The error is related to the certificate used for debugging the webhook locally.

[googs1025]

sor, I have a beginner's question.
I'm trying to debug a program in GoLand IDE locally, but when I modify the configuration file, I encounter some certificate authentication errors. I would like to ask how you configure it when developing locally.
How to configure a certificate.

➜  jobset git:(add_pod_controller_unit_test) ✗ kubectl get pods -A                               
NAMESPACE       NAME                                        READY   STATUS    RESTARTS   AGE
jobset-system   jobset-controller-manager-787489c96-s97l6   2/2     Running   0          2m4s
kube-system     coredns-5dd5756b68-7msgg                    1/1     Running   0          6h9m
kube-system     etcd-minikube                               1/1     Running   0          6h9m
kube-system     kube-apiserver-minikube                     1/1     Running   0          6h9m
kube-system     kube-controller-manager-minikube            1/1     Running   0          6h9m
kube-system     kube-proxy-mrpk5                            1/1     Running   0          6h9m
kube-system     kube-scheduler-minikube                     1/1     Running   0          6h9m
kube-system     storage-provisioner                         1/1     Running   0          6h9m
➜  jobset git:(add_pod_controller_unit_test) ✗ kubectl apply -f examples/simple/paralleljobs.yaml
Error from server (InternalError): error when creating "examples/simple/paralleljobs.yaml": Internal error occurred: failed calling webhook "mjobset.kb.io": failed to call webhook: Post "https://host.docker.internal:9443/mutate-jobset-x-k8s-io-v1alpha2-jobset?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "jobset-ca")
➜  jobset git:(add_pod_controller_unit_test) ✗ 

apiVersion: v1
items:
- apiVersion: v1
  data:
    ca.crt: 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
    ca.key: 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
    tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUROakNDQWg2Z0F3SUJBZ0lCQVRBTkJna3Foa2lHOXcwQkFRc0ZBREFsTVE4d0RRWURWUVFLRXdacWIySnoKWlhReEVqQVFCZ05WQkFNVENXcHZZbk5sZEMxallUQWVGdzB5TkRBME1EVXdOVEUyTURCYUZ3MHlOVEEwTURVdwpOakUyTURCYU1COHhIVEFiQmdOVkJBTVRGR2h2YzNRdVpHOWphMlZ5TG1sdWRHVnlibUZzTUlJQklqQU5CZ2txCmhraUc5dzBCQVFFRkFBT0NBUThBTUlJQkNnS0NBUUVBOGs3K0dBa2FObEx4eS9JZHlVUXg0N1UxSDQ1UkJsaVAKUlFpR1h1NU83MC8xM0hJVmRrR25uZ0RwTEJzeno0UGRXQzFIY29wUXI0T0xuZnFSNTlEcCtwYVZOOW5ESFp1QgpVRFFHZlpSYS9TOHgvWjltcy9QOFZGVTZLRkJJdk5hVzJPOWxJQi82SXJtaVJVeCtNa1ZXejNSc1czbVJFa0NmCi80WUZrUnpUcTdTa0tMU2RHM0lFeWJCQXp5amI4NUVGMlM2Nitqb0RlcDkwOHh2a0ZjbWZJek40TjhmQjdiZFAKN2lkdDdnSk1Vazd2QnZ1RlhzM3ZRTERDZmJkd2RFczd2dDVQY0l5TFZWeEwzbjNpeWtTRVFXU2JOVEp3emlwTAp2QndQVm0wR29DQ29vMDBNTWloTHFVSmdPTlVSNkRZTy91KzVpN1hmek5jQ2UzZDhhQThvSXdJREFRQUJvM2N3CmRUQU9CZ05WSFE4QkFmOEVCQU1DQmFBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3RXdEQVlEVlIwVEFRSC8KQkFJd0FEQWZCZ05WSFNNRUdEQVdnQlJKV2tOR0lObUgrbDhEb1dxUlBwKzNOZDR1aHpBZkJnTlZIUkVFR0RBVwpnaFJvYjNOMExtUnZZMnRsY2k1cGJuUmxjbTVoYkRBTkJna3Foa2lHOXcwQkFRc0ZBQU9DQVFFQVhyN3RqSHhmCjFWZ2NJdi9iUnlhZ2tvTVJXOEdLNUI2S0V4SStwODhHaFRTVG1HMVNMKzc0NTRmVnFsd2U3YUdOdHRsZU1xVzUKdXJuUS9TSXYwUTA2R1Rjb0lKUmwrSlkwTGhrMC9NY2l1eE5NL0F6eTJOSFNRbzBEWWVIblNYalZvMjZ6R1hXcApVUGxVM3ppYXVWZ0wvR2JWNmlSYmdmelF3Ui9Ua0EwZnJWZUdBN0hBTHpKaDRBd294N2hwOVVkbDRwWHdWdnB6CnRIWGp2cm5Jc3RIc1QzdW1PYTJKSmZuUHRDc2JXT0JrQVcyc1RRaktnYnVNcFlEaHExNjdkaHk0VXBPV0hxRy8KMlBrMGJ0SVFnWWFSZXk4N0dKb1U1Q0FENTY2dXVWU2RMSjM3OHlFalBRU0V0d2pCMFdXdmJrcm43UEgxMnpYOQpDeElXNEowRXNWQ1cxQT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
    tls.key: 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
  kind: Secret
  metadata:
    creationTimestamp: "2024-04-05T06:14:14Z"
    name: jobset-webhook-server-cert
    namespace: jobset-system
    resourceVersion: "14230"
    uid: eccdc6cd-0268-42cb-89b9-6871fb9faf4e
  type: Opaque
kind: List
metadata:
  resourceVersion: ""

apiVersion: admissionregistration.k8s.io/v1
kind: MutatingWebhookConfiguration
metadata:
  annotations:
    cert-manager.io/inject-ca-from: $(CERTIFICATE_NAMESPACE)/$(CERTIFICATE_NAME)
  creationTimestamp: "2024-04-05T06:14:14Z"
  generation: 2
  labels:
    app.kubernetes.io/component: webhook
    app.kubernetes.io/created-by: jobset
    app.kubernetes.io/instance: mutating-webhook-configuration
    app.kubernetes.io/managed-by: kustomize
    app.kubernetes.io/name: mutatingwebhookconfiguration
    app.kubernetes.io/part-of: jobset
  name: jobset-mutating-webhook-configuration
  resourceVersion: "14232"
  uid: a2808207-5cb7-4cd7-bb31-3d1df3f8ba3d
webhooks:
- admissionReviewVersions:
  - v1
  clientConfig:
    caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURIVENDQWdXZ0F3SUJBZ0lCQURBTkJna3Foa2lHOXcwQkFRc0ZBREFsTVE4d0RRWURWUVFLRXdacWIySnoKWlhReEVqQVFCZ05WQkFNVENXcHZZbk5sZEMxallUQWVGdzB5TkRBME1EVXdOVEUyTURCYUZ3MHpOREEwTURNdwpOakUyTURCYU1DVXhEekFOQmdOVkJBb1RCbXB2WW5ObGRERVNNQkFHQTFVRUF4TUphbTlpYzJWMExXTmhNSUlCCklqQU5CZ2txaGtpRzl3MEJBUUVGQUFPQ0FROEFNSUlCQ2dLQ0FRRUF6ZlVxV3FxSVEveUhJNnhEMHc3Z0MzQ3YKZ0lpTVRMb1ZZUkNYRmNoZWNtT29lR1BmVXhSd1cybjRrcVpxZ0lPdm44bi82QjlHR1E0SFlmdktSWVdRMkkvegp1TzVkb3ljMWV2VTgzdlZLbkxoQlZMeGNrcXk4UzJDQ0JqUytIREJvSFFIZ1RqK3A1amhGcHBUbjdnZ21iQzRPCk81RjMyQU9WZDZJYTU1c1JDN25PWEo0djRBeEFsRkhDLy9PL2ZzRUU3c1lKUXZ3WUd4dTg5RnJRWTlXN1Y0VG4KaFVQZkk3VitJRGtaMGdVNjdFK09QWWgvc1czRVVzWXpsTWQxclh6MWdNTmNsc0JPUmppblMxMmM2eDQwZ2UrQQpSVzI3bkJ2Y1Vtb2lpT1M1M2FJblBRbm9GZnlMS3pMWERvKzJNbFdLandFUGVQazdGQUJmUldwb0hiYlJMd0lECkFRQUJvMWd3VmpBT0JnTlZIUThCQWY4RUJBTUNBcVF3RHdZRFZSMFRBUUgvQkFVd0F3RUIvekFkQmdOVkhRNEUKRmdRVVNWcERSaURaaC9wZkE2RnFrVDZmdHpYZUxvY3dGQVlEVlIwUkJBMHdDNElKYW05aWMyVjBMV05oTUEwRwpDU3FHU0liM0RRRUJDd1VBQTRJQkFRQmx5VVY5REV3QU5NcytyakFlVkhQOEdWempJbHNkNUVXYUZFYlNTMHVSCk8zQ1FUTXRvK2VKTVo4RzNucld6T3h0elJuWkw0dzlCWDYrbzRQQ1dML3g3UExEbFZ0NDc3c3p3ZXE4SGU3R24KeFRRckNKbU8yWmlLdUtPaHM1UUpHNlAyQ0t4ZTNVY3RqODk5YW8wNlZGNVBYUkRCMVRUQU92NFFFNXFJU1RrZgpvV3JkaU5ZT1F3emJyKzdhdjdZSHVGUTlPbWp6R09yYzY4L2dVSFFKaGtta0laaW9yVCt0Vkg4My9hNW5LT1dxCkdSQmVQc29odTVROHlQemZEWlVVUEJUZ2hBS0U5TWdFOUlXQTJKR2VuTldxczF6aGV3M0JUQzNlWGV2SW1JbW8KUFVmTG53V21jRE9XWWNqR0dKSUIzVjFhcTQva25pOC9rb1pqM1lWMHZOdDMKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
    url: https://host.docker.internal:9443/mutate-jobset-x-k8s-io-v1alpha2-jobset
  failurePolicy: Fail
  matchPolicy: Equivalent
  name: mjobset.kb.io
  namespaceSelector: {}
  objectSelector: {}
  reinvocationPolicy: Never
  rules:
  - apiGroups:
    - jobset.x-k8s.io
    apiVersions:
    - v1alpha2
    operations:
    - CREATE
    - UPDATE
    resources:
    - jobsets
    scope: '*'
  sideEffects: None
  timeoutSeconds: 10
- admissionReviewVersions:
  - v1
  clientConfig:
    caBundle: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURIVENDQWdXZ0F3SUJBZ0lCQURBTkJna3Foa2lHOXcwQkFRc0ZBREFsTVE4d0RRWURWUVFLRXdacWIySnoKWlhReEVqQVFCZ05WQkFNVENXcHZZbk5sZEMxallUQWVGdzB5TkRBME1EVXdOVEUyTURCYUZ3MHpOREEwTURNdwpOakUyTURCYU1DVXhEekFOQmdOVkJBb1RCbXB2WW5ObGRERVNNQkFHQTFVRUF4TUphbTlpYzJWMExXTmhNSUlCCklqQU5CZ2txaGtpRzl3MEJBUUVGQUFPQ0FROEFNSUlCQ2dLQ0FRRUF6ZlVxV3FxSVEveUhJNnhEMHc3Z0MzQ3YKZ0lpTVRMb1ZZUkNYRmNoZWNtT29lR1BmVXhSd1cybjRrcVpxZ0lPdm44bi82QjlHR1E0SFlmdktSWVdRMkkvegp1TzVkb3ljMWV2VTgzdlZLbkxoQlZMeGNrcXk4UzJDQ0JqUytIREJvSFFIZ1RqK3A1amhGcHBUbjdnZ21iQzRPCk81RjMyQU9WZDZJYTU1c1JDN25PWEo0djRBeEFsRkhDLy9PL2ZzRUU3c1lKUXZ3WUd4dTg5RnJRWTlXN1Y0VG4KaFVQZkk3VitJRGtaMGdVNjdFK09QWWgvc1czRVVzWXpsTWQxclh6MWdNTmNsc0JPUmppblMxMmM2eDQwZ2UrQQpSVzI3bkJ2Y1Vtb2lpT1M1M2FJblBRbm9GZnlMS3pMWERvKzJNbFdLandFUGVQazdGQUJmUldwb0hiYlJMd0lECkFRQUJvMWd3VmpBT0JnTlZIUThCQWY4RUJBTUNBcVF3RHdZRFZSMFRBUUgvQkFVd0F3RUIvekFkQmdOVkhRNEUKRmdRVVNWcERSaURaaC9wZkE2RnFrVDZmdHpYZUxvY3dGQVlEVlIwUkJBMHdDNElKYW05aWMyVjBMV05oTUEwRwpDU3FHU0liM0RRRUJDd1VBQTRJQkFRQmx5VVY5REV3QU5NcytyakFlVkhQOEdWempJbHNkNUVXYUZFYlNTMHVSCk8zQ1FUTXRvK2VKTVo4RzNucld6T3h0elJuWkw0dzlCWDYrbzRQQ1dML3g3UExEbFZ0NDc3c3p3ZXE4SGU3R24KeFRRckNKbU8yWmlLdUtPaHM1UUpHNlAyQ0t4ZTNVY3RqODk5YW8wNlZGNVBYUkRCMVRUQU92NFFFNXFJU1RrZgpvV3JkaU5ZT1F3emJyKzdhdjdZSHVGUTlPbWp6R09yYzY4L2dVSFFKaGtta0laaW9yVCt0Vkg4My9hNW5LT1dxCkdSQmVQc29odTVROHlQemZEWlVVUEJUZ2hBS0U5TWdFOUlXQTJKR2VuTldxczF6aGV3M0JUQzNlWGV2SW1JbW8KUFVmTG53V21jRE9XWWNqR0dKSUIzVjFhcTQva25pOC9rb1pqM1lWMHZOdDMKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
    url: https://host.docker.internal:9443/mutate--v1-pod
  failurePolicy: Fail
  matchPolicy: Equivalent
  name: mpod.kb.io
  namespaceSelector: {}
  objectSelector:
    matchExpressions:
    - key: jobset.sigs.k8s.io/jobset-name
      operator: Exists
  reinvocationPolicy: Never
  rules:
  - apiGroups:
    - ""
    apiVersions:
    - v1
    operations:
    - CREATE
    resources:
    - pods
    scope: '*'
  sideEffects: None
  timeoutSeconds: 10

[googs1025]

I have solved it

[kannon92]

Could you explain?

[googs1025]

@kannon92 hi, thank you for ans. Do you mean to explain how I solved the problem? or what's the problem I'm having?

[kannon92]

Yes, please explain in case someone stumbles upon the closed issue.

[googs1025]

➜  ~ kubectl get secret -njobset-system -oyaml
apiVersion: v1
items:
- apiVersion: v1
  data:
    ca.crt: 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
    ca.key: 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
    tls.crt: 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
    tls.key: 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
  kind: Secret
  metadata:
    creationTimestamp: "2024-04-05T11:15:53Z"
    name: jobset-webhook-server-cert
    namespace: jobset-system
    resourceVersion: "15807"
    uid: 383be8f5-8423-4705-ad32-52c39de2ad83
  type: Opaque
kind: List
metadata:
  resourceVersion: ""

Set the dns variable to "host.docker.internal"

// pkg/util/cert/cert.go
const (
	serviceName             = "jobset-webhook-service"
	secretName              = "jobset-webhook-server-cert"
	secretNamespace         = "jobset-system"
	certDir                 = "/tmp/k8s-webhook-server/serving-certs"
	validateWebhookConfName = "jobset-validating-webhook-configuration"
	mutatingWebhookConfName = "jobset-mutating-webhook-configuration"
	caName                  = "jobset-ca"
	caOrg                   = "jobset"
)

// dnsName is the format of <service name>.<namespace>.svc
// var dnsName = fmt.Sprintf("%s.%s.svc", serviceName, secretNamespace)
var dnsName = "host.docker.internal"