kubernetes/kops · error

creating route tables client: %w

Error message

creating route tables client: %w

What it means

Wrapped error when network.NewRouteTablesClient fails to build the RouteTablesClient. This happens during client construction inside newRouteTablesClientImpl, invoked from newAzureCloud, so no Azure calls have been made yet.

Source

Thrown at upup/pkg/fi/cloudup/azure/routetable.go:89

	}
	return l, nil
}

func (c *routeTablesClientImpl) Delete(ctx context.Context, resourceGroupName, vnetName string) error {
	future, err := c.c.BeginDelete(ctx, resourceGroupName, vnetName, nil)
	if err != nil {
		return fmt.Errorf("deleting route table: %w", err)
	}
	if _, err := future.PollUntilDone(ctx, nil); err != nil {
		return fmt.Errorf("waiting for route table deletion completion: %w", err)
	}
	return nil
}

func newRouteTablesClientImpl(subscriptionID string, cred *azidentity.DefaultAzureCredential) (*routeTablesClientImpl, error) {
	c, err := network.NewRouteTablesClient(subscriptionID, cred, nil)
	if err != nil {
		return nil, fmt.Errorf("creating route tables client: %w", err)
	}
	return &routeTablesClientImpl{
		c: c,
	}, nil
}

View on GitHub (pinned to 4c8573c808)

Solutions

1. Set a valid AZURE_SUBSCRIPTION_ID (GUID) before cluster operations
2. Verify DefaultAzureCredential resolves an auth source (env vars, az login, managed identity)
3. Unwrap %w to see the SDK root cause and fix configuration accordingly
4. Align azidentity and network SDK module versions in go.mod

Example fix

// before
cred, err := azidentity.NewDefaultAzureCredential(nil)
// after
cred, err := azidentity.NewDefaultAzureCredential(nil)
if err != nil {
	return fmt.Errorf("no Azure credential available: %w", err)
}

if subscriptionID == "" {
	return nil, fmt.Errorf("subscriptionID must not be empty")
}
if cred == nil {
	return nil, fmt.Errorf("credential must not be nil")
}

cloud, err := newAzureCloud(ctx, opt)
if err != nil {
	return fmt.Errorf("initializing azure cloud: %w", err)
}

When it happens

Trigger: network.NewRouteTablesClient(subscriptionID, cred, nil) returns error, usually due to empty/invalid subscriptionID or nil/invalid credential passed to the SDK constructor.

Common situations: Missing AZURE_SUBSCRIPTION_ID; credential construction failed silently upstream; incompatible azure-sdk-for-go network module versions where the constructor validates inputs.

Related errors

• creating role assignments client: %w
• creating identity: %w
• DNS not implemented on azureCloud
• FindVPCInfo not implemented on azureCloud, use FindVNetInfo
• DeleteGroup not implemented on azureCloud

AI-assisted analysis of kubernetes/kops@4c8573c808 (2026-09-05). Data as JSON: /api/errors/28118e3febd95db2. Report an issue: GitHub.