You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: support/azure/azure-kubernetes/error-codes/aks-error-code-page.md
+35-44Lines changed: 35 additions & 44 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -19,10 +19,11 @@ This article describes common AKS errors and how to resolve them.
19
19
|**Error code**|**Description**|**Details and mitigation**|
20
20
| --- | ---------- | ----------------- |
21
21
| AADSTS7000222 - BadRequest or InvalidClientSecret | Authentication failure with Azure Active Directory. | This involves invalid or expired service principal credentials. For more information, see [AADSTS7000222 - BadRequest or InvalidClientSecret error](../create-upgrade-delete/error-code-badrequest-or-invalidclientsecret.md). |
22
-
|Argument list too long | Application fails due to command line argument limitations. |The command line arguments exceed system limits in containerized applications. For more information, see [Application failures caused by the "argument list too long" error message](../create-upgrade-delete/application-fails-argument-list-too-long.md). |
22
+
|AKSCapacityError | Regional capacity constraints. |There's insufficient Azure capacity in the target region. For more information, see [Troubleshoot the AksCapacityHeavyUsage error code](akscapacityheavyusage-error.md). |
23
23
| AksCapacityHeavyUsage | Insufficient capacity in the Azure region. | There's high demand or limited resources in the selected region. For more information, see [Troubleshoot the AksCapacityHeavyUsage error code](akscapacityheavyusage-error.md). |
24
24
| AKSOperationPreempted | Cluster operation is interrupted by a higher priority operation. | There are concurrent operations on the cluster, causing conflicts. For more information, see [AKSOperationPreempted or AKSOperationPreemptedByDelete error when performing a new operation](aksoperationpreempted-error.md). |
25
25
| AKS upgrade blocked | Upgrade fails due to version compatibility issues. | There's version skew, incompatibility, or an unsupported upgrade path. For more information, see [Troubleshoot AKS upgrade errors because of version skew, incompatibility, or lack of support](aks-upgrade-blocked.md). |
26
+
| Argument list too long | Application fails due to command line argument limitations. | The command line arguments exceed system limits in containerized applications. For more information, see [Application failures caused by the "argument list too long" error message](../create-upgrade-delete/application-fails-argument-list-too-long.md). |
26
27
| AvailabilityZoneNotSupported | Selected availability zone isn't supported. | the virtual machine (VM) size or region doesn't support the specified availability zone. For more information, see [Troubleshoot the AvailabilityZoneNotSupported error code](availabilityzonenotsupported-error.md). |
27
28
| BadRequest or InvalidClientSecret | Authentication or request validation failed. | This involves an invalid service principal credentials or a malformed request. For more information, see [Error AADSTS7000222 - BadRequest or InvalidClientSecret](bad-request-or-invalid-client-secret-error.md). |
28
29
| CannotDeleteLoadBalancerWithPrivateLinkService or PrivateLinkServiceWithPrivateEndpointConnectionsCannotBeDeleted | Unable to delete load balancer with active private link connections. | The load balancer has active private endpoint connections that must be removed first. For more information, see [Cluster autoscaler fails to scale with "cannot scale cluster autoscaler enabled node pool" error](lb-pvtlinksvcwithpvtendptconn-error.md). |
@@ -62,55 +63,45 @@ This article describes common AKS errors and how to resolve them.
62
63
| OrasPullNetworkTimeoutVMExtensionError | ORAS pull operation timed out. | There's a network timeout when you try to create and deploy an AKS cluster. For more information, see [OrasPullNetworkTimeoutVMExtensionError error code (211) when deploying an AKS cluster](vmextensionerror-oraspullnetworktimeout.md). |
63
64
| OrasPullUnauthorizedVMExtensionError | Not authorized to pull artifacts from registry. | Authentication fails when you try to create and deploy an AKS cluster. For more information, see [OrasPullUnauthorizedVMExtensionError error code (212) when deploying an AKS cluster](vmextensionerror-oraspullunauthorized.md). |
64
65
| OutboundConnFailVMExtensionError (50) | Node can't establish outbound connectivity. | A firewall, network security group (NSG), or routing prevents outbound connections. For more information, see [Troubleshoot the OutboundConnFailVMExtensionError error code (50)](../create-upgrade-delete/error-code-outboundconnfailvmextensionerror.md). |
65
-
||| For more information, see [](). |
66
-
||| For more information, see [](). |
67
-
||| For more information, see [](). |
68
-
||| For more information, see [](). |
69
-
||| For more information, see [](). |
70
-
||| For more information, see [](). |
71
-
||| For more information, see [](). |
72
-
||| For more information, see [](). |
73
-
||| For more information, see [](). |
74
-
||| For more information, see [](). |
75
-
||| For more information, see [](). |
76
-
||| For more information, see [](). |
77
-
||| For more information, see [](). |
78
-
||| For more information, see [](). |
79
-
||| For more information, see [](). |
66
+
| PublicIPAddr/InUseSubnet/NetSecGrp deletion error | Can't delete in-use networking resources. | Resources have active dependencies that must be removed. For more information, see [A public IP address/subnet/network security group in use can't be deleted](../create-upgrade-delete/cannot-delete-ip-subnet-nsg.md). |
67
+
| PublicIPAddressCannotBeDeleted, InUseSubnetCannotBeDeleted, or InUseNetworkSecurityGroupCannotBeDeleted | Networking resources have active dependencies. | Network resources are in use and can't be deleted without removing dependencies. For more information, see [A public IP address/subnet/network security group in use cannot be deleted](publicipaddr-inusesubnet-netsecgrp-error.md). |
68
+
| PublicIPCountLimitReached | Public IP address quota exceeded. | The subscription or region has reached the public IP address limit. For more information, see [Troubleshoot the PublicIPCountLimitReached error code](publicipcountlimitreached-error.md). |
69
+
| QuotaExceeded or InsufficientVCPUQuota | Virtual machine quota exceeded | There's insufficient vCPU quota for the requested VM sizes or count. For more information, see [Troubleshoot the "Quotaexceeded" error code](quota-exceeded-error.md). |
70
+
| QuotaExceeded or InsufficientVCPUQuota (creation/upgrade) | Quota limit prevents cluster operation. | The vCPU quota is insufficient for cluster creation or upgrade. For more information, see ["QuotaExceeded" or "InsufficientVCPUQuota" error during AKS creation or upgrade](../create-upgrade-delete/quota-exceeded-during-creation-upgrade.md). |
71
+
| RequestDisallowedByPolicy | Azure policy blocks the request. | The request violates assigned Azure policy definitions. For more information, see [RequestDisallowedByPolicy error when deploying an AKS cluster](requestdisallowedbypolicy-error.md). |
72
+
| ServiceCidrOverlapExistingSubnetsCidr | Service Classless Inter-Domain Routing (CIDR) overlaps with subnet CIDR | The Kubernetes service CIDR conflicts with the existing subnet address space. For more information, see [Troubleshoot the ServiceCidrOverlapExistingSubnetsCidr error during an AKS cluster upgrade](servicecidroverlapexistingsubnetscidr-error.md). |
73
+
| ServicePrincipalValidationClientError | Service principal validation fails. | There's a client-side error when validating service principal credentials. For more information, see [Troubleshoot the ServicePrincipalValidationClientError error code](serviceprincipalvalidationclienterror-error.md). |
74
+
| SubnetIsDelegated | Subnet is delegated to another service. | The subnet has a delegation that conflicts with AKS requirements. For more information, see [Troubleshoot the SubnetIsDelegated error code](subnetisdelegated-error.md). |
75
+
| SubnetIsFull | No available IP addresses in subnet. | All IP addresses in the subnet are allocated. For more information, see [Troubleshoot the SubnetIsFull error code during an AKS cluster upgrade](subnetisfull-error.md). |
76
+
| SubnetIsFull (upgrade) | Insufficient IPs for upgrade operation. | There aren't enough free IP addresses to perform the node pool upgrade. For more information, see [Troubleshoot the "SubnetIsFull" error code during an AKS cluster upgrade](../create-upgrade-delete/error-code-subnetisfull-upgrade.md). |
77
+
| SubnetWithExternalResourcesCannotBeUsedByOtherResources | Subnet contains external resources. | The subnet has resources from other services preventing AKS usage. For more information, see [Troubleshoot the SubnetWithExternalResourcesCannotBeUsedByOtherResources error code](subnetwithexternalresourcescannotbeusedbyotherresources-error.md). |
78
+
| SubscriptionRequestsThrottled | Subscription-level throttling active. | Too many requests at the subscription level causes rate limiting. For more information, see [Troubleshoot the SubscriptionRequestsThrottled error code (429)](subscriptionrequeststhrottled.md). |
79
+
| SubscriptionRequestsThrottled (429) | Rate limit exceeded for subscription. | The request rate exceeds subscription-level throttling limits. For more information, see [Troubleshoot SubscriptionRequestsThrottled error code (429)](../create-upgrade-delete/error-code-subscriptionrequeststhrottled.md). |
80
80
|||
81
81
82
82
## T-Z error codes
83
83
84
84
|**Error code**|**Description**|**Details and mitigation**|
85
85
| --- | ---------- | ----------------- |
86
-
||| For more information, see [](). |
87
-
||| For more information, see [](). |
88
-
||| For more information, see [](). |
89
-
||| For more information, see [](). |
90
-
||| For more information, see [](). |
91
-
||| For more information, see [](). |
92
-
||| For more information, see [](). |
93
-
||| For more information, see [](). |
94
-
||| For more information, see [](). |
95
-
||| For more information, see [](). |
96
-
||| For more information, see [](). |
97
-
||| For more information, see [](). |
98
-
||| For more information, see [](). |
99
-
||| For more information, see [](). |
100
-
||| For more information, see [](). |
101
-
||| For more information, see [](). |
102
-
||| For more information, see [](). |
103
-
||| For more information, see [](). |
104
-
||| For more information, see [](). |
105
-
||| For more information, see [](). |
106
-
||| For more information, see [](). |
107
-
||| For more information, see [](). |
108
-
||| For more information, see [](). |
109
-
||| For more information, see [](). |
110
-
||| For more information, see [](). |
111
-
||| For more information, see [](). |
112
-
||| For more information, see [](). |
113
-
||| For more information, see [](). |
86
+
| TCP time-outs such as 10250 I/O | TCP connection timeouts on kubelet port. | There are network connectivity issues or a firewall is blocking port 10250. For more information, see [10250 I/O timeouts error when running kubectl log command](../connectivity/tcp-timeouts-dial-tcp-nodeip-10250-io-timeout.md). |
87
+
| Throttled | API requests are being throttled. | The request rate exceeds Azure Resource Manager limits. For more information, see [Troubleshoot the Throttled error code (429)](throttled-error.md). |
88
+
| Throttled (429) | HTTP 429 rate limiting in effect | Too many requests causes Azure API throttling. For more information, see [Troubleshoot Throttled error code (429)
| tls - client offered only unsupported versions | Transport Layer Security (TLS) version mismatch | The client attempts connection with unsupported TLS versions. For more information, see ["TLS: client offered only unsupported versions" error on client when connecting to the AKS API server](../create-upgrade-delete/tls-client-offered-unsupported-versions.md). |
91
+
| TooManyRequestsReceived or SubscriptionRequestsThrottled | Request throttling active. | An excessive request volume triggers rate limiting. For more information, see [Troubleshoot TooManyRequestsReceived or SubscriptionRequestsThrottled error code](toomanyrequestsreceived-error.md). |
92
+
| UnsatisfiablePDB | Pod Disruption Budget (PDB) can't be satisfied. | PDB constraints prevent required node operations. For more information, see [Error "UnsatisfiablePDB" when upgrading an AKS cluster](unsatisfiablepdb-error.md). |
93
+
| Upgrade issues with Gen2 VMs on Windows AKS cluster | Node pools not upgraded to Gen2 during image upgrade. | There's a known limitation with Windows node pool Gen2 migration. For more information, see [Windows Server node pools not upgraded to Gen2 during cluster node image upgrade](../create-upgrade-delete/nodepools-not-upgraded-to-gen2-during-node-image-upgrade.md). |
94
+
| VirtualNetworkNotInSucceededState | Virtual network (VNet) not in successful provisioning state | VNet is in failed, updating, or other non-successful state. For more information, see [Troubleshoot the VirtualNetworkNotInSucceededState error code](virtualnetworknotinsucceededstate-error.md). |
95
+
| VMExtensionError_CniDownloadTimeout | Container Network Interface (CNI) plugin download timeout. | There are network issues preventing a CNI plugin download. For more information, see [Troubleshoot the VMExtensionError_CniDownloadTimeout error code (41)](vmextensionerror-cnidownloadtimeout.md). |
96
+
| VMExtensionError_OutboundConnFail | VM extension can't establish outbound connection. | Outbound connectivity is blocked by network configuration. For more information, see [Troubleshoot the VMExtensionError_OutboundConnFail error code (50)](vmextensionerror-outboundconnfail.md). |
97
+
| VMExtensionError_K8SAPIServerConnFail | Can't connect to Kubernetes API server. | The network or a firewall prevents API server connectivity. For more information, see [Troubleshoot the VMExtensionError_K8SAPIServerConnFail error code (51)](vmextensionerror-k8sapiserverconnfail.md). |
98
+
| VMExtensionError_K8SAPIServerDNSLookupFail | DNS lookup failure for API server. | There are DNS resolution issues for the API server endpoint. For more information, see [Troubleshoot the VMExtensionError_K8SAPIServerDNSLookupFail error code (52)](vmextensionerror-k8sapiserverdnslookupfail.md). |
99
+
| VMExtensionError_VHDFileNotFound | Virtual hard disk (VHD) file not found. | The node image VHD is missing or inaccessible. For more information, see [VMExtensionError_VHDFileNotFound error code (65) when deploying an AKS cluster](vmextensionerror-vhdfilenotfound.md). |
100
+
| VMExtensionProvisioningTimeout | VM extension provisioning times out. | The extension installation exceeded the timeout period. For more information, see [Troubleshoot the VMExtensionProvisioningTimeout error](../create-upgrade-delete/error-code-vmextensionprovisioningtimeout.md). |
101
+
| VMExtensionError_ProvisioningTimeout | Extension provisioning timeout error. | The VM extension fails to provision within the time limit. For more information, see [Troubleshoot the VMExtensionProvisioningTimeout error code](vmextensionerror-provisioningtimeout.md). |
102
+
| WINDOWS_CSE_ERROR_CHECK_API_SERVER_CONNECTIVITY | Windows node can't verify API server connectivity. | The Windows-specific API server connectivity check fails. For more information, see [Troubleshoot WINDOWS_CSE_ERROR_CHECK_API_SERVER_CONNECTIVITY error code (5)](windows-cse-error-check-api-server-connectivity-error.md). |
103
+
| WINDOWS_CSE_ERROR_CHECK_API_SERVER_CONNECTIVITY (5) | Windows Custom Script Extension API connectivity error. | Windows node provisioning fails due to API server connectivity. For more information, see [Troubleshoot WINDOWS_CSE_ERROR_CHECK_API_SERVER_CONNECTIVITY error (5)](../create-upgrade-delete/windows-cse-error-check-api-server-connectivity.md). |
104
+
| ZonalAllocationFailed, AllocationFailed, or OverconstrainedAllocationRequest | VM allocation fails. | You're unable to allocate VMs due to capacity, zone, or constraint issues. For more information, see [Troubleshoot the ZonalAllocationFailed, AllocationFailed, or OverconstrainedAllocationRequest error code](zonalallocation-allocationfailed-error.md). |
0 commit comments