{"record":{"id":"4792cfe4a1608852","repo":"kubernetes/kops","slug":"cannot-fetch-channel-versions-from-namespaces-w","errorCode":null,"errorMessage":"cannot fetch channel versions from namespaces: %w","messagePattern":"cannot fetch channel versions from namespaces: %w","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"channels/pkg/cmd/apply_channel.go","lineNumber":224,"sourceCode":"\tfor _, channelLocation := range args {\n\t\tmenu, err := buildMenu(f.VFSContext(), kubernetesVersion, channelLocation)\n\t\tif err != nil {\n\t\t\tmerr = multierr.Append(merr, fmt.Errorf(\"building menu for %q: %w\", channelLocation, err))\n\t\t\tcontinue\n\t\t}\n\t\tif err := applyMenu(ctx, menu, f.VFSContext(), k8sClient, cmClient, dynamicClient, restMapper, options.Yes); err != nil {\n\t\t\tmerr = multierr.Append(merr, fmt.Errorf(\"applying %q: %w\", channelLocation, err))\n\t\t}\n\t}\n\treturn merr\n}\n\nfunc applyMenu(ctx context.Context, menu *channels.AddonMenu, vfsContext *vfs.VFSContext, k8sClient kubernetes.Interface, cmClient certmanager.Interface, dynamicClient dynamic.Interface, restMapper *restmapper.DeferredDiscoveryRESTMapper, apply bool) error {\n\t// channelVersions is the list of installed addons in the cluster.\n\t// It is keyed by <namespace>:<addon name>.\n\tchannelVersions, err := getChannelVersions(ctx, k8sClient)\n\tif err != nil {\n\t\treturn fmt.Errorf(\"cannot fetch channel versions from namespaces: %w\", err)\n\t}\n\n\tupdates, needUpdates, err := getUpdates(ctx, menu, k8sClient, cmClient, channelVersions)\n\tif err != nil {\n\t\treturn fmt.Errorf(\"failed to get updates: %w\", err)\n\t}\n\n\tif len(updates) == 0 {\n\t\tfmt.Printf(\"No update required\\n\")\n\t\treturn nil\n\t}\n\n\t{\n\t\tt := &tables.Table{}\n\t\tt.AddColumn(\"NAME\", func(r *channels.AddonUpdate) string {\n\t\t\treturn r.Name\n\t\t})\n\t\tt.AddColumn(\"CURRENT\", func(r *channels.AddonUpdate) string {","sourceCodeStart":206,"sourceCodeEnd":242,"githubUrl":"https://github.com/kubernetes/kops/blob/4c8573c808a73d578c5eadc86d410646ea0b0d73/channels/pkg/cmd/apply_channel.go#L206-L242","documentation":"applyMenu first queries installed channel versions by listing all namespaces via the Kubernetes API. If that List call fails, 'cannot fetch channel versions from namespaces: %w' wraps the cause and aborts the apply, because the tool cannot determine what is already installed.","triggerScenarios":"k8sClient.CoreV1().Namespaces().List errors: API server unreachable, expired credentials, or RBAC denying cluster-scoped namespace list.","commonSituations":"Stale kubeconfig pointing at a deleted cluster, expired cloud/OIDC token, network partition/VPN down, restricted RBAC profiles without namespace list permission.","solutions":["Reproduce the cause with `kubectl get namespaces`","Fix credentials/kubeconfig (kops export kubecfg --name <cluster>)","Grant RBAC list permission on namespaces","Retry once connectivity/auth is restored"],"exampleFix":"// before\nkops apply channel https://.../addon.yaml  # cannot fetch channel versions\n// after\nkops export kubecfg --name mycluster\nkubectl get namespaces  # verify access\nkops apply channel https://.../addon.yaml","handlingStrategy":"retry","validationCode":"_, err := k8sClient.CoreV1().Namespaces().List(ctx, metav1.ListOptions{})\nif err != nil {\n\treturn fmt.Errorf(\"cannot list namespaces, check kubeconfig/RBAC first: %w\", err)\n}","typeGuard":null,"tryCatchPattern":"var nsList *v1.NamespaceList\nerr := retry.OnError(wait.Backoff{Steps: 3, Duration: time.Second}, func(err error) bool { return true }, func() error {\n\tvar e error\n\tnsList, e = k8sClient.CoreV1().Namespaces().List(ctx, metav1.ListOptions{})\n\treturn e\n})\nif err != nil {\n\treturn fmt.Errorf(\"namespaces unreachable after retries: %w\", err)\n}","preventionTips":["Refresh kubeconfig with kops export kubecfg before long-running operations","Test `kubectl auth can-i list namespaces` as a preflight","Retry transient network errors; do not retry RBAC denials"],"tags":["kubernetes-api","rbac","namespaces","connectivity"],"backgroundTag":"kubernetes-api-request-failed","analyzedSha":"4c8573c808a73d578c5eadc86d410646ea0b0d73","analyzedAt":"2026-09-05T04:13:19.212Z","contentChangedAt":"2026-09-05T04:13:19.212Z","schemaVersion":2},"datasetVersion":"2026-09-12T07:17:12.445Z"}