failed to create resource: admission webhook "webhook.cert-manager.io" denied about charts HOT 2 OPEN

Hi @grandeon,

I had exactly the same error!

However, the explanation is not particularly satisfactory.

Due to the use of the cert-manager, certificates are issued on the fully qualified internal Kubernetes service name.

This is composed as follows:

{{ fullname }}-{{ replicaCount }}.{{ fullname }}-headless.{{ namespace }}.svc.cluster.local.

Since the common name of a certificate may not exceed 64 bytes, this leads to the following name length restriction:

2 * length(fullname) + length(replicaCount) + length(namespace) < 35 characters.

from charts.

I ended up getting this to work by setting: fullnameOverride: "nifi-registry". And it ended up shortening everything to be within 64 character length, and in tern cert-manager was ok with it.

from charts.