{"record":{"id":"2d03b1bad75920c0","repo":"paperclipai/paperclip","slug":"failed-to-create-scoped-network-egress-policy-and","errorCode":null,"errorMessage":"Failed to create scoped network egress policy and release its workload","messagePattern":"Failed to create scoped network egress policy and release its workload","errorType":"exception","errorClass":"AggregateError","httpStatus":null,"severity":"error","filePath":"packages/plugins/sandbox-providers/kubernetes/src/scoped-network-egress.ts","lineNumber":90,"sourceCode":"      includeBaseRules: false,\n      ownerReferences: [input.ownerReference],\n    });\n    await input.clients.networking.createNamespacedNetworkPolicy({ namespace: input.namespace, body: manifest as never });\n  }\n  return name;\n}\n\nexport async function createScopedNetworkEgressPolicyOrReleaseWorkload(\n  input: Parameters<typeof createScopedNetworkEgressPolicy>[0],\n  releaseWorkload: () => Promise<void>,\n): Promise<string | null> {\n  try {\n    return await createScopedNetworkEgressPolicy(input);\n  } catch (policyError) {\n    try {\n      await releaseWorkload();\n    } catch (releaseError) {\n      throw new AggregateError(\n        [policyError, releaseError],\n        \"Failed to create scoped network egress policy and release its workload\",\n      );\n    }\n    throw policyError;\n  }\n}\n\nexport function appendNetworkEgressDenyHint(stderr: string, grant: ScopedNetworkEgressGrant): string {\n  if (!/(could not resolve host|network is unreachable|connection timed out|failed to connect|temporary failure in name resolution)/i.test(stderr)) {\n    return stderr;\n  }\n  const allowed = [...grant.allowFqdns, ...grant.allowCidrs];\n  const detail = allowed.length > 0 ? ` Current task grant: ${allowed.join(\", \")}.` : \" No task-scoped destinations are granted.\";\n  return `${stderr.trimEnd()}\\nPaperclip network policy denied or could not route this request.${detail} Request access through ${NETWORK_EGRESS_GRANT_PATH}.\\n`;\n}\n","sourceCodeStart":72,"sourceCodeEnd":107,"githubUrl":"https://github.com/paperclipai/paperclip/blob/120ae5428fa29bee300bcf806491cd4d965fbb7c/packages/plugins/sandbox-providers/kubernetes/src/scoped-network-egress.ts#L72-L107","documentation":"Error \"Failed to create scoped network egress policy and release its workload\" thrown in paperclipai/paperclip.","triggerScenarios":"Thrown at packages/plugins/sandbox-providers/kubernetes/src/scoped-network-egress.ts:90 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Check RBAC permissions and NetworkPolicy support in the cluster; inspect controller errors and retry."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"120ae5428fa29bee300bcf806491cd4d965fbb7c","analyzedAt":"2026-08-18T22:49:45.177Z","contentChangedAt":"2026-08-18T22:49:45.177Z","schemaVersion":2},"datasetVersion":"2026-09-14T05:17:10.506Z"}