kubernetes/kops · error

creating/updating application security group: %w

Error message

creating/updating application security group: %w

What it means

The Azure network BeginCreateOrUpdate call for an application security group failed to start; fires on ARM API errors such as invalid parameters, missing resource group, quota, or authorization failure for the named ASG.

Source

Thrown at upup/pkg/fi/cloudup/azure/applicationsecuritygroup.go:45

)

// ApplicationSecurityGroupsClient is a client for managing application security groups.
type ApplicationSecurityGroupsClient interface {
	CreateOrUpdate(ctx context.Context, resourceGroupName, applicationSecurityGroupName string, parameters network.ApplicationSecurityGroup) (*network.ApplicationSecurityGroup, error)
	List(ctx context.Context, resourceGroupName string) ([]*network.ApplicationSecurityGroup, error)
	Delete(ctx context.Context, resourceGroupName, applicationSecurityGroupName string) error
}

type ApplicationSecurityGroupsClientImpl struct {
	c *network.ApplicationSecurityGroupsClient
}

var _ ApplicationSecurityGroupsClient = (*ApplicationSecurityGroupsClientImpl)(nil)

func (c *ApplicationSecurityGroupsClientImpl) CreateOrUpdate(ctx context.Context, resourceGroupName, applicationSecurityGroupName string, parameters network.ApplicationSecurityGroup) (*network.ApplicationSecurityGroup, error) {
	future, err := c.c.BeginCreateOrUpdate(ctx, resourceGroupName, applicationSecurityGroupName, parameters, nil)
	if err != nil {
		return nil, fmt.Errorf("creating/updating application security group: %w", err)
	}
	asg, err := future.PollUntilDone(ctx, nil)
	if err != nil {
		return nil, fmt.Errorf("waiting for application security group create/update completion: %w", err)
	}
	return &asg.ApplicationSecurityGroup, err
}

func (c *ApplicationSecurityGroupsClientImpl) List(ctx context.Context, resourceGroupName string) ([]*network.ApplicationSecurityGroup, error) {
	if resourceGroupName == "" {
		return nil, nil
	}

	var l []*network.ApplicationSecurityGroup
	pager := c.c.NewListPager(resourceGroupName, nil)
	for pager.More() {
		resp, err := pager.NextPage(ctx)
		if err != nil {

View on GitHub (pinned to 4c8573c808)

Solutions

1. Inspect the wrapped ResponseError for the ARM error code and fix parameters/permissions
2. Verify the resource group exists and the principal has Network Contributor rights
3. Retry after transient ARM failures

When it happens

Trigger: Thrown at upup/pkg/fi/cloudup/azure/applicationsecuritygroup.go:45 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of kubernetes/kops@4c8573c808 (2026-09-05). Data as JSON: /api/errors/31c3dcf77fa2c3bb. Report an issue: GitHub.