Error creating Kubernetes CKS in VPC

[KuasarCloud]

Hi,

I'm trying to create a CKS cluster inside a VPC tier and getting error regarding Public IP Address ( I hace plenty of available IP) and rules permissions, any clue what is it?

• KVM
• ACS 4.19.0.1

2025-07-02 11:42:21,245 ERROR [c.c.k.c.a.KubernetesClusterActionWorker] (API-Job-Executor-41:ctx-182ea260 job-48495 ctx-5c26c6d2) (logid:2fdc7f19) Failed to setup Kubernetes cluster : megacluster, unable to setup network rules
com.cloud.exception.ManagementServerException: No public IP addresses found for VPC tier : otrasubred, Kubernetes cluster : megacluster
	at com.cloud.kubernetes.cluster.actionworkers.KubernetesClusterStartWorker.setupKubernetesClusterNetworkRules(KubernetesClusterStartWorker.java:390)

2025-07-02 11:42:21,257 INFO  [c.c.k.c.a.KubernetesClusterActionWorker] (API-Job-Executor-41:ctx-182ea260 job-48495 ctx-5c26c6d2) (logid:2fdc7f19) Revoking launch permission for systemVM template
2025-07-02 11:42:21,265 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl] (API-Job-Executor-41:ctx-182ea260 job-48495) (logid:2fdc7f19) Complete async job-48495, jobStatus: FAILED, resultCode: 530, result: org.apache.cloudstack.api.response.ExceptionResponse/null/{"uuidList":[],"errorcode":"530","errortext":"Failed to setup Kubernetes cluster : megacluster, unable to setup network rules"}2025-07-02 11:42:21,257 INFO  [c.c.k.c.a.KubernetesClusterActionWorker] (API-Job-Executor-41:ctx-182ea260 job-48495 ctx-5c26c6d2) (logid:2fdc7f19) Revoking launch permission for systemVM template
2025-07-02 11:42:21,265 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl] (API-Job-Executor-41:ctx-182ea260 job-48495) (logid:2fdc7f19) Complete async job-48495, jobStatus: FAILED, resultCode: 530, result: org.apache.cloudstack.api.response.ExceptionResponse/null/{"uuidList":[],"errorcode":"530","errortext":"Failed to setup Kubernetes cluster : megacluster, unable to setup network rules"}

[Pearl1594]

@KuasarCloud Can you please share the entire log. Or do you see any Warning along the lines of the following:
Public IP with ID: %s linked to the Kubernetes cluster: %s is not usable

[KuasarCloud]

Hey @Pearl1594

Thanks for stepping in, this is the log

2025-07-02 11:42:21,228 INFO  [c.c.k.c.a.KubernetesClusterActionWorker] (API-Job-Executor-41:ctx-182ea260 job-48495 ctx-5c26c6d2) (logid:2fdc7f19) Started VM : megacluster-node-197cc0425cb in the Kubernetes cluster : megacluster
2025-07-02 11:42:21,240 INFO  [c.c.k.c.a.KubernetesClusterActionWorker] (API-Job-Executor-41:ctx-182ea260 job-48495 ctx-5c26c6d2) (logid:2fdc7f19) Provisioned node VM : megacluster-node-197cc0425cb in to the Kubernetes cluster : megacluster
2025-07-02 11:42:21,240 INFO  [c.c.k.c.a.KubernetesClusterActionWorker] (API-Job-Executor-41:ctx-182ea260 job-48495 ctx-5c26c6d2) (logid:2fdc7f19) Kubernetes cluster : megacluster VMs successfully provisioned
2025-07-02 11:42:21,245 WARN  [c.c.k.c.a.KubernetesClusterActionWorker] (API-Job-Executor-41:ctx-182ea260 job-48495 ctx-5c26c6d2) (logid:2fdc7f19) Public IP with ID: d0df16a7-5467-4aff-b68b-426f31ee3c90 linked to the Kubernetes cluster: megacluster is not usable
2025-07-02 11:42:21,245 ERROR [c.c.k.c.a.KubernetesClusterActionWorker] (API-Job-Executor-41:ctx-182ea260 job-48495 ctx-5c26c6d2) (logid:2fdc7f19) Failed to setup Kubernetes cluster : megacluster, unable to setup network rules
com.cloud.exception.ManagementServerException: No public IP addresses found for VPC tier : otrasubred, Kubernetes cluster : megacluster
        at com.cloud.kubernetes.cluster.actionworkers.KubernetesClusterStartWorker.setupKubernetesClusterNetworkRules(KubernetesClusterStartWorker.java:390)
        at com.cloud.kubernetes.cluster.actionworkers.KubernetesClusterStartWorker.startKubernetesClusterOnCreate(KubernetesClusterStartWorker.java:530)
        at com.cloud.kubernetes.cluster.KubernetesClusterManagerImpl.startKubernetesCluster(KubernetesClusterManagerImpl.java:1321)
        at org.apache.cloudstack.api.command.user.kubernetes.cluster.CreateKubernetesClusterCmd.execute(CreateKubernetesClusterCmd.java:294)
        at com.cloud.api.ApiDispatcher.dispatch(ApiDispatcher.java:172)
        at com.cloud.api.ApiAsyncJobDispatcher.runJob(ApiAsyncJobDispatcher.java:112)
        at org.apache.cloudstack.framework.jobs.impl.AsyncJobManagerImpl$5.runInContext(AsyncJobManagerImpl.java:654)
        at org.apache.cloudstack.managed.context.ManagedContextRunnable$1.run(ManagedContextRunnable.java:48)
        at org.apache.cloudstack.managed.context.impl.DefaultManagedContext$1.call(DefaultManagedContext.java:55)
        at org.apache.cloudstack.managed.context.impl.DefaultManagedContext.callWithContext(DefaultManagedContext.java:102)
        at org.apache.cloudstack.managed.context.impl.DefaultManagedContext.runWithContext(DefaultManagedContext.java:52)
        at org.apache.cloudstack.managed.context.ManagedContextRunnable.run(ManagedContextRunnable.java:45)
        at org.apache.cloudstack.framework.jobs.impl.AsyncJobManagerImpl$5.run(AsyncJobManagerImpl.java:602)
        at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
        at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
        at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
        at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
        at java.base/java.lang.Thread.run(Thread.java:829)
2025-07-02 11:42:21,257 INFO  [c.c.k.c.a.KubernetesClusterActionWorker] (API-Job-Executor-41:ctx-182ea260 job-48495 ctx-5c26c6d2) (logid:2fdc7f19) Revoking launch permission for systemVM template
2025-07-02 11:42:21,265 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl] (API-Job-Executor-41:ctx-182ea260 job-48495) (logid:2fdc7f19) Complete async job-48495, jobStatus: FAILED, resultCode: 530, result: org.apache.cloudstack.api.response.ExceptionResponse/null/{"uuidList":[],"errorcode":"530","errortext":"Failed to setup Kubernetes cluster : megacluster, unable to setup network rules"}
2025-07-02 11:42:21,268 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl] (API-Job-Executor-41:ctx-182ea260 job-48495) (logid:2fdc7f19) Publish async job-48495 complete on message bus
2025-07-02 11:42:21,268 DEBUG [o.a.c.f.j.i.AsyncJobManagerImpl] (API-Job-Executor-41:ctx-182ea260 job-48495) (logid:2fdc7f19) Wake up jobs related to job-48495

[Pearl1594]

Thanks for sharing the logs @KuasarCloud. This issue seems to have been fixed in 4.20.0 with this fix https://github.com/apache/cloudstack/pull/8906/files#diff-79637bb195868e04d7167f4609d65582a2cf3b4b6d4115ed3c5e611ba5f9501cR363.
*Just in case the previous link does not point to the right line - the exact fix

[KuasarCloud]

Thanks! So I will upgrade then!

Best Regards