{"record":{"id":"8b87a9223758e286","repo":"kubernetes/kops","slug":"cannot-parse-cluster-path-q-w","errorCode":null,"errorMessage":"cannot parse cluster path %q: %w","messagePattern":"cannot parse cluster path %q: %w","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"pkg/model/gcemodel/storageacl.go","lineNumber":61,"sourceCode":"// Build creates the tasks that set up storage acls\n\nfunc (b *StorageAclBuilder) Build(c *fi.CloudupModelBuilderContext) error {\n\tif featureflag.GoogleCloudBucketACL.Enabled() {\n\t\tif b.Cluster.Spec.CloudProvider.GCE.ServiceAccount == \"\" {\n\t\t\treturn fmt.Errorf(\"featureflag GoogleCloudBucketACL not supported with per-instancegroup GCEServiceAccount\")\n\t\t}\n\n\t\tklog.Warningf(\"featureflag GoogleCloudBucketACL is no longer recommended; use per-instancegroup GCEServiceAccounts instead\")\n\n\t\tgceDefaultServiceAccount, err := b.Cloud.ServiceAccount()\n\t\tif err != nil {\n\t\t\treturn fmt.Errorf(\"error fetching default ServiceAccount: %w\", err)\n\t\t}\n\n\t\tclusterPath := b.Cluster.Spec.ConfigStore.Base\n\t\tp, err := vfs.Context.BuildVfsPath(clusterPath)\n\t\tif err != nil {\n\t\t\treturn fmt.Errorf(\"cannot parse cluster path %q: %w\", clusterPath, err)\n\t\t}\n\n\t\tif p, ok := p.(*vfs.GSPath); ok {\n\t\t\t// It's not ideal that we have to do this at the bucket level,\n\t\t\t// but GCS doesn't seem to have a way to do subtrees (like AWS IAM does)\n\t\t\t// Note this permission only lets us list objects, not read them\n\t\t\tc.AddTask(&gcetasks.StorageBucketAcl{\n\t\t\t\tName:      s(\"serviceaccount-statestore-list\"),\n\t\t\t\tLifecycle: b.Lifecycle,\n\t\t\t\tBucket:    s(p.Bucket()),\n\t\t\t\tEntity:    s(\"user-\" + gceDefaultServiceAccount),\n\t\t\t\tRole:      s(\"READER\"),\n\t\t\t})\n\t\t}\n\n\t\tklog.Warningf(\"we need to split control-plane / worker node roles\")\n\t\tnodeRole, err := iam.BuildNodeRoleSubject(kops.InstanceGroupRoleControlPlane, false)\n\t\tif err != nil {","sourceCodeStart":43,"sourceCodeEnd":79,"githubUrl":"https://github.com/kubernetes/kops/blob/4c8573c808a73d578c5eadc86d410646ea0b0d73/pkg/model/gcemodel/storageacl.go#L43-L79","documentation":"Parsing the cluster's config base (state store location) as a VFS path failed while building storage ACLs; the configured config path is not a well-formed VFS URI.","triggerScenarios":"Thrown at pkg/model/gcemodel/storageacl.go:61 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Check the cluster's configBase/state-store path syntax (e.g. s3://bucket/path)","Correct the state store setting and re-export the cluster","Avoid unsupported URI schemes"],"exampleFix":null,"handlingStrategy":"try-catch","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"4c8573c808a73d578c5eadc86d410646ea0b0d73","analyzedAt":"2026-09-05T04:13:19.212Z","contentChangedAt":"2026-09-05T04:13:19.212Z","schemaVersion":2},"datasetVersion":"2026-09-12T12:17:11.808Z"}