{"record":{"id":"22a466f2c6e4e5e3","repo":"kubernetes/kops","slug":"failed-to-add-node-port-rules-v","errorCode":null,"errorMessage":"failed to add node port rules: %v","messagePattern":"failed to add node port rules: (.+?)","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"pkg/model/openstackmodel/firewall.go","lineNumber":754,"sourceCode":"\tb.addDNSRules(c, sgMap)\n\t// Add Kubelet Rules\n\tb.addKubeletRules(c, sgMap)\n\t// Add Node exporter and occm metrics Rules\n\tb.addNodeExporterAndOccmRules(c, sgMap)\n\t// Add kube controller manager metrics Rules\n\tb.addKubeControllerManagerMetricsRules(c, sgMap)\n\t// Add kube scheduler metrics Rules\n\tb.addKubeSchedulerMetricsRules(c, sgMap)\n\t// Kops-controller Rules\n\tb.addKopsControllerRules(c, sgMap)\n\t// Allow necessary local traffic\n\tb.addCNIRules(c, sgMap)\n\t// ETCD Leader Election\n\tb.addETCDRules(c, sgMap)\n\t// Add NodePort Rules:\n\terr = b.addNodePortRules(c, sgMap)\n\tif err != nil {\n\t\treturn fmt.Errorf(\"failed to add node port rules: %v\", err)\n\t}\n\n\tfor _, r := range b.Rules {\n\t\tc.AddTask(r)\n\t}\n\n\treturn nil\n}\n","sourceCodeStart":736,"sourceCodeEnd":763,"githubUrl":"https://github.com/kubernetes/kops/blob/4c8573c808a73d578c5eadc86d410646ea0b0d73/pkg/model/openstackmodel/firewall.go#L736-L763","documentation":"Propagated failure from addNodePortRules while building the OpenStack firewall model: the underlying error (typically a subnet lookup or cloud API failure) occurred while constructing node-port security-group rules. This message is a wrapping layer, not the root cause; inspect the %v detail.","triggerScenarios":"Thrown at pkg/model/openstackmodel/firewall.go:754 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Read the wrapped error text to find the failing rule/subnet","Verify all subnets referenced by node-port firewall rules exist in spec.networking.subnets","Verify OpenStack connectivity and quotas, then re-run `kops update cluster`"],"exampleFix":null,"handlingStrategy":"try-catch","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"4c8573c808a73d578c5eadc86d410646ea0b0d73","analyzedAt":"2026-09-05T04:13:19.212Z","contentChangedAt":"2026-09-05T04:13:19.212Z","schemaVersion":2},"datasetVersion":"2026-09-12T07:17:12.445Z"}