Knative serving creates - Post "https://webhook.knative-serving.svc:443/defaulting?timeout=10s"

[rajatgupta828-stem]

Describe the bug
Unable to create Knativeserving resource.

Expected behavior
Knativeserving resource should be created.

To Reproduce
Kubernetes version 1.30.x
Install operator version - 1.17.8 using - https://knative.dev/v1.17-docs/install/operator/knative-with-operators/#install-via-helm-option-2

And then set up Knative serving https://knative.dev/v1.17-docs/install/operator/knative-with-operators/#install-via-helm-option-2

Knative release version
1.17.8

Additional context
High priority

Name:         knative-serving
Namespace:    knative-serving
Labels:       <none>
Annotations:  <none>
API Version:  operator.knative.dev/v1beta1
Kind:         KnativeServing
Metadata:
  Creation Timestamp:  2025-08-20T12:14:00Z
  Finalizers:
    knativeservings.operator.knative.dev
  Generation:        1
  Resource Version:  305903772
  UID:               367cc9fc-d917-487e-b578-9d0188b8a2a7
Spec:
  Config:
    Domain:
      xip.io:
    Network:
      ingress.class:  kourier.ingress.networking.knative.dev
  Ingress:
    Kourier:
      Enabled:  true
Status:
  Conditions:
    Last Transition Time:  2025-08-20T12:14:00Z
    Status:                Unknown
    Type:                  DependenciesInstalled
    Last Transition Time:  2025-08-20T12:14:47Z
    Status:                True
    Type:                  DeploymentsAvailable
    Last Transition Time:  2025-08-20T12:14:57Z
    Message:               Install failed with message: Internal error occurred: failed calling webhook "webhook.serving.knative.dev": failed to call webhook: Post "https://webhook.knative-serving.svc:443/defaulting?timeout=10s": context deadline exceeded
    Reason:                Error
    Status:                False
    Type:                  InstallSucceeded
    Last Transition Time:  2025-08-20T12:14:57Z
    Message:               Install failed with message: Internal error occurred: failed calling webhook "webhook.serving.knative.dev": failed to call webhook: Post "https://webhook.knative-serving.svc:443/defaulting?timeout=10s": context deadline exceeded
    Reason:                Error
    Status:                False
    Type:                  Ready
    Last Transition Time:  2025-08-20T12:14:00Z
    Status:                True
    Type:                  VersionMigrationEligible
  Observed Generation:     1
Events:
  Type     Reason           Age                 From                       Message
  ----     ------           ----                ----                       -------
  Normal   FinalizerUpdate  45m                 knativeserving-controller  Updated "knative-serving" finalizers
  Warning  InternalError    74s (x20 over 44m)  knativeserving-controller  failed to apply webhooks: Internal error occurred: failed calling webhook "webhook.serving.knative.dev": failed to call webhook: Post "https://webhook.knative-serving.svc:443/defaulting?timeout=10s": context deadline exceeded

k get pods  -n knative-serving
NAME                                                     READY   STATUS      RESTARTS   AGE
3scale-kourier-gateway-bc6d7f8cf-4q2k2                   1/1     Running     0          46m
activator-78c869c44f-sqhkj                               1/1     Running     0          46m
autoscaler-7c8dbd7fb8-8mkzf                              1/1     Running     0          46m
autoscaler-hpa-5b8c5d965-sckdv                           1/1     Running     0          46m
cleanup-serving-serving-1.17.1-zw9ht                     0/1     Completed   0          2m50s
controller-7cd6d74f7c-k9mgb                              1/1     Running     0          46m
net-kourier-controller-666486975f-qj4ff                  1/1     Running     0          46m
storage-version-migration-serving-serving-1.17.1-b29j6   0/1     Completed   0          2m50s
webhook-fff7c8675-prq8s                                  1/1     Running     0          46m

k get pods  -n knative-operator
NAME                                READY   STATUS    RESTARTS      AGE
dns-debug-6ccfcc8968-hcw9d          1/1     Running   2 (26m ago)   146m
knative-operator-f46c65fb5-j86c7    1/1     Running   0             146m
operator-webhook-7d4947b667-dqvvz   1/1     Running   0             146m

[houshengbo]

I just tried the installation of 1.17.8 operator in the Kubernetes cluster v1.32.2.

I have to set the

securityContext:
  runAsNonRoot: false

for both the knative-operator and operator-webhook deployment in order to fix the issue CreateContainerConfigError.

Then, this is the KnativeServing CR I applied to the cluster:

apiVersion: operator.knative.dev/v1beta1
kind: KnativeServing
metadata:
  name: knative-serving
  namespace: knative-serving
spec:
  version: "1.17"
  ingress:
    kourier:
      enabled: true
  config:
    network:
      ingress-class: "kourier.ingress.networking.knative.dev"

Knative Serving was able to launch successfully.

[github-actions]

This issue is stale because it has been open for 90 days with no
activity. It will automatically close after 30 more days of
inactivity. Reopen the issue with /reopen. Mark the issue as
fresh by adding the comment /remove-lifecycle stale.