# Error: UPGRADE FAILED: failed to create resource: admission webhook "validate.kyverno.svc-fail" denied the request:

**URL:** <https://community.traefik.io/t/error-upgrade-failed-failed-to-create-resource-admission-webhook-validate-kyverno-svc-fail-denied-the-request/29941>\
**Category:** Traefik v3 (latest)\
**Tags:** kubernetes-ingress\
**Created:** [June 15, 2026, 8:59pm UTC](https://community.traefik.io/t/error-upgrade-failed-failed-to-create-resource-admission-webhook-validate-kyverno-svc-fail-denied-the-request/29941 "2026-06-15T20:59:14Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![amino95](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/amino95/32/11263_2.png) [@amino95](https://community.traefik.io/u/amino95)\
**Post date:** [June 15, 2026, 8:59pm UTC](https://community.traefik.io/t/error-upgrade-failed-failed-to-create-resource-admission-webhook-validate-kyverno-svc-fail-denied-the-request/29941/1 "2026-06-15T20:59:14Z")

</div>

Hello, i can't resolve this error when trying to migrate from nginx ingress to traefik via Helm templates. I already have an helm chart already deployed on a private cluster so i can't install the original traefik helm chart, i only have the permissions to update and deploy the chart release:

level=WARN msg="upgrade failed" name=project-name error="failed to create resource: admission webhook "validate.kyverno.svc-fail" denied the request: "\n\nresource Ingress/namespace/ingress-name" was blocked due to the following policies:

\n\nvalidate-traefik-hosts:\n traefik-ingress-host-validation: |-\n 'Traefik Ingress validation failed. Reason: ' + (variables.matchesExclude ?\n\n 'At least one host matches excluded patterns.' :\n 'Hosts do not match allowed Traefik patterns (' + variables.allowedPatternsList.join(', ') + '). Invalid hosts: ' + variables.invalidHostsList.join(', ')\n )\n"  
Error: UPGRADE FAILED: failed to create resource: admission webhook "validate.kyverno.svc-fail" denied the request:

resource Ingress/05o-reporting-analytics-tools-dev/ora-monitoring-data-freshness-exporter-05o-datafreshnessexporte was blocked due to the following policies  
validate-traefik-hosts:  
**traefik-ingress-host-validation: |-  
'Traefik Ingress validation failed. Reason: ' + (variables.matchesExclude ?**

```auto
  'At least one host matches excluded patterns.' :
  'Hosts do not match allowed Traefik patterns (' + variables.allowedPatternsList.join(', ') + '). Invalid hosts: ' + variables.invalidHostsList.join(', ')
)

```