Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
This article provides troubleshooting guidance for common cluster termination error codes. Use the error code from your cluster event log to find the relevant cause and recommended fix.
AZURE_OPERATION_NOT_ALLOWED_EXCEPTION
An Azure operation failed due to permission restrictions, policy violations, or account limitations.
Example error message
Encountered error while client authentication.
Troubleshooting steps
- Review Azure activity logs for detailed error information.
- Check service principal permissions on the resource group.
- Verify that Azure policies are not blocking the operation.
- Check subscription state and status.
- Review recent changes to permissions or policies.
Recommended fix
Grant the required permissions to the service principal, update Azure policies if they are blocking operations, verify that the subscription is active, or resolve any account restrictions. Contact Azure support for assistance with permission configuration.
AZURE_QUOTA_EXCEEDED_EXCEPTION
The cluster launch would exceed the Azure subscription quota limits for the requested VM family.
Example error message
Operation could not be completed as it results in exceeding approved standardDSv2Family Cores quota. Additional details - Deployment Model: Resource Manager, Location: westeurope, Current Limit: 350, Current Usage: 344, Additional Required: 8, (Minimum) New Limit Required: 352.
Troubleshooting steps
- Check current quota usage in Azure Portal under Subscriptions > Usage + quotas.
- Identify which VM family quota is exceeded.
- Review all running VMs and clusters in the subscription.
- Check whether recent cluster launches have increased usage.
Recommended fix
Request a quota increase through Azure Portal, terminate unused clusters to free quota, or use different VM types with available quota. Contact Azure support for quota increase assistance.
BOOTSTRAP_TIMEOUT_DUE_TO_MISCONFIG
The VM bootstrap process timed out due to network connectivity issues, slow artifact downloads, or issues with the cloud provider. The bootstrap timeout is 700 seconds.
Example error message
[id: InstanceId([REDACTED]), status: INSTANCE_INITIALIZING, ...] with threshold 700 seconds timed out after 703891 milliseconds. Instance bootstrap inferred timeout reason: UnknownReason
Troubleshooting steps
- Check connectivity to Databricks artifact storage.
- Verify connectivity to the Databricks control plane.
- Check DNS resolution for Databricks endpoints.
- Verify firewall and security group rules.
- Test whether the issue is consistent or intermittent.
Recommended fix
Ensure network connectivity to Databricks storage and control plane. Configure service endpoints or VPC endpoints for better network performance. Review firewall, DNS, and routing configuration. Contact Databricks support if network configuration is verified, but timeouts persist.
CLOUD_PROVIDER_RESOURCE_STOCKOUT
Azure is temporarily out of capacity for the requested VM size in the selected region or zone.
Example error message
The requested VM size for resource 'Following SKUs have failed for Capacity Restrictions: Standard_DS3_v2' is currently not available in location 'westeurope'. Please try another size or deploy to a different location or different zone. See https://aka.ms/azureskunotavailable for details.
Troubleshooting steps
- Check the Azure Service Health dashboard for known capacity issues.
- Verify whether the issue affects specific zones or the entire region.
- Check whether the issue is specific to your VM size.
- Check whether the issue affects spot VMs versus on-demand VMs.
Recommended fix
Retry the cluster launch, try different availability zones, use the auto availability zone setting, try alternative VM sizes, or wait for Azure to restore capacity. Contact Azure support for estimated capacity restoration time if the issue persists.
CONTROL_PLANE_REQUEST_FAILURE_DUE_TO_MISCONFIG
VMs cannot reach the Azure Databricks control plane due to DNS resolution failures, firewall rules, or network misconfiguration.
Example error message
Network health check reported that instance is unable to reach Databricks Control Plane. Please check that instances have connectivity to the Databricks Control Plane. Instance bootstrap inferred timeout reason: NetworkHealthCheck_CP_Failed
Troubleshooting steps
- Decode any Base64-encoded error messages in the cluster event log.
- Check DNS settings in your network configuration.
- Review firewall rules and network security settings.
- Test control plane connectivity from a VM in the same network.
- Verify custom DNS servers are functional and reachable.
For Azure environments, also check UDR (User-Defined Routes) configuration and NSG rules on Azure Databricks subnets.
Recommended fix
Verify DNS server configuration and reachability. Ensure firewall rules allow outbound traffic to the Azure Databricks control plane.
If using UDR with a firewall, ensure Azure Databricks service tags route to the internet. Test with Azure DNS (168.63.129.16) temporarily to isolate DNS issues.
Contact Databricks support if the network configuration appears correct, but the issue persists.
DOCKER_IMAGE_PULL_FAILURE
The cluster failed to download the Docker image from the container registry due to network, authentication, or configuration issues.
Example error message
Failed to pull docker image: authentication required
Troubleshooting steps
- Verify the Docker image name and tag are correct in the cluster configuration.
- Check network connectivity to the container registry from the workspace.
- Test registry access from a VM in the same network.
- Verify authentication credentials for private registries.
- Review node daemon logs for detailed error messages.
Recommended fix
Correct the Docker image configuration and verify authentication credentials. Ensure network rules allow access to the container registry.
For Azure Container Registry (ACR), configure service endpoints in your VNet.
Contact Databricks support if the configuration appears correct, but the issue persists.
DOCKER_IMAGE_TOO_LARGE_FOR_INSTANCE_EXCEPTION
The Docker image size exceeds the available disk space on the selected instance type.
Example error message
Failed to launch container as the docker image is too large for the instance.
Troubleshooting steps
- Check the Docker image size.
- Review the instance type's disk capacity.
- Identify unnecessary layers or files in the Docker image.
- Check whether multiple large images are being used.
Recommended fix
Use an instance type with a larger disk capacity, optimize the Docker image by removing unnecessary files and layers, use multi-stage builds to reduce image size, or split functionality across multiple smaller images. Contact Databricks support for assistance with image optimization.
EOS_SPARK_IMAGE
The Databricks Runtime (DBR) version configured for the cluster has reached end of support (EOS).
Example error message
Spark image release__11.0.x-snapshot-cpu-ml-scala2.12__databricks-universe__head__[REDACTED]__format-2 does not exist with exit code 2
Troubleshooting steps
- Check the DBR version in the cluster configuration.
- Review the Databricks Runtime release notes for EOS dates.
- Identify which DBR versions are currently supported.
- Check whether notebooks or jobs have DBR version dependencies.
Recommended fix
Update the cluster configuration to use a supported Databricks Runtime version. Review compatibility requirements for libraries and code before deploying to production. Contact Databricks support if you need assistance with DBR migration.
INSTANCE_POOL_MAX_CAPACITY_REACHED
The instance pool has reached its configured maximum capacity limit and cannot provide additional instances.
Example error message
Instance pool is full, please consider increasing the pool size
Troubleshooting steps
- Check the instance pool configuration for the maximum capacity setting.
- Review how many instances are currently in use from the pool.
- Identify which clusters are using the pool.
- Check whether there are idle instances that can be freed.
Recommended fix
Increase the instance pool maximum capacity, create additional instance pools to distribute load, terminate idle clusters using the pool, or configure clusters to use different pools. Review pool sizing based on concurrent workload requirements.
INSTANCE_UNREACHABLE_DUE_TO_MISCONFIG
Instances are unreachable due to network misconfiguration, firewall rules, or connectivity issues.
Example error message
Bootstrap completes in the VM but control plane failed to reach the node. Please review your network configuration or firewall settings to allow Databricks to reach the node.
Troubleshooting steps
- Review firewall rules and network security settings for required inbound ports.
- Test connectivity from the control plane to the instance network.
- Check for asymmetric routing issues.
- Review firewall logs for dropped connections.
- Verify that instances have the correct security group assignments.
For Azure, also check NSG inbound rules on Azure Databricks subnets and verify that UDR route tables are correctly configured.
Recommended fix
Ensure security groups or NSGs allow required inbound traffic from the Azure Databricks control plane. Verify that route tables enable bidirectional communication. Contact Databricks support for assistance with network connectivity troubleshooting.
INVALID_ARGUMENT
Invalid configuration parameters, missing secrets, incorrect permissions, or misconfigured cluster settings prevented the cluster from starting.
Example error message
com.databricks.backend.manager.secret.SecretPermissionDeniedException: User does not have permission with scope: [REDACTED] and key: [REDACTED]
Troubleshooting steps
- Review the error message to identify the specific invalid parameter.
- For secret errors, verify the secret scope and key exist using the Databricks Secrets API.
- Check user or service principal permissions for accessing secrets.
- Review the cluster configuration for syntax errors.
- Check init scripts for configuration errors.
For Azure Key Vault-backed secrets, also verify network connectivity and DNS resolution to the Key Vault endpoint.
Recommended fix
Correct the invalid parameter based on the error message. For secrets, verify scope and key existence, check permissions, and ensure network connectivity to secret providers. Validate all cluster configuration against the documentation. Contact Databricks support if the configuration appears correct.
NETWORK_CHECK_CONTROL_PLANE_FAILURE
A pre-bootstrap network health check failed when attempting to reach the Azure Databricks control plane.
Example error message
Instance failed network health check before bootstrapping with fatal error: X_NHC_CONTROL_PLANE_UNREACHABLE
1 failed component(s): control_plane
Retryable: true
Troubleshooting steps
- Review cluster event logs for specific connection failure details.
- Test control plane connectivity from a VM in the same network.
- Check whether a firewall is intercepting or blocking traffic.
For Azure, also check NSG outbound rules on Azure Databricks subnets and verify UDR configuration. If using a firewall, ensure Azure Databricks service tags route to the internet.
Recommended fix
Verify that security group or NSG rules allow outbound traffic to the Azure Databricks control plane. If using UDR with a firewall, ensure Azure Databricks service tags route to the internet. Contact Databricks support if network configuration is verified correct.
NETWORK_CONFIGURATION_FAILURE
A network configuration error is preventing proper VM or cluster network setup.
Example error message
Instance bootstrap failed command: AzureInvalidNic
Failure message: Azure instance did not set up route table correctly
Troubleshooting steps
- Review firewall and security group or NSG rules.
- Check route tables and routing configuration.
- Verify subnet configuration.
- Check for IP address conflicts.
- Verify DNS settings.
Recommended fix
Correct the network configuration based on the specific error. Ensure security group or NSG rules allow required traffic, verify that subnet CIDR ranges don't overlap, check that route tables are properly configured, and ensure DNS is functional. Contact Databricks support for network configuration review.
REQUEST_THROTTLED
API requests to the cloud provider are being throttled due to rate limiting.
Example error message
TEMPORARILY_UNAVAILABLE: Too many requests from workspace [REDACTED]
Troubleshooting steps
- Check whether multiple clusters are launching simultaneously.
- Review API request rate limits for your account.
- Identify whether other services are making concurrent API calls.
- Check for automated systems making frequent requests.
Recommended fix
Reduce concurrent cluster launches, request an API rate limit increase from your cloud provider, implement exponential backoff in automation scripts, or stagger cluster launch times.
SPOT_INSTANCE_TERMINATION
Spot or preemptible instances were terminated by the cloud provider due to capacity needs or pricing changes.
Example error message
Server.SpotInstanceTermination: Spot instance termination
Troubleshooting steps
- Check the cluster event logs for the termination timestamp.
- Review spot pricing history in your region.
- Identify whether terminations occur at specific times.
- Check whether multiple instances were terminated simultaneously.
Recommended fix
Switch to on-demand instances for production workloads, implement job retry logic to handle interruptions, or use a mix of on-demand and spot instances. Spot instances are best for fault-tolerant workloads.
STORAGE_DOWNLOAD_FAILURE_SLOW
Downloading artifacts from Azure Databricks storage is failing or too slow due to network connectivity, firewall, or DNS issues.
Example error message
Instance bootstrap failed command: Command_UpdateWorker
Failure message: Trying DNS probe for: https://[REDACTED].blob.core.windows.net/update/worker-artifacts/...
Troubleshooting steps
- Check firewall rules for Azure Databricks storage endpoints.
- Verify DNS resolution for storage URLs.
- Test download speed from a VM in the same network.
- Review network bandwidth utilization.
- Check for proxy or network inspection devices.
- Verify routes to storage endpoints.
Recommended fix
Ensure firewall rules allow access to Azure Databricks storage endpoints.
Configure service endpoints for Azure Storage in your VNet.
Review and optimize network inspection devices if present. Contact Databricks support if connectivity to storage endpoints is verified but downloads still fail.
SUBNET_EXHAUSTED_FAILURE
The Azure subnet has run out of available IP addresses. Each Azure Databricks instance requires one IP address in both the private and public subnets.
Example error message
Subnet /subscriptions/[REDACTED]/resourceGroups/[REDACTED]/providers/Microsoft.Network/virtualNetworks/VNET_DATA01_DEV/subnets/SN_DATABRICKS_CORE_PUBLIC with address prefix [REDACTED]/26 does not have enough capacity for 1 IP addresses.
Troubleshooting steps
- Check the subnet CIDR range and available addresses in Azure Portal.
- Review the number of network interfaces in the subnet.
- Verify subnet configuration for the Azure Databricks workspace.
- Calculate IP requirements: (number of nodes) × (2 subnets) = total IPs needed.
Recommended fix
Use fewer, larger instances to reduce IP consumption, clean up unused resources in the subnet, or create a new workspace with larger subnet CIDR ranges. See Update workspace network configuration for more information on updating workspace subnet configuration. If changing subnet configuration is not possible, contact Databricks support for workspace migration assistance.
WORKSPACE_CONFIGURATION_ERROR
Workspace-level misconfiguration is preventing cluster launch, including issues with IAM roles or service principal permissions.
Troubleshooting steps
- Review recent changes to workspace configuration.
- Check the cloud provider console for policy or permission changes.
- Verify service principal permissions on all required resource groups.
Recommended fix
Verify that the service principal has the required permissions across all resource groups. Review workspace security configuration.
Contact Databricks support if the workspace configuration appears correct or if the cross-account role setup needs verification.