kubernetes/kops · error

waiting for network security group create/update completion:

Error message

waiting for network security group create/update completion: %w

What it means

PollUntilDone failed while waiting for the network security group CreateOrUpdate LRO; ARM accepted the request but provisioning ended in failure (often conflicting rules or concurrent NSG updates).

Source

Thrown at upup/pkg/fi/cloudup/azure/networksecuritygroup.go:49

	CreateOrUpdate(ctx context.Context, resourceGroupName, NetworkSecurityGroupName string, parameters network.SecurityGroup) (*network.SecurityGroup, error)
	List(ctx context.Context, resourceGroupName string) ([]*network.SecurityGroup, error)
	Delete(ctx context.Context, resourceGroupName, NetworkSecurityGroupName string) error
}

type NetworkSecurityGroupsClientImpl struct {
	c *network.SecurityGroupsClient
}

var _ NetworkSecurityGroupsClient = (*NetworkSecurityGroupsClientImpl)(nil)

func (c *NetworkSecurityGroupsClientImpl) CreateOrUpdate(ctx context.Context, resourceGroupName, NetworkSecurityGroupName string, parameters network.SecurityGroup) (*network.SecurityGroup, error) {
	future, err := c.c.BeginCreateOrUpdate(ctx, resourceGroupName, NetworkSecurityGroupName, parameters, nil)
	if err != nil {
		return nil, fmt.Errorf("creating/updating network security group: %w", err)
	}
	asg, err := future.PollUntilDone(ctx, nil)
	if err != nil {
		return nil, fmt.Errorf("waiting for network security group create/update completion: %w", err)
	}
	return &asg.SecurityGroup, err
}

func (c *NetworkSecurityGroupsClientImpl) List(ctx context.Context, resourceGroupName string) ([]*network.SecurityGroup, error) {
	if resourceGroupName == "" {
		return nil, nil
	}

	var l []*network.SecurityGroup
	pager := c.c.NewListPager(resourceGroupName, nil)
	for pager.More() {
		resp, err := pager.NextPage(ctx)
		if err != nil {
			var respErr *azcore.ResponseError
			if errors.As(err, &respErr) && respErr.ErrorCode == "ResourceGroupNotFound" {
				return nil, nil
			}

View on GitHub (pinned to 4c8573c808)

Solutions

1. Inspect the wrapped error for the provisioning failure reason
2. Resolve conflicting security rules or concurrent updates and retry

When it happens

Trigger: Thrown at upup/pkg/fi/cloudup/azure/networksecuritygroup.go:49 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of kubernetes/kops@4c8573c808 (2026-09-05). Data as JSON: /api/errors/15b1e592aca85d98. Report an issue: GitHub.