AKS Cluster provisioning failed

Question

AKS Cluster provisioning failed

Shahab Mushtaq 5

I am working on the following exercise in MS Learn: Exercise - Create an Azure Kubernetes Service cluster and running into an issue when I run the below cmd. I did make one modification to the lab exercise in that I already have my own RG (ShahabTest). I modified the below export cmd to use my existing RG name, otherwise running the cmd as shown. After running the cmd, my AKS cluster is in a failed state and I have the following error message in the activity logs:

"statusMessage": "{\"status\":\"Failed\",\"error\":{\"code\":\"ResourceOperationFailure\",\"message\":\"The resource operation completed with terminal provisioning state 'Failed'.\",\"details\":[{\"code\":\"PutResourceGroupError\",\"message\":\"Create or update resource group MC_ShahabTest_aks-contoso-video_centralus failed\"}]}}",

export RESOURCE_GROUP=rg-contoso-video

export CLUSTER_NAME=aks-contoso-video

export LOCATION=

Shahab Mushtaq 5 Reputation points

2023-02-13T17:09:51.5233333+00:00

It seems that the managed 'node resource group' creation is failing. How do I investigate further why the creation of this RG failed?
deherman-MSFT 37,886 Reputation points Microsoft Employee

2023-02-14T18:35:42.6866667+00:00

@Shahab Mushtaq
I suspect the issue could be related to a mismatch in the region you are trying to create the cluster and the region of the resource group. Can you confirm that these are matching? What happens if you create a new resource group during the exercise?
Shahab Mushtaq 5 Reputation points

2023-02-14T21:14:53.4533333+00:00

Yes the AKS cluster is being created in the same region as the RG. Unfortunately I can't run the script to create a new RG as in the exercise because it violates company tagging policies, I would need to add the mandatory tag information in the script.
deherman-MSFT 37,886 Reputation points Microsoft Employee

2023-02-14T21:49:10.4933333+00:00
From the above screenshot I can see that the aks-contoso-video cluster has already been created. Are you able to complete the next steps of the exercise?

az aks nodepool add \ --resource-group $RESOURCE_GROUP \ --cluster-name $CLUSTER_NAME \ --name uspool \ --node-count 2 \ --node-vm-size Standard_B2s \ --os-type Windows

2 answers

Your answer

Shahab Mushtaq 5 Reputation points

2023-02-13T17:09:51.5233333+00:00

It seems that the managed 'node resource group' creation is failing. How do I investigate further why the creation of this RG failed?
deherman-MSFT 37,886 Reputation points Microsoft Employee

2023-02-14T18:35:42.6866667+00:00

@Shahab Mushtaq
I suspect the issue could be related to a mismatch in the region you are trying to create the cluster and the region of the resource group. Can you confirm that these are matching? What happens if you create a new resource group during the exercise?
Shahab Mushtaq 5 Reputation points

2023-02-14T21:14:53.4533333+00:00

Yes the AKS cluster is being created in the same region as the RG. Unfortunately I can't run the script to create a new RG as in the exercise because it violates company tagging policies, I would need to add the mandatory tag information in the script.
deherman-MSFT 37,886 Reputation points Microsoft Employee

2023-02-14T21:49:10.4933333+00:00

From the above screenshot I can see that the aks-contoso-video cluster has already been created. Are you able to complete the next steps of the exercise?

az aks nodepool add \ --resource-group $RESOURCE_GROUP \ --cluster-name $CLUSTER_NAME \ --name uspool \ --node-count 2 \ --node-vm-size Standard_B2s \ --os-type Windows

Answer 1

Shahab Mushtaq 5

The cluster was created but is in a failed state. Ran the above cmds and they failed with error mesg "(InternalOperationError) We are unable to serve this request due to an internal error, Correlation ID: 231b95a9-3ae9-4527-940b-f82bbed1b4f9, Operation ID: 04483eef-ed4c-48fd-86c5-3ff8930ebfcd, Timestamp: 2023-02-14T22:49:29Z.

Code: InternalOperationError

Message: We are unable to serve this request due to an internal error, Correlation ID: 231b95a9-3ae9-4527-940b-f82bbed1b4f9, Operation ID: 04483eef-ed4c-48fd-86c5-3ff8930ebfcd, Timestamp: 2023-02-14T22:49:29Z."

User's image

deherman-MSFT 37,886 Reputation points Microsoft Employee

2023-02-16T20:42:34.1166667+00:00

Please, delete the cluster and start over. Please ensure you have proper permissions on your Resource Group to create and update resources.

Shahab Mushtaq 5

Previously I was doing the operations with Contributor permissions on the RG level. I changed my permissions to Owner at the RG level, deleted the existing AKS Cluster and ran the below cmds again, but got the same error.

az account set --subscription xxxxx

export RESOURCE_GROUP=ShahabTest \
export CLUSTER_NAME=aks-contoso-video \
export LOCATION=centralus


az aks create -g ShahabTest \
    --name $CLUSTER_NAME \
    --node-count 2 \
    --enable-addons http_application_routing \
    --generate-ssh-keys \
    --node-vm-size Standard_B2s \
    --network-plugin azure \
    --windows-admin-username localadmin

Shahab Mushtaq 5 Reputation points

2023-02-22T01:17:49.3766667+00:00

I figured out how to create the resource group Microsoft wants us to use in the exercise:
az group create --name=$RESOURCE_GROUP --location=$LOCATION --tags "BillingCode=Platform"

Created the RG and then ran the aks create script and it still fails on the same error

Answer 2

deherman-MSFT 37,886 Microsoft Employee

@Shahab Mushtaq

There appears to be some limitation or policy preventing you from updating the resource group after deployment. To further troubleshoot this, we're going to enable a free, one time technical support ticket. Please email the following to AzCommunity@microsoft.com and we'll get back to you promptly:

• Subject: "Attn: deherman - "

• Email body: Your Subscription ID

• Email body: A link to this thread so we can validate and expedite the request

If you don't receive a response within 24 hours, please reply to the thread so we can investigate.

Shahab Mushtaq 5 Reputation points

2023-02-22T21:41:56.5+00:00

thank you, just sent the email.

Share via

AKS Cluster provisioning failed

2 answers

Your answer