# Linkerd check failed for linkerd-webhooks-and-apisvc-tls. There is no linkerd-proxy injected in our EKS cluster pods

**URL:** <https://linkerd.buoyant.io/t/linkerd-check-failed-for-linkerd-webhooks-and-apisvc-tls-there-is-no-linkerd-proxy-injected-in-our-eks-cluster-pods/806>\
**Category:** Linkerd General Discussion\
**Tags:** certificates\
**Created:** [August 29, 2025, 8:45am UTC](https://linkerd.buoyant.io/t/linkerd-check-failed-for-linkerd-webhooks-and-apisvc-tls-there-is-no-linkerd-proxy-injected-in-our-eks-cluster-pods/806 "2025-08-29T08:45:58Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jing.tyagi](https://avatars.discourse-cdn.com/v4/letter/j/45deac/32.png) [@jing.tyagi](https://linkerd.buoyant.io/u/jing.tyagi)\
**Post date:** [August 29, 2025, 8:45am UTC](https://linkerd.buoyant.io/t/linkerd-check-failed-for-linkerd-webhooks-and-apisvc-tls-there-is-no-linkerd-proxy-injected-in-our-eks-cluster-pods/806/1 "2025-08-29T08:45:58Z")

</div>

## linkerd-webhooks-and-apisvc-tls

× proxy-injector webhook has valid cert  
anchors not within their validity period:  
\* 147892185609361118105547867649820840928 linkerd-proxy-injector.linkerd.svc not valid anymore. Expired on 2025-08-26T16:12:36Z  
see [Checks | Linkerd](https://linkerd.io/2.14/checks/#l5d-proxy-injector-webhook-cert-valid) for hints

Status check results are ×

Currently we are using stable-2.14.10, got standard linkerd license, hasn’t got chance to upgrade yet.

```auto
Image: cr.l5d.io/linkerd/controller:stable-2.14.10
Image ID: cr.l5d.io/linkerd/controller@sha256:65bed6a346b259cb1ff04420ee296afa28c38cb3e789ce285e5987f039dddf45

```

---

<div class="post-metadata">

**Author:** ![jing.tyagi](https://avatars.discourse-cdn.com/v4/letter/j/45deac/32.png) [@jing.tyagi](https://linkerd.buoyant.io/u/jing.tyagi)\
**Post date:** [August 29, 2025, 11:15am UTC](https://linkerd.buoyant.io/t/linkerd-check-failed-for-linkerd-webhooks-and-apisvc-tls-there-is-no-linkerd-proxy-injected-in-our-eks-cluster-pods/806/2 "2025-08-29T11:15:03Z")

</div>

Now I’m trying to upgrade to Linkerd version 2.18.3 with standard plan license, I got the error **`+ linkerd upgrade --set disableHeartBeat=true --set identity.externalCA=true --set proxyInit.runAsRoot=true | kubectl apply -f -`**

**`Command "upgrade" is deprecated, and will be removed in a future release. Please install the Linkerd dashboard instead. See `[`https://docs.buoyant.io/linkerd-dashboard/getting-started/`](https://docs.buoyant.io/linkerd-dashboard/getting-started/)**

**`secrets "linkerd-identity-issuer" not found`**

**`error: no objects passed to apply`**

## $ linkerd check

kubernetes-api

√ can initialize the client  
√ can query the Kubernetes API

## kubernetes-version

√ is running the minimum Kubernetes API version

## linkerd-existence

√ ‘linkerd-config’ config map exists  
√ heartbeat ServiceAccount exist  
√ control plane replica sets are ready  
√ no unschedulable pods  
√ control plane pods are ready  
√ cluster networks contains all pods  
√ cluster networks contains all services

## linkerd-config

√ control plane Namespace exists  
√ control plane ClusterRoles exist  
√ control plane ClusterRoleBindings exist  
√ control plane ServiceAccounts exist  
√ control plane CustomResourceDefinitions exist  
√ control plane MutatingWebhookConfigurations exist  
√ control plane ValidatingWebhookConfigurations exist  
√ proxy-init container runs as root user if docker container runtime is used

## linkerd-identity

× certificate config is valid  
secrets “linkerd-identity-issuer” not found  
see [Checks | Linkerd](https://linkerd.io/2.14/checks/#l5d-identity-cert-config-valid) for hints

Status check results are ×