https://anishbista.org/tags/nkp/Recent content in Nkp on Anish BistaHugoen-usFri, 10 Jul 2026 17:38:23 +0000https://anishbista.org/blog/the-case-of-the-phantom-webhook-timeout-how-a-floating-ip-blocked-entire-nutanix-kubernetes/Fri, 10 Jul 2026 17:38:23 +0000https://anishbista.org/blog/the-case-of-the-phantom-webhook-timeout-how-a-floating-ip-blocked-entire-nutanix-kubernetes/<p>While bootstrapping a Nutanix Kubernetes Platform (NKP) 2.18 management cluster on AHV, the entire deployment ground to a halt at the very first component install. nkp create capi-components never got past cert-manager and because everything downstream (cluster-api-operator, and the rest of the cluster bootstrap) depends on that step, the whole cluster build was blocked.</p> <p>The error itself gave almost no clue as to why:</p> <pre tabindex="0"><code>Post &#34;https://cert-manager-webhook.cert-manager.svc:443/mutate?timeout=30s&#34;: context deadline exceeded (Client.Timeout exceeded while awaiting headers) </code></pre><p>This kept repeating for 30+ minutes straight in the kube-apiserver logs, not a one-off startup race, but a persistent failure. The cert-manager Helm release sat stuck in pending-install. Reinstalling it manually made pods look healthy for a moment, but the next webhook-dependent step failed identically. Something below the application layer was broken.</p>