Нашел в логах апи сервера Trace[725780078]: "Call mutating webhook" configuration:vault-agent-injector-cfg,webhook:vault.hashicorp.com,resource:/v1, Resource=pods,subresource:,operation:CREATE,UID:4d79b234-9795-4cc3-a565-722665c2e390

(01-Feb-2022 11:46:46.034) (total time: 10000ms):
Trace[725780078]: [10.0002364s] [10.0002364s] END
W0201 11:46:56.034936 1 dispatcher.go:170] Failed calling webhook, failing open vault.hashicorp.com: failed calling webhook "vault.hashicorp.com": Post "https://vault-agent-injector-svc.default.svc:443/mutate?timeout=10s": context deadline exceeded
E0201 11:46:56.034963 1 dispatcher.go:171] failed calling webhook "vault.hashicorp.com": Post "https://vault-agent-injector-svc.default.svc:443/mutate?timeout=10s": context deadline exceeded
I0201 11:46:56.038497 1 trace.go:205] Trace[1710737473]: "Create" url:/api/v1/namespaces/default/pods,user-agent:kube-controller-manager/v1.20.8 (linux/amd64) kubernetes/5575935/system:serviceaccount:kube-system:replicaset-controller,client:10.1.1.176 (01-Feb-2022 11:46:46.030) (total time: 10007ms):
Trace[1710737473]: ---"Object stored in database" 10007ms (11:46:00.038)
Trace[1710737473]: [10.007811188s] [10.007811188s] END

Заблокирован трафик на 8080

а кто его могу заблокировать? кластер на виртуалках без включенного файрвола