<p>I have installed Tekton on private kubernetes cluster. After that I wanted to create first resource but got exception:</p>

<p><strong>Internal error occurred: failed calling webhook "webhook.tekton.dev": Post <a href="https://tekton-pipelines-webhook.tekton-pipelines.svc:443/?timeout=30s" rel="nofollow noreferrer">https://tekton-pipelines-webhook.tekton-pipelines.svc:443/?timeout=30s</a>: net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)</strong></p>

<p>As far as I know it is because of restriction on private cluster. My question is if it is possible to change Port in POST url to use 8443 instead of 433?</p>

andi
<p>You need to manually define firewall rule to handle your Tekton webhook requests. 
For example: 
<a href="https://i.stack.imgur.com/AYxEt.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/AYxEt.png" alt="enter image description here"></a></p>

<p>Assuming that 10.44.0.0/14 is your endpoints network:</p>

<pre><code>Name:              test
Namespace:         tekton-pipelines
Labels:            app.kubernetes.io/component=webhook-controller
                   app.kubernetes.io/name=tekton-pipelines
Annotations:       &lt;none&gt;
Selector:          app=tekton-pipelines-webhook
Type:              ClusterIP
IP:                10.0.3.240
Port:              &lt;unset&gt;  8443/TCP
TargetPort:        8443/TCP
Endpoints:         10.44.2.76:8443
Session Affinity:  None
Events:            &lt;none&gt;
</code></pre>

<p>You can find full problem explanation here:</p>

<p><a href="https://github.com/kubernetes/kubernetes/issues/79739" rel="nofollow noreferrer">https://github.com/kubernetes/kubernetes/issues/79739</a></p>
