{
  "id": "kubernetes/mutating-webhook-timeout",
  "signature": "Error from server (InternalError): error when creating \"pod.yaml\": Internal error occurred: failed calling webhook \"pod-identity-webhook.m8r.io\": Post \"https://pod-identity-webhook.m8r.io/mutate?timeout=10s\": context deadline exceeded",
  "signature_zh": "服务器错误（内部错误）：创建 \"pod.yaml\" 时出错：调用 Webhook \"pod-identity-webhook.m8r.io\" 失败：Post \"https://pod-identity-webhook.m8r.io/mutate?timeout=10s\"：上下文截止时间已过",
  "regex": "failed calling webhook.*Post.*context deadline exceeded",
  "domain": "kubernetes",
  "category": "network_error",
  "subcategory": null,
  "root_cause": "A mutating admission webhook is unreachable or timing out, often due to network issues, missing service, or the webhook pod being down.",
  "root_cause_type": "generic",
  "root_cause_zh": "可变准入 Webhook 不可达或超时，通常是由于网络问题、服务缺失或 Webhook Pod 宕机。",
  "versions": [
    {
      "version": "Kubernetes 1.26",
      "introduced": null,
      "deprecated": null,
      "removed": null,
      "behavior_change": null,
      "status": "active"
    },
    {
      "version": "Kubernetes 1.27",
      "introduced": null,
      "deprecated": null,
      "removed": null,
      "behavior_change": null,
      "status": "active"
    },
    {
      "version": "Kubernetes 1.28",
      "introduced": null,
      "deprecated": null,
      "removed": null,
      "behavior_change": null,
      "status": "active"
    },
    {
      "version": "istio 1.18",
      "introduced": null,
      "deprecated": null,
      "removed": null,
      "behavior_change": null,
      "status": "active"
    },
    {
      "version": "cert-manager 1.12",
      "introduced": null,
      "deprecated": null,
      "removed": null,
      "behavior_change": null,
      "status": "active"
    }
  ],
  "os_specific": {},
  "dead_ends": [
    {
      "action": "Increasing webhook timeout in the ValidatingWebhookConfiguration",
      "why_fails": "超时通常是网络不通或服务宕机，增加超时不会解决根本问题",
      "fail_rate": 0.75,
      "condition": "",
      "sources": []
    },
    {
      "action": "Restarting the API server",
      "why_fails": "问题出在 Webhook 服务端，不是 API 服务器",
      "fail_rate": 0.9,
      "condition": "",
      "sources": []
    },
    {
      "action": "Disabling the webhook temporarily by deleting the MutatingWebhookConfiguration",
      "why_fails": "虽然可以绕过错误，但会禁用安全功能，且需要重新创建配置",
      "fail_rate": 0.5,
      "condition": "",
      "sources": []
    }
  ],
  "workarounds": [
    {
      "action": "Check webhook pod status: kubectl get pods -n <namespace> -l app=<webhook-name>, then restart if not running: kubectl rollout restart deployment/<webhook-deployment> -n <namespace>",
      "success_rate": 0.85,
      "how": "Check webhook pod status: kubectl get pods -n <namespace> -l app=<webhook-name>, then restart if not running: kubectl rollout restart deployment/<webhook-deployment> -n <namespace>",
      "condition": "",
      "sources": []
    },
    {
      "action": "Verify network connectivity by exec into a temporary pod: kubectl run test --image=busybox --rm -it -- wget -O- https://pod-identity-webhook.m8r.io/mutate --timeout=5",
      "success_rate": 0.8,
      "how": "Verify network connectivity by exec into a temporary pod: kubectl run test --image=busybox --rm -it -- wget -O- https://pod-identity-webhook.m8r.io/mutate --timeout=5",
      "condition": "",
      "sources": []
    }
  ],
  "workarounds_zh": [
    "Check webhook pod status: kubectl get pods -n <namespace> -l app=<webhook-name>, then restart if not running: kubectl rollout restart deployment/<webhook-deployment> -n <namespace>",
    "Verify network connectivity by exec into a temporary pod: kubectl run test --image=busybox --rm -it -- wget -O- https://pod-identity-webhook.m8r.io/mutate --timeout=5"
  ],
  "transition_graph": {
    "leads_to": [],
    "preceded_by": [],
    "frequently_confused_with": []
  },
  "official_doc_url": "https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/",
  "official_doc_section": null,
  "error_code": null,
  "verification_tier": "ai_generated",
  "confidence": 0.87,
  "fix_success_rate": 0.85,
  "resolvable": "true",
  "first_seen": "2023-11-05",
  "last_confirmed": "2024-06-01",
  "last_updated": "2024-06-01",
  "evidence_count": 1,
  "tags": [],
  "locale": "en",
  "aliases": []
}