cannot remove tag %q: cannot find MutatingWebhookConfigurati

Error message

cannot remove tag %q: cannot find MutatingWebhookConfiguration or Service for tag

What it means

Error "cannot remove tag %q: cannot find MutatingWebhookConfiguration or Service for tag" thrown in istio/istio.

Source

Thrown at istioctl/pkg/tag/tag.go:373

	return nil
}

// removeTag removes an existing revision tag.
func removeTag(ctx context.Context, kubeClient kubernetes.Interface, tagName string, skipConfirmation bool, istioNS string, w io.Writer) error {
	services, err := GetServicesWithTag(ctx, kubeClient, istioNS, tagName)
	if err != nil {
		return err
	}
	tagServiceExists := len(services) != 0

	webhooks, err := GetWebhooksWithTag(ctx, kubeClient, tagName)
	if err != nil {
		return err
	}
	tagWebhookExists := len(webhooks) != 0

	if !tagServiceExists && !tagWebhookExists {
		return fmt.Errorf("cannot remove tag %q: cannot find MutatingWebhookConfiguration or Service for tag", tagName)
	}

	taggedNamespaces, err := GetNamespacesWithTag(ctx, kubeClient, tagName)
	if err != nil {
		return fmt.Errorf("failed to retrieve namespaces dependent on tag %q", tagName)
	}
	// warn user if deleting a tag that still has namespaces pointed to it
	if len(taggedNamespaces) > 0 && !skipConfirmation {
		if !util.Confirm(buildDeleteTagConfirmation(tagName, taggedNamespaces), w) {
			fmt.Fprintf(w, "Aborting operation.\n")
			return nil
		}
	}

	// proceed with webhook deletion
	if tagWebhookExists {
		err = DeleteTagWebhooks(ctx, kubeClient, tagName)
		if err != nil {

View on GitHub (pinned to 8dc789c5cf)

When it happens

Trigger: Thrown at istioctl/pkg/tag/tag.go:373 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of istio/istio@8dc789c5cf (2026-08-15). Data as JSON: /api/errors/e17e4dca9d4e20d0. Report an issue: GitHub.