{"record":{"id":"bc9edcede7a74e58","repo":"kubernetes/kops","slug":"not-a-supported-security-group-type","errorCode":null,"errorMessage":"not a supported security group type","messagePattern":"not a supported security group type","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"pkg/model/awsmodel/firewall.go","lineNumber":376,"sourceCode":"\t\t\tDescription:      new(\"Security group for nodes\"),\n\t\t\tRemoveExtraRules: []string{\"port=22\"},\n\t\t}\n\t\tbaseGroup.Tags = b.CloudTags(name, false)\n\tcase kops.InstanceGroupRoleBastion:\n\t\tname := b.SecurityGroupName(role)\n\t\tbaseGroup = &awstasks.SecurityGroup{\n\t\t\tName:        new(name),\n\t\t\tVPC:         b.LinkToVPC(),\n\t\t\tDescription: new(\"Security group for bastion\"),\n\t\t\tRemoveExtraRules: []string{\n\t\t\t\t\"port=22\",  // SSH\n\t\t\t\t\"port=3:4\", // ICMP\n\t\t\t\t\"port=-1\",  // ICMPv6\n\t\t\t},\n\t\t}\n\t\tbaseGroup.Tags = b.CloudTags(name, false)\n\tdefault:\n\t\treturn nil, fmt.Errorf(\"not a supported security group type\")\n\t}\n\tvar groups []SecurityGroupInfo\n\n\tdone := make(map[string]bool)\n\n\t// Build groups that specify a SecurityGroupOverride\n\tallOverrides := true\n\tfor _, ig := range b.InstanceGroups {\n\t\tif ig.Spec.Role != role {\n\t\t\tcontinue\n\t\t}\n\n\t\tif ig.Spec.SecurityGroupOverride == nil {\n\t\t\tallOverrides = false\n\t\t\tcontinue\n\t\t}\n\n\t\tname := fi.ValueOf(ig.Spec.SecurityGroupOverride)","sourceCodeStart":358,"sourceCodeEnd":394,"githubUrl":"https://github.com/kubernetes/kops/blob/4c8573c808a73d578c5eadc86d410646ea0b0d73/pkg/model/awsmodel/firewall.go#L358-L394","documentation":"GetSecurityGroups hit the default switch branch: the instance group's role is not one of control-plane, node, or bastion, so no security-group template exists for it. The role field on the instance group is the input at fault.","triggerScenarios":"Thrown at pkg/model/awsmodel/firewall.go:376 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Check the instance group's spec.role is a supported value","Fix or remove the malformed instance group","Report upstream if a legitimately new role needs support"],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"4c8573c808a73d578c5eadc86d410646ea0b0d73","analyzedAt":"2026-09-05T04:13:19.212Z","contentChangedAt":"2026-09-05T04:13:19.212Z","schemaVersion":2},"datasetVersion":"2026-09-12T07:17:12.445Z"}