Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

deployment pods replicas were recovered after KEDA autoscale took effect #2806

Closed
ArenaSu opened this issue Nov 15, 2022 · 8 comments
Closed

deployment pods replicas were recovered after KEDA autoscale took effect #2806

ArenaSu opened this issue Nov 15, 2022 · 8 comments
Assignees
@XiShanYongYe-Chang

Comments

@ArenaSu
Copy link

ArenaSu commented Nov 15, 2022

What happened:
deployment pods replicas were recovered after KEDA autoscale took effect

What you expected to happen:
deployment pods scales successfully after KEDA autoscale took effect

How to reproduce it (as minimally and precisely as possible):

  1. create deployement in karmada
  2. create pp in karmada and deploy deployment to sub cluster
  3. create KEDA scaledobject to scale deployement
  4. KEDA scaledobject take effect and scale down deployment
  5. deployment pods replicas are recovered to origin replicas

Detail message below:

# kubectl get deploy -n cnuser nginx-policy -w
NAME           READY   UP-TO-DATE   AVAILABLE   AGE
nginx-policy   1/3     3            1           3d19h
nginx-policy   2/3     3            2           3d19h
nginx-policy   3/3     3            3           3d19h
nginx-policy   3/1     3            3           3d19h
nginx-policy   3/3     3            3           3d19h
nginx-policy   3/3     3            3           3d19h
nginx-policy   1/3     1            1           3d19h
nginx-policy   1/3     3            1           3d19h
nginx-policy   2/3     3            2           3d19h
nginx-policy   3/3     3            3           3d19h

Anything else we need to know?:

Environment:

  • Karmada version: v1.2.1
  • kubectl-karmada or karmadactl version (the result of kubectl-karmada version or karmadactl version):
  • Others:
@ArenaSu ArenaSu added the kind/bug Categorizes issue or PR as related to a bug. label Nov 15, 2022
@RainbowMango
Copy link
Member

Hi @ArenaSu
Since karmada doesn't know the KEDA autoscaler manages the replicas, so Karmada would treat the replica change as unexpected. That's the reason why Karmada overwrites it.

For now, you can deploy a webhook as per https://karmada.io/docs/next/userguide/globalview/customizing-resource-interpreter/#customized-interpreter, to customize the behavior, or wait for a new solution tracked at #2371 which is more convenient than webhook.

I'm going to remove the kind/bug label as it works as expected.
/remove-kind bug

@karmada-bot karmada-bot removed the kind/bug Categorizes issue or PR as related to a bug. label Nov 15, 2022
@ArenaSu
Copy link
Author

ArenaSu commented Nov 15, 2022

@RainbowMango How can i find the caBundle of ResourceInterpreterWebhookConfiguration ? I do not known how to config it.

@ArenaSu
Copy link
Author

ArenaSu commented Nov 16, 2022 •
edited
Loading

@RainbowMango When i set byte array to caBundle message display below:

# kk apply -f interpreter-webhook-config-example.yaml
error: error validating "interpreter-webhook-config-example.yaml": error validating data: ValidationError(ResourceInterpreterWebhookConfiguration.webhooks[0].clientConfig.caBundle): invalid type for io.karmada.config.v1alpha1.ResourceInterpreterWebhookConfiguration.webhooks.clientConfig.caBundle: got "array", expected "string"; if you choose to ignore these errors, turn validation off with --validate=false

When i set string to caBundle message display below:

# kk apply -f interpreter-webhook-config-example-string.yaml
The ResourceInterpreterWebhookConfiguration "deployment" is invalid: webhooks.clientConfig.caBundle: Invalid value: "-----BEGIN CERTIFICATE-----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\nj1e0n5QTCYfnCrLr\n-----END CERTIFICATE-----\n-----BEGIN RSA PRIVATE KEY-----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\n3tpH+fMlRYmncltCx9Od51d9ZzJpaUpPAG/a7ZPbzVOiAmV4Udesmw==\n-----END RSA PRIVATE KEY-----\n": webhooks.clientConfig.caBundle in body must be of type byte: "-----BEGIN CERTIFICATE-----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\nj1e0n5QTCYfnCrLr\n-----END CERTIFICATE-----\n-----BEGIN RSA PRIVATE KEY-----\nMIIEpAIBAAKCAQEAu2Nfe7eOGodZhoCWnz1ghdqnNvKw+NtMGRBY990oXHEdPDnI\n3JZl6e28SFk+SeJWGNTtesHMBFWNf3bho+8NN4VmVlm8Tn8o+PKgJRXuGqwFV90e\nIlC1/WFprDX33V4mF1X86uo9PI/pX14XhL9Ox2gQbrgl3mYOsS+HIPxjzh0I4q9b\nUmDTkM/OBOexFYyJb1LnSkoheRtEY71zNtYPTufyP+42QF6f4IYvu0Ii3DIyeM8l\n92RKxL/GelT+z7y7WbjDv4pSklVGVGdUcfW1QmrKo15aBhNwRmu4v3cwNM/Cy0mD\nxFeyNx5CwHXToVvgsEcYvJMg4TI4nSc2ccn65wIDAQABAoIBAHCkHIp+3TH/OIaM\nl34jY/kyZZ+3JUCCemz6kbB1RcTDzgIc7iwDUEHdQXfwBWxeXMjSfepzwlK8prD/\nYkWr9jLwwoKXsIUzFQsItdF1LErmKtQVO/7+q1cjjmURj+yGorkWXFFN+v+DtpI4\nOkT2xsFBQdd8ZG8axCwoWL8wWEJV0kP0fKp1sKWrV/GQIqAsI+p8Wt3DLBxI5KBC\nKzIwP7Y3Jwwdv+YJpduCOgmGUPyDhJ6fKyA20dUCHc2pXxFLfZ/zk813TAMp/BRO\nn8w/qkxWwVAYJavLBHqbjlK/MgYrlAxfXS4YOkmomhR5o4U0q9Bf+dcN/IETpeSp\nujkJdEECgYEAwNgdgpzIjHCPZEbPZYznh7VVGbUiHQoP5IKyOzbcfGDp0ZmOKCN4\n55MGhKHeYAN7ohzxfqAT+9S22ZwOnu7nCUH/sU03Jj1TTxZ/z02SnsBvabhe2kbG\n2/6+BTR6gLBDE4i6T+GJGlxtjAZo322aUAnNbSdnoLor4tgi8k6ArSECgYEA+MHU\nWjogBRThMjjIM9N1+mLKBb11XFpE9oIk6Pclt6r/CRyCRmcFDiuJwbOrcmfFBzl/\nbh8E94fB13vdHExaDaTnRR0KbaFeevXOzMey8RqEENjYaCcB34at3ukXhL5hYOxo\nrwnb6y66ErCklcAmfWOaT0s4dgcXV1wSYZVGXwcCgYA6LflZOmvW0u6v1h0kCgqg\nCrkN9HPCRxLcYgHbk4WZkLN6JNWajnkfhF/nC97HIMXf9tN03F6rD1XK+SYAFRtm\n056MozsMMlw79BHDPSgK9Qun3ZPgTpIYNRanA1oiEQtrjUiIaQawCUqTgCuLnMl9\ndDehws2k1AYBfius5rozgQKBgQCz5GhO/63cPudETG/rmsa81ehHEmXm7Zjls+RB\nXUm3cz+QNT+47hNn1fB/VhFsYMLJoLkYx/HtmA2EaZzTNBwDtfdRsdiyw3nx7gUp\nbllnpsdO76JAX8UpAtqGU4aghpUhZJWnz7dscpQ5o+jCKv0qvHcBVOJ16Fbm5Dye\nuTb0zQKBgQCtqxztkpMJojG/bB9i8izCXnMi7Exa+wVd6n9PgrkjC5UB0l/ZkJhz\n5/rdxrU/vJ3ipO1mJxsgxV5+EPKAlHV2t65MCJ2/HTmSV9aA0SAPG6nbz9RvS5lH\n3tpH+fMlRYmncltCx9Od51d9ZzJpaUpPAG/a7ZPbzVOiAmV4Udesmw==\n-----END RSA PRIVATE KEY-----\n"

Example config below：

---
apiVersion: config.karmada.io/v1alpha1
kind: ResourceInterpreterWebhookConfiguration
metadata:
  name: deployment
  namespace: cnuser
webhooks:
  - name: workloads.example.com
    rules:
      - operations: [ "Retain" ]
        apiGroups: [ "apps" ]
        apiVersions: [ "v1" ]
        kinds: [ "Deployment" ]
    clientConfig:
      url: https://karmada-interpreter-webhook-example.karmada-system.svc.cluster.local:443/interpreter-workload
      caBundle: |
        -----BEGIN CERTIFICATE-----
        MIIE6DCCA9CgAwIBAgIIZRZG/LwayHkwDQYJKoZIhvcNAQELBQAwHzEQMA4GA1UE
        ChMHa2FybWFkYTELMAkGA1UEAxMCY2EwHhcNMjIwODA1MDgxNzM0WhcNMzIwODAy
        MDgxNzI2WjAwMRcwFQYDVQQKEw5zeXN0ZW06bWFzdGVyczEVMBMGA1UEAxMMc3lz
        dGVtOmFkbWluMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2Nfe7eO
        GodZhoCWnz1ghdqnNvKw+NtMGRBY990oXHEdPDnI3JZl6e28SFk+SeJWGNTtesHM
        BFWNf3bho+8NN4VmVlm8Tn8o+PKgJRXuGqwFV90eIlC1/WFprDX33V4mF1X86uo9
        PI/pX14XhL9Ox2gQbrgl3mYOsS+HIPxjzh0I4q9bUmDTkM/OBOexFYyJb1LnSkoh
        eRtEY71zNtYPTufyP+42QF6f4IYvu0Ii3DIyeM8l92RKxL/GelT+z7y7WbjDv4pS
        klVGVGdUcfW1QmrKo15aBhNwRmu4v3cwNM/Cy0mDxFeyNx5CwHXToVvgsEcYvJMg
        4TI4nSc2ccn65wIDAQABo4ICFTCCAhEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
        MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaA
        FCz4187OZGWRz2E+crOTyFvS2KtyMIIBrwYDVR0RBIIBpjCCAaKCAIIUKi5rYXJt
        YWRhLXN5c3RlbS5zdmOCIioua2FybWFkYS1zeXN0ZW0uc3ZjLmNsdXN0ZXIubG9j
        YWyCHGthcm1hZGEtYWdncmVnYXRlZC1hcGlzZXJ2ZXKCPWthcm1hZGEtYWdncmVn
        YXRlZC1hcGlzZXJ2ZXIua2FybWFkYS1zeXN0ZW0uc3ZjLmNsdXN0ZXIubG9jYWyC
        EWthcm1hZGEtYXBpc2VydmVygjJrYXJtYWRhLWFwaXNlcnZlci5rYXJtYWRhLXN5
        c3RlbS5zdmMuY2x1c3Rlci5sb2NhbIIPa2FybWFkYS13ZWJob29rgiJrYXJtYWRh
        LXdlYmhvb2sua2FybWFkYS1zeXN0ZW0uc3ZjgjBrYXJtYWRhLXdlYmhvb2sua2Fy
        bWFkYS1zeXN0ZW0uc3ZjLmNsdXN0ZXIubG9jYWyCCmt1YmVybmV0ZXOCEmt1YmVy
        bmV0ZXMuZGVmYXVsdIIWa3ViZXJuZXRlcy5kZWZhdWx0LnN2Y4IJbG9jYWxob3N0
        hwR/AAABhwQK/gABhwQKFQorhwTaXlviMA0GCSqGSIb3DQEBCwUAA4IBAQChCqMZ
        uhQWcGJQshmrlt6QDpBFZYDS9SZBQT3eA5GESwoVvDjr85HqaEFf33V8hDLQVQI8
        4Pc8wk9P80hYcZvfG+jOVI4Ifss/gq18p81qzJOkSiadzjhIWkByjsPlfdwmpVay
        DQByP56nFtqRQeEKaBeROKtvicQvwKSmn05pfXfPqBMlDJ7jOX1WcqwymMsZ8zEI
        U4DnPvZdQWwGlWJURXvGFOi5YIAjyPyGxx36S8v86y1rAnzz2MeigPQIlWgJHPWZ
        IQqitpMY8yC5lzINJZ+Uw5pabN7N4QM9piAAlsMsQljMd9gi9Ea/tlGDLPc7iAnW
        j1e0n5QTCYfnCrLr
        -----END CERTIFICATE-----
        -----BEGIN RSA PRIVATE KEY-----
        MIIEpAIBAAKCAQEAu2Nfe7eOGodZhoCWnz1ghdqnNvKw+NtMGRBY990oXHEdPDnI
        3JZl6e28SFk+SeJWGNTtesHMBFWNf3bho+8NN4VmVlm8Tn8o+PKgJRXuGqwFV90e
        IlC1/WFprDX33V4mF1X86uo9PI/pX14XhL9Ox2gQbrgl3mYOsS+HIPxjzh0I4q9b
        UmDTkM/OBOexFYyJb1LnSkoheRtEY71zNtYPTufyP+42QF6f4IYvu0Ii3DIyeM8l
        92RKxL/GelT+z7y7WbjDv4pSklVGVGdUcfW1QmrKo15aBhNwRmu4v3cwNM/Cy0mD
        xFeyNx5CwHXToVvgsEcYvJMg4TI4nSc2ccn65wIDAQABAoIBAHCkHIp+3TH/OIaM
        l34jY/kyZZ+3JUCCemz6kbB1RcTDzgIc7iwDUEHdQXfwBWxeXMjSfepzwlK8prD/
        YkWr9jLwwoKXsIUzFQsItdF1LErmKtQVO/7+q1cjjmURj+yGorkWXFFN+v+DtpI4
        OkT2xsFBQdd8ZG8axCwoWL8wWEJV0kP0fKp1sKWrV/GQIqAsI+p8Wt3DLBxI5KBC
        KzIwP7Y3Jwwdv+YJpduCOgmGUPyDhJ6fKyA20dUCHc2pXxFLfZ/zk813TAMp/BRO
        n8w/qkxWwVAYJavLBHqbjlK/MgYrlAxfXS4YOkmomhR5o4U0q9Bf+dcN/IETpeSp
        ujkJdEECgYEAwNgdgpzIjHCPZEbPZYznh7VVGbUiHQoP5IKyOzbcfGDp0ZmOKCN4
        55MGhKHeYAN7ohzxfqAT+9S22ZwOnu7nCUH/sU03Jj1TTxZ/z02SnsBvabhe2kbG
        2/6+BTR6gLBDE4i6T+GJGlxtjAZo322aUAnNbSdnoLor4tgi8k6ArSECgYEA+MHU
        WjogBRThMjjIM9N1+mLKBb11XFpE9oIk6Pclt6r/CRyCRmcFDiuJwbOrcmfFBzl/
        bh8E94fB13vdHExaDaTnRR0KbaFeevXOzMey8RqEENjYaCcB34at3ukXhL5hYOxo
        rwnb6y66ErCklcAmfWOaT0s4dgcXV1wSYZVGXwcCgYA6LflZOmvW0u6v1h0kCgqg
        CrkN9HPCRxLcYgHbk4WZkLN6JNWajnkfhF/nC97HIMXf9tN03F6rD1XK+SYAFRtm
        056MozsMMlw79BHDPSgK9Qun3ZPgTpIYNRanA1oiEQtrjUiIaQawCUqTgCuLnMl9
        dDehws2k1AYBfius5rozgQKBgQCz5GhO/63cPudETG/rmsa81ehHEmXm7Zjls+RB
        XUm3cz+QNT+47hNn1fB/VhFsYMLJoLkYx/HtmA2EaZzTNBwDtfdRsdiyw3nx7gUp
        bllnpsdO76JAX8UpAtqGU4aghpUhZJWnz7dscpQ5o+jCKv0qvHcBVOJ16Fbm5Dye
        uTb0zQKBgQCtqxztkpMJojG/bB9i8izCXnMi7Exa+wVd6n9PgrkjC5UB0l/ZkJhz
        5/rdxrU/vJ3ipO1mJxsgxV5+EPKAlHV2t65MCJ2/HTmSV9aA0SAPG6nbz9RvS5lH
        3tpH+fMlRYmncltCx9Od51d9ZzJpaUpPAG/a7ZPbzVOiAmV4Udesmw==
        -----END RSA PRIVATE KEY-----
    interpreterContextVersions: [ "v1alpha1" ]

@RainbowMango
Copy link
Member

/assign @XiShanYongYe-Chang
Please help to take a look

@XiShanYongYe-Chang
Copy link
Member

Hi @ArenaSu, we need to add the certificate encrypted using Base64 to the cabundle, just like the caBundle filed in the ValidatingWebhookConfiguration.

@ArenaSu
Copy link
Author

ArenaSu commented Nov 25, 2022

Hi @ArenaSu, we need to add the certificate encrypted using Base64 to the cabundle, just like the caBundle filed in the ValidatingWebhookConfiguration.

Get it, i'll try. Thanks.

@ArenaSu
Copy link
Author

ArenaSu commented Nov 25, 2022

@XiShanYongYe-Chang Hi, tell user to copy ca.crt from cmd below is easy to run it. And thanks again.

# kubectl get secret -n karmada-system karmada-interpreter-webhook-example-token-wcjt9 -o yaml
apiVersion: v1
data:
  ca.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURBRENDQWVpZ0F3SUJBZ0lCQURBTkJna3Foa2lHOXcwQkFRc0ZBREFWTVJNd0VRWURWUVFERXdwcmRXSmwKY201bGRHVnpNQ0FYRFRJeU1EZ3dOVEF4TXpnME5Wb1lEekl4TWpJd056RXlNREV6T0RRMVdqQVZNUk13RVFZRApWUVFERXdwcmRXSmxjbTVsZEdWek1JSUJJakFOQmdrcWhraUc5dzBCQVFFRkFBT0NBUThBTUlJQkNnS0NBUUVBCm9uM2VrVG5sL0F0Y0c2ZEs1aU5sTTBjRHMwVmJvZmJnSCtMTlFSaEZ1ZWo4WU1iNTBrV1NqTGtaT2w3U2QveXEKNVdkeTdZRWYxZWFXQ2k0OUhIeDhmSVRKaERvcHNOR0JFUDlHbDdnSzdTQ2IyblRWcTBBQWMvL1E2b1g0cUl4OQpkbkVWVUllUGtvclRpRTh6Q213eXJ5dGFxL0Z2VnZhT2duU1UrN3hqbEExOFV4VjNoaWZpU1dLOEt2Y0phaXVDCjE2VmRiTHBRM0pBNjBadjI3b1N1ZzFjZ2x4T1ZKSVhuMFhBSGhtU2pBc3UwcmdobWJXaFU1NjNKQTRBK3ZUcUwKQUg3T3ExZlNKT2RaOFdKTjJkR1dKRVl2d01rUHhHQ3p2STZDaTVWcnYxMVBrU3Jpdno0dE41VHRYc0JPVXVVSAoxWkhGalowOGY2YUcxalZRZ1BCTnNRSURBUUFCbzFrd1Z6QU9CZ05WSFE4QkFmOEVCQU1DQXFRd0R3WURWUjBUCkFRSC9CQVV3QXdFQi96QWRCZ05WSFE0RUZnUVVkZTF4WVNMR2dwTlhKNVgwVTRPcEQyaXRob0l3RlFZRFZSMFIKQkE0d0RJSUthM1ZpWlhKdVpYUmxjekFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBZktVZjVVcFcreHYxbDFVVgpLcFRMUnZCK3d5anpsMTdOb3JyLzF1b29tWlBwc1l5TFJ6cXhJbVlJS21mamZtdXU2VUFqa0lyOTI5RzFIUUhhCkJNRzZhcnkveDE4dUVMekQzbW5PbFFCZEpLRjB3aHZXQzJ3a1VRRzJweE9lci9yM0RjRFZHUWY4RmF4Q1R1YW8KdzdJckJISStIRjFpb0hMTTgzbWU2K3NUMzEwcU4wa1FQN25uNVpNMlllSGY5a1NnRDhpK0EvWXRGKzB1enB5RwpBc09GYi9BL0JLb0Npb0YrK2dKWWY5UW5uT0gvM01CejN4ZTZNaWM4OFZXQ0duR0VZNVhhbW11TVo0OUV0MTdpCjd1RFkwZ1BHSkFOWGdmQTdiNXNxcHVVbDBIMVBHZ0VGR1R3eWFjVkxoRFFZWjFlM1ZtWWNvZU1oRUZsRGZEOU0KWWxmSDRnPT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
  namespace: a2FybWFkYS1zeXN0ZW0=
  token: ZXlKaGJHY2lPaUpTVXpJMU5pSXNJbXRwWkNJNklqVnZTREZRV201MmNYZHpaemxsV0dwRVFrRnpaMmRSVG5OV2EyZEtkVXBvTTJzNVNYVlpWM2N0UkRnaWZRLmV5SnBjM01pT2lKcmRXSmxjbTVsZEdWekwzTmxjblpwWTJWaFkyTnZkVzUwSWl3aWEzVmlaWEp1WlhSbGN5NXBieTl6WlhKMmFXTmxZV05qYjNWdWRDOXVZVzFsYzNCaFkyVWlPaUpyWVhKdFlXUmhMWE41YzNSbGJTSXNJbXQxWW1WeWJtVjBaWE11YVc4dmMyVnlkbWxqWldGalkyOTFiblF2YzJWamNtVjBMbTVoYldVaU9pSnJZWEp0WVdSaExXbHVkR1Z5Y0hKbGRHVnlMWGRsWW1odmIyc3RaWGhoYlhCc1pTMTBiMnRsYmkxM1kycDBPU0lzSW10MVltVnlibVYwWlhNdWFXOHZjMlZ5ZG1salpXRmpZMjkxYm5RdmMyVnlkbWxqWlMxaFkyTnZkVzUwTG01aGJXVWlPaUpyWVhKdFlXUmhMV2x1ZEdWeWNISmxkR1Z5TFhkbFltaHZiMnN0WlhoaGJYQnNaU0lzSW10MVltVnlibVYwWlhNdWFXOHZjMlZ5ZG1salpXRmpZMjkxYm5RdmMyVnlkbWxqWlMxaFkyTnZkVzUwTG5WcFpDSTZJbUl6T0dGbE5UQTRMVFU0TkRBdE5HUXdaUzA0TnpoaUxXTTJNR0UyWVdRMU9UazJZaUlzSW5OMVlpSTZJbk41YzNSbGJUcHpaWEoyYVdObFlXTmpiM1Z1ZERwcllYSnRZV1JoTFhONWMzUmxiVHByWVhKdFlXUmhMV2x1ZEdWeWNISmxkR1Z5TFhkbFltaHZiMnN0WlhoaGJYQnNaU0o5LmRtQ3FxNWh1NHdFaU5yNEFhQzZudzFyMzIxa2licTh2UktKdFBidnpZYldJWkUzV2xPWjVLNl9Fbk1TeXllNG81c0hmSU8yVXJ1dk45eDdNTUpRODVYWHNydmVPWlBvYmxHU2NRX0xoZ3Jhd01sZ242dUd4M1k3dW05RUMyN2VQdXVBMVJlaVE4MVZzcThtX194N1YwMmRqTU9wZFBtUXJ5YVRSUjlTSXQtUEtzUW9ndDJ2VUt6azR3NERSNl9sMUlIaks2Uk1qVzVsTnNNcndoNFM1bkpnZ0FyVlVDN3ZQSExndW9ZSU1TY1d4SmRNNEUxUDg5bjRGMmV6YzdCUlh4aG5FVlJGZE5uOXBSd191d3RucGlDZnFtOU5LQXVYZWFoMlpJaDBOcGFwLUZMdDM3M0d3V2ZoVGN1bnp0d0hVeDdEQnpqNzFmOEt5VDhZS0U5Y3d1QQ==
kind: Secret
metadata:
  annotations:
    kubernetes.io/service-account.name: karmada-interpreter-webhook-example
    kubernetes.io/service-account.uid: b38ae508-5840-4d0e-878b-c60a6ad5996b
  creationTimestamp: "2022-11-15T08:29:05Z"
  name: karmada-interpreter-webhook-example-token-wcjt9
  namespace: karmada-system
  resourceVersion: "31667977"
  uid: 0bd3ed48-1e1d-4f08-80fa-7f1fa9caf016
type: kubernetes.io/service-account-token

@ArenaSu ArenaSu closed this as completed Nov 25, 2022
@XiShanYongYe-Chang
Copy link
Member

Hi, tell user to copy ca.crt from cmd below is easy to run it. And thanks again.

I'm glad to hear that. Would you mind making a contribution? We can add some instructions to the document.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@XiShanYongYe-Chang XiShanYongYe-Chang

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@RainbowMango @ArenaSu @karmada-bot @XiShanYongYe-Chang