{"record":{"id":"4f036bda17516bbb","repo":"kubernetes/kops","slug":"unrecognized-authentication-config-v","errorCode":null,"errorMessage":"unrecognized authentication config %v","messagePattern":"unrecognized authentication config (.+?)","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"nodeup/pkg/model/kube_apiserver.go","lineNumber":436,"sourceCode":"\t\t\t\tMode:     new(\"600\"),\n\t\t\t\tOwner:    new(\"aws-iam-authenticator\"),\n\t\t\t\tGroup:    new(\"aws-iam-authenticator\"),\n\t\t\t})\n\n\t\t\tc.AddTask(&nodetasks.File{\n\t\t\t\tPath:     \"/srv/kubernetes/aws-iam-authenticator/key.pem\",\n\t\t\t\tContents: privateKey,\n\t\t\t\tType:     nodetasks.FileType_File,\n\t\t\t\tMode:     new(\"600\"),\n\t\t\t\tOwner:    new(\"aws-iam-authenticator\"),\n\t\t\t\tGroup:    new(\"aws-iam-authenticator\"),\n\t\t\t})\n\t\t}\n\n\t\treturn nil\n\t}\n\n\treturn fmt.Errorf(\"unrecognized authentication config %v\", b.NodeupConfig.APIServerConfig.Authentication)\n}\n\nfunc (b *KubeAPIServerBuilder) writeServerCertificate(c *fi.NodeupModelBuilderContext, kubeAPIServer *kops.KubeAPIServerConfig) error {\n\tpathSrvKAPI := filepath.Join(b.PathSrvKubernetes(), \"kube-apiserver\")\n\n\t{\n\t\t// A few names used from inside the cluster, which all resolve the same based on our default suffixes\n\t\talternateNames := []string{\n\t\t\t\"kubernetes\",\n\t\t\t\"kubernetes.default\",\n\t\t\t\"kubernetes.default.svc\",\n\t\t\t\"kubernetes.default.svc.\" + b.NodeupConfig.APIServerConfig.ClusterDNSDomain,\n\t\t}\n\n\t\t// Names specified in the cluster spec\n\t\tif b.NodeupConfig.APIServerConfig.API.PublicName != \"\" {\n\t\t\talternateNames = append(alternateNames, b.NodeupConfig.APIServerConfig.API.PublicName)\n\t\t}","sourceCodeStart":418,"sourceCodeEnd":454,"githubUrl":"https://github.com/kubernetes/kops/blob/4c8573c808a73d578c5eadc86d410646ea0b0d73/nodeup/pkg/model/kube_apiserver.go#L418-L454","documentation":"Fallback guard at the end of writeAuthenticationConfig: the APIServerConfig.Authentication value matches none of the recognized types (e.g. aws-iam-authenticator or oidc settings), so no authentication config file can be generated.","triggerScenarios":"Thrown at nodeup/pkg/model/kube_apiserver.go:436 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Check the authentication block in the cluster spec","Use a supported authentication configuration","Update kOps if a newer authentication type is expected"],"exampleFix":null,"handlingStrategy":"type-guard","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"4c8573c808a73d578c5eadc86d410646ea0b0d73","analyzedAt":"2026-09-05T04:13:19.212Z","contentChangedAt":"2026-09-05T04:13:19.212Z","schemaVersion":2},"datasetVersion":"2026-09-12T07:17:12.445Z"}