[1.21.1] cert manager compatibilty problem? #2192
Description
Report
Tried with cert manager 1.17 and 1.19 and still got this messages in operator log.
Cert manager is working fine, the issuers are ready, certs on secrets also valid.
Even tried to ignore webhook validation error, the problem is the same.
More about the problem
2026-01-13T11:30:35.070Z ERROR Reconciler error {"controller": "psmdb-controller", "controllerGroup": "psmdb.percona.com", "controllerKind": "PerconaServerMongoDB", "PerconaServerMongoDB": {"name":"graylog-mdb-psmdb-db","namespace":"log"}, "namespace": "log", "name": "graylog-mdb-psmdb-db", "reconcileID": "f5eda14c-99fa-464b-a335-2ca246737e1e", "error": "TLS secrets handler: \"check cert-manager: the cert-manager validating webhook did not validate the dry-run CertificateRequest object\". Please create your TLS secret graylog-mdb-psmdb-db-ssl manually or setup cert-manager correctly", "errorVerbose": "TLS secrets handler: \"check cert-manager: the cert-manager validating webhook did not validate the dry-run CertificateRequest object\". Please create your TLS secret graylog-mdb-psmdb-db-ssl manually or setup cert-manager correctly\ngithub.com/percona/percona-server-mongodb-operator/pkg/controller/perconaservermongodb.(*ReconcilePerconaServerMongoDB).Reconcile\n\t/go/src/github.com/percona/percona-server-mongodb-operator/pkg/controller/perconaservermongodb/psmdb_controller.go:393\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Reconcile\n\t/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:216\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler\n\t/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:461\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem\n\t/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:421\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func1.1\n\t/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:296\nruntime.goexit\n\t/usr/local/go/src/runtime/asm_amd64.s:1693"}
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).reconcileHandler
/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:474
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).processNextWorkItem
/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:421
sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller[...]).Start.func1.1
/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/internal/controller/controller.go:296
Steps to reproduce
- install cert manager (default values)
- install percona psmdb operator (default values)
- have previously created psmdb cluster
Versions
- Kubernetes 1.32
- Operator 1.21.1
- Database 8.0.4
Anything else?
No response