kubernetes/kops · error

error parsing expected Policy for SQS %q: %v

Error message

error parsing expected Policy for SQS %q: %v

What it means

The expected policy document for the SQS queue failed json.Unmarshal, so it cannot be normalized for comparison against the actual AWS policy; the expected policy in the spec is not valid JSON.

Source

Thrown at upup/pkg/fi/cloudup/awstasks/sqs.go:111

	}

	tags, err := cloud.SQS().ListQueueTags(ctx, &sqs.ListQueueTagsInput{
		QueueUrl: aws.String(url),
	})
	if err != nil {
		return nil, fmt.Errorf("error listing SQS queue tags: %v", err)
	}

	// We parse both as JSON; if the json forms are equal we pretend the actual value is the expected value
	if q.Policy != nil {
		expectedPolicy, err := fi.ResourceAsString(q.Policy)
		if err != nil {
			return nil, fmt.Errorf("error reading expected Policy for SQS %q: %v", aws.ToString(q.Name), err)
		}
		expectedJson := make(map[string]interface{})
		err = json.Unmarshal([]byte(expectedPolicy), &expectedJson)
		if err != nil {
			return nil, fmt.Errorf("error parsing expected Policy for SQS %q: %v", aws.ToString(q.Name), err)
		}
		actualJson := make(map[string]interface{})
		err = json.Unmarshal([]byte(actualPolicy), &actualJson)
		if err != nil {
			return nil, fmt.Errorf("error parsing actual Policy for SQS %q: %v", aws.ToString(q.Name), err)
		}

		if err := normalizePolicy(expectedJson); err != nil {
			return nil, err
		}
		if err := normalizePolicy(actualJson); err != nil {
			return nil, err
		}

		if reflect.DeepEqual(actualJson, expectedJson) {
			klog.V(2).Infof("actual Policy was json-equal to expected; returning expected value")
			actualPolicy = expectedPolicy
			q.Policy = fi.NewStringResource(expectedPolicy)

View on GitHub (pinned to 4c8573c808)

Solutions

1. Validate the expected policy JSON (e.g. `jq . policy.json`)
2. Fix or replace the policy document referenced by the SQS task

When it happens

Trigger: Thrown at upup/pkg/fi/cloudup/awstasks/sqs.go:111 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of kubernetes/kops@4c8573c808 (2026-09-05). Data as JSON: /api/errors/acaa30f89aef020b. Report an issue: GitHub.