Kubeflow on Azure - Unable to Create AKS cluster - 'identifierUris property must use a verified domain'

Sharat Manikonda 0 Reputation points

Hi Experts,

I am trying to setup Kubeflow on Azure using official documentation of Kubeflow.


Encountered multiple errors:

az aks create -g <RESOURCE_GROUP_NAME> -n <NAME> -s <AGENT_SIZE> -c <AGENT_COUNT> -l <LOCATION> --generate-ssh-keys

Fails with error:
Values of identifierUris property must use a verified domain of the organization or its subdomain: 'https://90e9ea.Kubecluste-Kubeflowgroup-1760be.westus.cloudapp.azure.com'

I could not find any direct solution provided for the above error. I did found that registering the new domain in Azure Active Directory will resolve this issue. When i tried to do this, I found that my account has 'New Custom Domain' option disabled.

I did try to create the AKS cluster from Azure Portal (rather than CLI) and proceeded further with kubeflow setup.

At a later stage I encountered another error while configuring the kubeflow

command: kfctl apply -V -f ${CONFIG_URI}


serviceaccount/application-controller-service-account unchanged

clusterrole.rbac.authorization.k8s.io/application-controller-cluster-role unchanged

clusterrolebinding.rbac.authorization.k8s.io/application-controller-cluster-role-binding unchanged

service/application-controller-service unchanged

statefulset.apps/application-controller-stateful-set configured

WARN[0210] Encountered error applying application application: (kubeflow.error): Code 500 with message: Apply.Run : [unable to recognize "/tmp/kout457914242": no matches for kind "CustomResourceDefinition" in version "apiextensions.k8s.io/v1beta1", unable to recognize "/tmp/kout457914242": no matches for kind "Application" in version "app.k8s.io/v1beta1"] filename="kustomize/kustomize.go:284"

WARN[0210] Will retry in 24 seconds. filename="kustomize/kustomize.go:285"

I could not find any solution for these issues. Request for any pointers to setup kubeflow on Azure.

Thankyou in advance

Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,784 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
18,658 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. mutaz-msft 2,256 Reputation points Microsoft Employee

    Hi @Sharat Manikonda

    Thank you for reaching out.

    The "apiextensions.k8s.io/v1beta1" API version is no longer served as of v1.22 as mentioned here

    This issue is related to the Kubeflow since the mentioned API version already removed from the newer Kubernetes versions and Kubeflow should update their manifests to server the newer Kubernetes versions.
    The same issue is already reported on Github so you can share your feedback on the same Github thread or you can reach Kubeflow support to update the manifests.

    0 comments No comments