kubernetes/kops · error

error creating security group %v: %v

Error message

error creating security group %v: %v

What it means

The Neutron security-group create call failed after retry-with-backoff. The wrapped error names the actual API rejection, commonly invalid rules, duplicate names, or quota limits.

Source

Thrown at upup/pkg/fi/cloudup/openstack/security_group.go:68

		return groups, err
	} else if done {
		return groups, nil
	} else {
		return groups, wait.ErrWaitTimeout
	}
}

func (c *openstackCloud) CreateSecurityGroup(opt sg.CreateOptsBuilder) (*sg.SecGroup, error) {
	return createSecurityGroup(c, opt)
}

func createSecurityGroup(c OpenstackCloud, opt sg.CreateOptsBuilder) (*sg.SecGroup, error) {
	var group *sg.SecGroup

	done, err := vfs.RetryWithBackoff(writeBackoff, func() (bool, error) {
		g, err := sg.Create(context.TODO(), c.NetworkingClient(), opt).Extract()
		if err != nil {
			return false, fmt.Errorf("error creating security group %v: %v", opt, err)
		}
		group = g
		return true, nil
	})
	if err != nil {
		return group, err
	} else if done {
		return group, nil
	} else {
		return group, wait.ErrWaitTimeout
	}
}

func (c *openstackCloud) ListSecurityGroupRules(opt sgr.ListOpts) ([]sgr.SecGroupRule, error) {
	return listSecurityGroupRules(c, opt)
}

func listSecurityGroupRules(c OpenstackCloud, opt sgr.ListOpts) ([]sgr.SecGroupRule, error) {

View on GitHub (pinned to 4c8573c808)

Solutions

1. Inspect the wrapped error for the rejected option
2. Validate rule options (protocol, port range, CIDR)
3. Fix conflicts/quota and retry

When it happens

Trigger: Thrown at upup/pkg/fi/cloudup/openstack/security_group.go:68 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of kubernetes/kops@4c8573c808 (2026-09-05). Data as JSON: /api/errors/0b85e322c334e8c8. Report an issue: GitHub.