{"record":{"id":"7eab6cdf4d5fad70","repo":"kubernetes/kops","slug":"error-retrieving-ssh-public-key-q-v","errorCode":null,"errorMessage":"error retrieving SSH public key %q: %v","messagePattern":"error retrieving SSH public key %q: (.+?)","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"upup/pkg/fi/cloudup/apply_cluster.go","lineNumber":408,"sourceCode":"\t\tif err != nil {\n\t\t\treturn nil, fmt.Errorf(\"could not load the ciliumpassword secret: %w\", err)\n\t\t}\n\t\tif secret == nil {\n\t\t\tfmt.Println(\"\")\n\t\t\tfmt.Println(\"You have cilium encryption enabled, but no ciliumpassword secret has been set.\")\n\t\t\tfmt.Println(\"See `kops create secret ciliumpassword -h`\")\n\t\t\treturn nil, fmt.Errorf(\"could not find ciliumpassword secret\")\n\t\t}\n\t}\n\n\tproject := \"\"\n\tscwZone := \"\"\n\n\tvar sshPublicKeys [][]byte\n\t{\n\t\tkeys, err := sshCredentialStore.FindSSHPublicKeys()\n\t\tif err != nil {\n\t\t\treturn nil, fmt.Errorf(\"error retrieving SSH public key %q: %v\", fi.SecretNameSSHPrimary, err)\n\t\t}\n\n\t\tfor _, k := range keys {\n\t\t\tsshPublicKeys = append(sshPublicKeys, []byte(k.Spec.PublicKey))\n\t\t}\n\t}\n\n\tallInstanceGroups := c.InstanceGroups\n\tfilteredInstanceGroups := predicates.Filter(allInstanceGroups, c.InstanceGroupFilter)\n\n\tmodelContext := &model.KopsModelContext{\n\t\tIAMModelContext:   iam.IAMModelContext{Cluster: cluster},\n\t\tInstanceGroups:    filteredInstanceGroups,\n\t\tAllInstanceGroups: allInstanceGroups,\n\t\tAdditionalObjects: c.AdditionalObjects,\n\t}\n\n\tswitch cluster.GetCloudProvider() {","sourceCodeStart":390,"sourceCodeEnd":426,"githubUrl":"https://github.com/kubernetes/kops/blob/4c8573c808a73d578c5eadc86d410646ea0b0d73/upup/pkg/fi/cloudup/apply_cluster.go#L390-L426","documentation":"sshCredentialStore.FindSSHPublicKeys failed while listing the admin SSH public keys from the state store — a read/transport error on the secret store, not a missing key.","triggerScenarios":"Thrown at upup/pkg/fi/cloudup/apply_cluster.go:408 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Verify KOPS_STATE_STORE points to the correct, reachable bucket","Check bucket permissions and network access, then retry the operation"],"exampleFix":null,"handlingStrategy":"try-catch","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"4c8573c808a73d578c5eadc86d410646ea0b0d73","analyzedAt":"2026-09-05T04:13:19.212Z","contentChangedAt":"2026-09-05T04:13:19.212Z","schemaVersion":2},"datasetVersion":"2026-09-12T07:17:12.445Z"}