kubernetes/kops · error

building path for %q: %w

Error message

building path for %q: %w

What it means

ResolveS3Region resolves the region of the first s3:// nodeup source by building its VFS path via vfsContext.BuildVfsPath. This error wraps any failure from that step — typically a malformed S3 URL that the VFS layer cannot turn into an S3Path (invalid bucket/key shape or parse failure).

Source

Thrown at pkg/model/resources/nodeup.go:428

}

// Azure Blob downloads require a managed identity on the instance.
func (b *NodeUpScript) useBlobDownload() bool {
	return b.CloudProvider == string(kops.CloudProviderAzure) && b.firstLocationWithScheme("azureblob://") != ""
}

// ResolveS3Region resolves the bucket region because SigV4 requires it but s3:// URLs omit it.
func (b *NodeUpScript) ResolveS3Region(ctx context.Context, vfsContext *vfs.VFSContext) error {
	if b.CloudProvider != string(kops.CloudProviderAWS) {
		return nil
	}
	location := b.firstLocationWithScheme("s3://")
	if location == "" {
		return nil
	}
	p, err := vfsContext.BuildVfsPath(location)
	if err != nil {
		return fmt.Errorf("building path for %q: %w", location, err)
	}
	s3Path, ok := p.(*vfs.S3Path)
	if !ok {
		return fmt.Errorf("unexpected path type %T for %q", p, location)
	}
	b.S3Region, err = s3Path.Region(ctx)
	if err != nil {
		return fmt.Errorf("getting the region of %q: %w", location, err)
	}
	supported, err := awsup.SupportsS3BootstrapEndpoint(ctx, b.S3Region)
	if err != nil {
		return err
	}
	if !supported {
		return fmt.Errorf("downloading nodeup from an s3:// URL is not supported in AWS region %q", b.S3Region)
	}
	return nil
}

View on GitHub (pinned to 4c8573c808)

Solutions

1. Read the wrapped BuildVfsPath error for the specific VFS parse problem.
2. Fix the s3:// location so it matches s3://<bucket>/<key> with a valid bucket name (3-63 chars, lowercase, digits, hyphens).
3. Ensure the vfsContext used is the default/correctly configured one.
4. If the location is user-supplied, pre-validate the bucket name before building the NodeUpScript.

Example fix

// before
NodeUpSource: "s3://Bucket_With_Underscores/nodeup" // invalid bucket name
// after
NodeUpSource: "s3://bucket-with-hyphens/nodeup"

p, err := vfsContext.BuildVfsPath(loc)
if err != nil {
    return fmt.Errorf("s3 location not vfs-resolvable: %w", err)
}

func resolvableVFS(ctx *vfs.VFSContext, loc string) bool { _, err := ctx.BuildVfsPath(loc); return err == nil }

if err := script.ResolveS3Region(ctx); err != nil {
    return fmt.Errorf("check s3:// bucket/key validity: %w", err)
}

When it happens

Trigger: Calling ResolveS3Region on a NodeUpScript whose NodeUpSource contains an s3:// location that vfsContext.BuildVfsPath rejects — e.g. a location that escaped validation but is not a resolvable S3 VFS path, or empty/edge-case bucket names that vfs refuses.

Common situations: Programmatic source construction producing s3:// URLs vfs cannot parse; VFS context misconfiguration (custom registry/context setup); bucket names with invalid characters that slipped through earlier checks.

Related errors

• error reading etcd manifest %s: %v
• ResolveS3Region must be called before building a nodeup scri
• unexpected path type %T for %q
• error loading NodeupConfig %q: %v
• error reading addons from %q: %v

AI-assisted analysis of kubernetes/kops@4c8573c808 (2026-09-05). Data as JSON: /api/errors/e2c3ccab4ea1549f. Report an issue: GitHub.