD_NAMESPACE","valueFrom":{"fieldRef":{"fieldPath":"metadata.namespace"}}}],"image":"quay.io/jetstack/cert-manager-webhook:v0.10.0","imagePullPolicy":"IfNotPresent","name":"cert-manager","resources":{},"volumeMounts":[{"mountPath":"/certs","name":"certs"}]},{"$patch":"delete","name":"webhook"}],"volumes":[{"$retainKeys":["name","secret"],"name":"certs","secret":{"secretName":"cert-manager-webhook-tls"}}]}}}}
to:
Resource: "apps/v1, Resource=deployments", GroupVersionKind: "apps/v1, Kind=Deployment"
Name: "cert-manager-webhook", Namespace: "cert-manager"
Object: &{map["spec":map["strategy":map["type":"RollingUpdate" "rollingUpdate":map["maxUnavailable":"25%" "maxSurge":"25%"]] "revisionHistoryLimit":'\x02' "progressDeadlineSeconds":'\u0258' "replicas":'\x01' "selector":map["matchLabels":map["app":"webhook" "release":"cert-manager"]] "template":map["metadata":map["labels":map["release":"cert-manager" "app":"webhook"] "creationTimestamp":<nil>] "spec":map["securityContext":map[] "schedulerName":"default-scheduler" "volumes":[map["name":"certs" "secret":map["defaultMode":'\u01a4' "secretName":"cert-manager-webhook-webhook-tls"]]] "containers":[map["name":"webhook" "env":[map["valueFrom":map["fieldRef":map["apiVersion":"v1" "fieldPath":"metadata.namespace"]] "name":"POD_NAMESPACE"]] "resources":map[] "imagePullPolicy":"IfNotPresent" "image":"quay.io/jetstack/cert-manager-webhook:v0.7.2" "args":["--v=12" "--secure-port=6443" "--tls-cert-file=/certs/tls.crt" "--tls-private-key-file=/certs/tls.key"] "volumeMounts":[map["name":"certs" "mountPath":"/certs"]] "terminationMessagePath":"/dev/termination-log" "terminationMessagePolicy":"File"]] "restartPolicy":"Always" "dnsPolicy":"ClusterFirst" "serviceAccountName":"cert-manager-webhook" "terminationGracePeriodSeconds":'\x1e' "serviceAccount":"cert-manager-webhook"]]] "status":map["readyReplicas":'\x01' "availableReplicas":'\x01' "conditions":[map["type":"Available" "status":"True" "lastUpdateTime":"2019-08-14T11:11:14Z" "lastTransitionTime":"2019-08-14T11:11:14Z" "reason":"MinimumReplicasAvailable" "message":"Deployment has minimum availability."] map["type":"Progressing" "status":"True" "lastUpdateTime":"2019-08-14T11:11:14Z" "lastTransitionTime":"2019-08-14T11:10:55Z" "reason":"NewReplicaSetAvailable" "message":"ReplicaSet \"cert-manager-webhook-79d48667bd\" has successfully progressed."]] "observedGeneration":'\x01' "replicas":'\x01' "updatedReplicas":'\x01'] "kind":"Deployment" "apiVersion":"apps/v1" "metadata":map["name":"cert-manager-webhook" "uid":"2fd53432-be84-11e9-a85b-0e6765f31c5f" "creationTimestamp":"2019-08-14T11:10:55Z" "annotations":map["deployment.kubernetes.io/revision":"1" "kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"apps/v1beta1\",\"kind\":\"Deployment\",\"metadata\":{\"annotations\":{},\"labels\":{\"app\":\"webhook\",\"chart\":\"webhook-v0.7.2\",\"heritage\":\"Tiller\",\"release\":\"cert-manager\"},\"name\":\"cert-manager-webhook\",\"namespace\":\"cert-manager\"},\"spec\":{\"replicas\":1,\"selector\":{\"matchLabels\":{\"app\":\"webhook\",\"release\":\"cert-manager\"}},\"template\":{\"metadata\":{\"annotations\":null,\"labels\":{\"app\":\"webhook\",\"release\":\"cert-manager\"}},\"spec\":{\"containers\":[{\"args\":[\"--v=12\",\"--secure-port=6443\",\"--tls-cert-file=/certs/tls.crt\",\"--tls-private-key-file=/certs/tls.key\"],\"env\":[{\"name\":\"POD_NAMESPACE\",\"valueFrom\":{\"fieldRef\":{\"fieldPath\":\"metadata.namespace\"}}}],\"image\":\"quay.io/jetstack/cert-manager-webhook:v0.7.2\",\"imagePullPolicy\":\"IfNotPresent\",\"name\":\"webhook\",\"resources\":{},\"volumeMounts\":[{\"mountPath\":\"/certs\",\"name\":\"certs\"}]}],\"serviceAccountName\":\"cert-manager-webhook\",\"volumes\":[{\"name\":\"certs\",\"secret\":{\"secretName\":\"cert-manager-webhook-webhook-tls\"}}]}}}}\n"] "namespace":"cert-manager" "selfLink":"/apis/apps/v1/namespaces/cert-manager/deployments/cert-manager-webhook" "resourceVersion":"1317" "generation":'\x01' "labels":map["release":"cert-manager" "app":"webhook" "chart":"webhook-v0.7.2" "heritage":"Tiller"]]]}
for: "https://github.com/jetstack/cert-manager/releases/download/v0.10.0/cert-manager.yaml": Deployment.apps "cert-manager-webhook" is invalid: spec.selector: Invalid value: v1.LabelSelector{MatchLabels:map[string]string{"app":"webhook", "app.kubernetes.io/instance":"cert-manager", "app.kubernetes.io/managed-by":"Tiller", "app.kubernetes.io/name":"webhook"}, MatchExpressions:[]v1.LabelSelectorRequirement(nil)}: field is immutable