kubernetes/kops · error

error extracting security groups from pages: %v

Error message

error extracting security groups from pages: %v

What it means

The security-group list call succeeded but extracting group objects from the paginated response failed, indicating a malformed or SDK-incompatible response body.

Source

Thrown at upup/pkg/fi/cloudup/openstack/security_group.go:44

	"k8s.io/kops/util/pkg/vfs"
)

func (c *openstackCloud) ListSecurityGroups(opt sg.ListOpts) ([]sg.SecGroup, error) {
	return listSecurityGroups(c, opt)
}

func listSecurityGroups(c OpenstackCloud, opt sg.ListOpts) ([]sg.SecGroup, error) {
	var groups []sg.SecGroup

	done, err := vfs.RetryWithBackoff(readBackoff, func() (bool, error) {
		allPages, err := sg.List(c.NetworkingClient(), opt).AllPages(context.TODO())
		if err != nil {
			return false, fmt.Errorf("error listing security groups %v: %v", opt, err)
		}

		gs, err := sg.ExtractGroups(allPages)
		if err != nil {
			return false, fmt.Errorf("error extracting security groups from pages: %v", err)
		}
		groups = gs
		return true, nil
	})
	if err != nil {
		return groups, err
	} else if done {
		return groups, nil
	} else {
		return groups, wait.ErrWaitTimeout
	}
}

func (c *openstackCloud) CreateSecurityGroup(opt sg.CreateOptsBuilder) (*sg.SecGroup, error) {
	return createSecurityGroup(c, opt)
}

func createSecurityGroup(c OpenstackCloud, opt sg.CreateOptsBuilder) (*sg.SecGroup, error) {

View on GitHub (pinned to 4c8573c808)

Solutions

1. Check OpenStack/gophercloud compatibility
2. Retry the listing
3. Report persistent decode failures for your deployment

When it happens

Trigger: Thrown at upup/pkg/fi/cloudup/openstack/security_group.go:44 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of kubernetes/kops@4c8573c808 (2026-09-05). Data as JSON: /api/errors/cce014ff8146831d. Report an issue: GitHub.