Linkerd check failed for linkerd-webhooks-and-apisvc-tls. There is no linkerd-proxy injected in our EKS cluster pods

Now I’m trying to upgrade to Linkerd version 2.18.3 with standard plan license, I got the error + linkerd upgrade --set disableHeartBeat=true --set identity.externalCA=true --set proxyInit.runAsRoot=true | kubectl apply -f -

Command "upgrade" is deprecated, and will be removed in a future release. Please install the Linkerd dashboard instead. See https://docs.buoyant.io/linkerd-dashboard/getting-started/

secrets "linkerd-identity-issuer" not found

error: no objects passed to apply

$ linkerd check

kubernetes-api

√ can initialize the client
√ can query the Kubernetes API

kubernetes-version

√ is running the minimum Kubernetes API version

linkerd-existence

√ ‘linkerd-config’ config map exists
√ heartbeat ServiceAccount exist
√ control plane replica sets are ready
√ no unschedulable pods
√ control plane pods are ready
√ cluster networks contains all pods
√ cluster networks contains all services

linkerd-config

√ control plane Namespace exists
√ control plane ClusterRoles exist
√ control plane ClusterRoleBindings exist
√ control plane ServiceAccounts exist
√ control plane CustomResourceDefinitions exist
√ control plane MutatingWebhookConfigurations exist
√ control plane ValidatingWebhookConfigurations exist
√ proxy-init container runs as root user if docker container runtime is used

linkerd-identity

× certificate config is valid
secrets “linkerd-identity-issuer” not found
see Checks | Linkerd for hints

Status check results are ×