{"record":{"id":"af200603c972599d","repo":"kubernetes/kops","slug":"unable-to-infer-networkcidr-from-network-id-pleas","errorCode":null,"errorMessage":"unable to infer NetworkCIDR from Network ID, please specify --network-cidr","messagePattern":"unable to infer NetworkCIDR from Network ID, please specify --network-cidr","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"upup/pkg/fi/cloudup/defaults.go","lineNumber":90,"sourceCode":"\n\tif cloud.ProviderID() == kops.CloudProviderGCE {\n\t\tif err := gce.PerformNetworkAssignments(ctx, c, cloud); err != nil {\n\t\t\treturn err\n\t\t}\n\t}\n\n\tif cloud.ProviderID() == kops.CloudProviderAWS && c.Spec.Networking.NetworkCIDR == \"\" {\n\t\tif c.SharedVPC() {\n\t\t\tvpcInfo, err := cloud.FindVPCInfo(c.Spec.Networking.NetworkID)\n\t\t\tif err != nil {\n\t\t\t\treturn err\n\t\t\t}\n\t\t\tif vpcInfo == nil {\n\t\t\t\treturn fmt.Errorf(\"unable to find Network ID %q\", c.Spec.Networking.NetworkID)\n\t\t\t}\n\t\t\tc.Spec.Networking.NetworkCIDR = vpcInfo.CIDR\n\t\t\tif c.Spec.Networking.NetworkCIDR == \"\" {\n\t\t\t\treturn fmt.Errorf(\"unable to infer NetworkCIDR from Network ID, please specify --network-cidr\")\n\t\t\t}\n\t\t} else {\n\t\t\t// TODO: Choose non-overlapping networking CIDRs for VPCs, using vpcInfo\n\t\t\tc.Spec.Networking.NetworkCIDR = defaultAWSNetworkCIDR\n\t\t}\n\n\t\t// Amazon VPC CNI uses the same network\n\t\tif c.Spec.Networking.AmazonVPC != nil && c.Spec.Networking.NonMasqueradeCIDR != \"::/0\" {\n\t\t\tc.Spec.Networking.NonMasqueradeCIDR = c.Spec.Networking.NetworkCIDR\n\t\t}\n\t}\n\n\tif cloud.ProviderID() == kops.CloudProviderAzure && c.Spec.Networking.NetworkCIDR == \"\" {\n\t\tif c.SharedVPC() {\n\t\t\tif c.Spec.CloudProvider.Azure == nil || c.Spec.CloudProvider.Azure.ResourceGroupName == \"\" {\n\t\t\t\treturn fmt.Errorf(\"missing required --azure-resource-group-name when specifying Network ID\")\n\t\t\t}\n\t\t\tvpcInfo, err := cloud.(azure.AzureCloud).FindVNetInfo(c.Spec.Networking.NetworkID, c.Spec.CloudProvider.Azure.ResourceGroupName)","sourceCodeStart":72,"sourceCodeEnd":108,"githubUrl":"https://github.com/kubernetes/kops/blob/4c8573c808a73d578c5eadc86d410646ea0b0d73/upup/pkg/fi/cloudup/defaults.go#L72-L108","documentation":"Follow-on guard in PerformAssignments for AWS shared VPCs: the VPC was found, but it reported no CIDR block, so kOps cannot infer the cluster network range. The user must supply it explicitly in this situation.","triggerScenarios":"Thrown at upup/pkg/fi/cloudup/defaults.go:90 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Pass --network-cidr (or set spec.networking.networkCIDR) matching the shared VPC's CIDR","Verify the VPC actually has an associated IPv4 CIDR block"],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"4c8573c808a73d578c5eadc86d410646ea0b0d73","analyzedAt":"2026-09-05T04:13:19.212Z","contentChangedAt":"2026-09-05T04:13:19.212Z","schemaVersion":2},"datasetVersion":"2026-09-12T07:17:12.445Z"}