title: GKE Config Connector StorageBucket resource times out on kubectl apply
body: <p>I'm trying to apply the following <a href="https://raw.githubusercontent.com/GoogleCloudPlatform/k8s-config-connector/master/resources/storagebucket/storage_v1alpha2_storagebucket.yaml" rel="nofollow noreferrer">StorageBucket resource</a> from Google's sample manifest:</p>
  
  <pre><code>apiVersion: storage.cnrm.cloud.google.com/v1alpha2
  kind: StorageBucket
  metadata:
    labels:
      label-one: "value-one"
    name: dmacthedestroyer-hdjkwhekhjewkjeh-storagebucket-sample
  spec:
    lifecycleRule:
      - action:
          type: Delete
        condition:
          age: 7
    versioning:
      enabled: true
    cors:
      - origin: ["http://example.appspot.com"]
        responseHeader: ["Content-Type"]
        method: ["GET", "HEAD", "DELETE"]
        maxAgeSeconds: 3600
  </code></pre>
  
  <p>The response times out with the following errors:</p>
  
  <pre><code>$ kubectl apply -f sample.yaml
  Error from server (Timeout): error when creating "sample.yaml": Timeout: request did not complete within requested timeout 30s
  </code></pre>
  
  <p><strong>UPDATE:</strong>
  For some unknown reason, the error message has changed to this:</p>
  
  <pre><code>Error from server (InternalError): error when creating "sample.yaml": Internal error occurred: failed calling webhook "cnrm-deny-unknown-fields-webhook.google.com": Post https://cnrm-validating-webhook-service.cnrm-system.svc:443/deny-unknown-fields?timeout=30s: net/http: TLS handshake timeout
  </code></pre>
  
  <p>I've tested this on two different networks, with the same error result.</p>
  
  <p>I installed the Config Connector components as described in <a href="https://cloud.google.com/config-connector/docs/how-to/install-upgrade-uninstall" rel="nofollow noreferrer">their documentation</a>, using a dedicated service account with the <code>roles/owner</code> permissions, exactly as stated in the above instructions.</p>
  
  <p>I have successfully deployed <a href="https://cloud.google.com/config-connector/docs/reference/resources#iamserviceaccount" rel="nofollow noreferrer">IAMServiceAccount</a> and <a href="https://cloud.google.com/config-connector/docs/reference/resources#iamserviceaccountkey" rel="nofollow noreferrer">IAMServiceAccountKey</a> resources with this setup.</p>
  
  <p>How should I proceed to troubleshoot this?</p>