kubernetes/kops · error

listing application security groups: %w

Error message

listing application security groups: %w

What it means

Listing application security groups via the ARM pager failed with an error other than ResourceGroupNotFound (which is already treated as an empty list). Fires on authorization failures, throttling, or transient ARM errors.

Source

Thrown at upup/pkg/fi/cloudup/azure/applicationsecuritygroup.go:68

	}
	return &asg.ApplicationSecurityGroup, err
}

func (c *ApplicationSecurityGroupsClientImpl) List(ctx context.Context, resourceGroupName string) ([]*network.ApplicationSecurityGroup, error) {
	if resourceGroupName == "" {
		return nil, nil
	}

	var l []*network.ApplicationSecurityGroup
	pager := c.c.NewListPager(resourceGroupName, nil)
	for pager.More() {
		resp, err := pager.NextPage(ctx)
		if err != nil {
			var respErr *azcore.ResponseError
			if errors.As(err, &respErr) && respErr.ErrorCode == "ResourceGroupNotFound" {
				return nil, nil
			}
			return nil, fmt.Errorf("listing application security groups: %w", err)
		}
		l = append(l, resp.Value...)
	}
	return l, nil
}

func (c *ApplicationSecurityGroupsClientImpl) Delete(ctx context.Context, resourceGroupName, applicationSecurityGroupName string) error {
	future, err := c.c.BeginDelete(ctx, resourceGroupName, applicationSecurityGroupName, nil)
	if err != nil {
		return fmt.Errorf("deleting application security group: %w", err)
	}
	if _, err = future.PollUntilDone(ctx, nil); err != nil {
		return fmt.Errorf("waiting for application security group deletion completion: %w", err)
	}
	return nil
}

func newApplicationSecurityGroupsClientImpl(subscriptionID string, cred *azidentity.DefaultAzureCredential) (*ApplicationSecurityGroupsClientImpl, error) {

View on GitHub (pinned to 4c8573c808)

Solutions

  1. Verify the service principal has permission to list application security groups in the resource group
  2. Retry after transient ARM/throttling errors
  3. Check the wrapped ResponseError code for details
Defensive patterns

Strategy: retry

When it happens

Trigger: Thrown at upup/pkg/fi/cloudup/azure/applicationsecuritygroup.go:68 when the library encounters an invalid state.

Common situations: See trigger scenarios.


AI-assisted analysis of kubernetes/kops@4c8573c808 (2026-09-05). Data as JSON: /api/errors/c135580ce22e1524. Report an issue: GitHub.