Help Center/ Host Security Service/ FAQs/ Container Security/ Failed to Install an Agent in a Third-Party Cluster
Updated on 2025-12-12 GMT+08:00

Failed to Install an Agent in a Third-Party Cluster

Symptoms

The error below is reported when you create a namespace dedicated to HSS during kubeconfig file preparation or when you install the cluster connection component (ANP-Agent) during agent installation.

Error from server (InternalError): Internal error occurred: failed calling webhook "check-ignore-label.gatekeeper.sh": failed to call webhook: Post "https://gatekeeper-webhook-service.gatekeeper-system.svc:443/v1/admitlabel?timeout=3s": no endpoints available for service "gatekeeper-webhook-service"

Possible Causes

The container cluster protection plug-in is not completely uninstalled. When the proxy-agent image is started, the plug-in verifies its creation request and may prevent some resources from being created. As a result, the proxy-agent image fails to be started.

Solution

Uninstall the cluster protection plug-in by referring to What Do I Do If the Container Cluster Protection Plug-in Fails to Be Uninstalled?.