fix: better error message in windows CSE when API server can't be contacted #7828

timmy-wright · 2026-02-09T02:42:28Z

What this PR does / why we need it:

Better error message when API server can't be contacted

Which issue(s) this PR fixes:

Fixes #

Copilot

Pull request overview

This PR updates Linux VHD/provisioning artifacts, SIG image version pinning, and CI pipelines (including E2E auth) alongside regenerating snapshot testdata.

Changes:

Freeze MarinerV2/AzureLinuxV2 SIG image version and update related tests/testdata.
Add disk queue tuning script/service and corresponding E2E validations.
Switch CI tasks to AzureCLI@2 and update E2E auth to use Azure CLI credentials.

Reviewed changes

Copilot reviewed 1 out of 1 changed files in this pull request and generated 7 comments.

Show a summary per file

File	Description
pkg/agent/testdata/AKSUbuntu2204+CustomCloud/CustomData	Regenerated snapshot CustomData payloads.
pkg/agent/testdata/AKSUbuntu2204+China/CustomData	Regenerated snapshot CustomData payloads.
pkg/agent/datamodel/sig_config_test.go	Update expected SIG version constant for frozen V2 images.
pkg/agent/datamodel/sig_config.go	Introduce frozen V2 SIG image version constant and apply it to templates.
pkg/agent/datamodel/osimageconfig.go	Adjust cloud-to-image mapping (new cloud entry + key fixes).
pkg/agent/datamodel/linux_sig_version.json	Bump linux SIG version value to 202512.06.0.
parts/linux/cloud-init/artifacts/ubuntu/cse_install_ubuntu.sh	Remove NVIDIA repo cleanup call from GPU cleanup path.
parts/linux/cloud-init/artifacts/ubuntu/cse_helpers_ubuntu.sh	Add `apt-get clean` after successful installs.
parts/linux/cloud-init/artifacts/mariner/cse_install_mariner.sh	Remove NVIDIA repo cleanup call from GPU cleanup path.
parts/linux/cloud-init/artifacts/disk_queue.sh	Add disk queue tuning script selecting Azure root/os device link.
parts/linux/cloud-init/artifacts/disk_queue.service	Update ExecStart to run the new disk_queue.sh script.
parts/linux/cloud-init/artifacts/cse_config.sh	Remove NVIDIA repo cleanup after GPU driver installation.
parts/common/components.json	Update multiple component versions and one download location path.
packer.mk	Remove az-login logic; target now only sets subscription.
e2e/validators.go	Add validators for `aks-log-collector` and `disk_queue.service`.
e2e/validation.go	Call new validators from common Linux validation suite.
e2e/scenario_test.go	Change secure TLS bootstrapping failure setup to use invalid user-assigned identity.
e2e/config/azure.go	Switch to Azure CLI credential for ARM clients.
.pipelines/templates/e2e-template.yaml	Run E2E scripts via `AzureCLI@2` task.
.pipelines/templates/.builder-release-template.yaml	Wrap builder steps with `AzureCLI@2`.
.pipelines/templates/.builder-release-template-windows.yaml	Wrap Windows builder steps with `AzureCLI@2` and tweak conditions.
.pipelines/templates/.build-and-test-windows-vhds-template.yaml	Run cleanup via `AzureCLI@2`.
.pipelines/scripts/windows_build_vhd.sh	Remove explicit `make ... az-login` invocation.
.pipelines/scripts/windows-sub-cleanup.sh	Remove explicit `make ... az-login` invocation.
.pipelines/scripts/e2e_run.sh	Remove managed identity login step; rely on Azure CLI session.
.pipelines/.vsts-vhd-builder-release.yaml	Disable MarinerV2/AzureLinuxV2 builds by default.
.pipelines/.vsts-vhd-builder-pr-windows.yaml	Run windows sub cleanup via `AzureCLI@2`.
.pipelines/.vsts-garabge-collection.yaml	Run GC script via `AzureCLI@2`.
.github/workflows/pr-lint.yaml	Trigger PR lint workflow on synchronize events.

parts/linux/cloud-init/artifacts/disk_queue.service

parts/linux/cloud-init/artifacts/disk_queue.sh

packer.mk

e2e/config/azure.go

pkg/agent/datamodel/osimageconfig.go

parts/linux/cloud-init/artifacts/cse_config.sh

Copilot

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 3 comments.

staging/cse/windows/kubernetesfunc.ps1

Co-authored-by: Copilot <[email protected]>

Copilot

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 3 comments.

Copilot · 2026-02-10T21:07:25Z

staging/cse/windows/kubernetesfunc.ps1

+    $lastExceptionMessage = ""
+    if ($LastException -ne $null) {
+        if ($LastException.Exception -ne $null -and -not [string]::IsNullOrEmpty($LastException.Exception.Message)) {
+            $lastExceptionMessage = $LastException.Exception.Message
+        } else {


$LastException is assigned string values earlier ($_.Exception.ToString() / "$_"), but here it's treated like an exception object ($LastException.Exception.Message). As a result, the .Exception.Message branch will never be used and you may lose useful exception details. Store the exception object consistently (e.g., $_.Exception) and then derive the final single-line message from its .Message/.ToString().

Copilot · 2026-02-10T21:07:26Z

staging/cse/windows/kubernetesfunc.ps1

+        $lastExceptionMessage = $lastExceptionMessage -replace "(`r|`n)+", " "
+    }
+
+    Set-ExitCode -ExitCode $global:WINDOWS_CSE_ERROR_CHECK_API_SERVER_CONNECTIVITY -ErrorMessage "Failed to connect to API server $MasterIP after $retryCount retries. Last exception: $lastExceptionMessage"


If $LastException is never set (e.g., failures that don't throw), the final error message will still include Last exception: with an empty value, which makes the message noisier. Consider only appending the "Last exception" suffix when $lastExceptionMessage is non-empty.

Suggested change

Set-ExitCode -ExitCode $global:WINDOWS_CSE_ERROR_CHECK_API_SERVER_CONNECTIVITY -ErrorMessage "Failed to connect to API server $MasterIP after $retryCount retries. Last exception: $lastExceptionMessage"

$baseErrorMessage = "Failed to connect to API server $MasterIP after $retryCount retries."

$errorMessage = $baseErrorMessage

if (-not [string]::IsNullOrEmpty($lastExceptionMessage)) {

$errorMessage = "$baseErrorMessage Last exception: $lastExceptionMessage"

}

Set-ExitCode -ExitCode $global:WINDOWS_CSE_ERROR_CHECK_API_SERVER_CONNECTIVITY -ErrorMessage $errorMessage

Copilot · 2026-02-10T21:07:26Z

staging/cse/windows/kubernetesfunc.ps1

            $tcpClient.Close()
        } catch [System.AggregateException] {
-            Write-Log "Retry ${retryString}: Failed to connect to API server $MasterIP. AggregateException: " + $_.Exception.ToString()
+            Logs-To-Event -TaskName "AKS.WindowsCSE.CheckAPIServerConnectivity" -TaskMessage "Retry ${retryString}: Failed to connect to API server $MasterIP. AggregateException: " + $_.Exception.ToString()


Logs-To-Event -TaskMessage "..." + $_.Exception.ToString() is likely to be parsed in argument mode as multiple arguments ("...", '+', and the exception string), which can break parameter binding at runtime. Wrap the concatenation in parentheses or use a single interpolated string/subexpression so -TaskMessage receives one string value.

Suggested change

Logs-To-Event -TaskName "AKS.WindowsCSE.CheckAPIServerConnectivity" -TaskMessage "Retry ${retryString}: Failed to connect to API server $MasterIP. AggregateException: " + $_.Exception.ToString()

Logs-To-Event -TaskName "AKS.WindowsCSE.CheckAPIServerConnectivity" -TaskMessage "Retry ${retryString}: Failed to connect to API server $MasterIP. AggregateException: $($_.Exception.ToString())"

Copilot AI review requested due to automatic review settings February 9, 2026 02:42

timmy-wright requested review from AbelHu, Devinwong, YaoC, awesomenix, cameronmeissner, djsly, ganeshkumarashok, juan-lee, junjiezhang1997, lilypan26, mxj220, pdamianov-dev, phealy, r2k1, yagmurbaydogan, yewmsft and zachary-bailey as code owners February 9, 2026 02:42

better error

d426ca1

timmy-wright force-pushed the timmy/better-error branch from cbe6b64 to d426ca1 Compare February 9, 2026 02:43

timmy-wright temporarily deployed to test February 9, 2026 02:43 — with GitHub Actions Inactive

Copilot AI reviewed Feb 9, 2026

View reviewed changes

log to event

c55fcd3

timmy-wright temporarily deployed to test February 9, 2026 03:45 — with GitHub Actions Inactive

better last exception

d1b6d85

Copilot AI review requested due to automatic review settings February 9, 2026 03:48

timmy-wright temporarily deployed to test February 9, 2026 03:48 — with GitHub Actions Inactive

Copilot started reviewing on behalf of timmy-wright February 9, 2026 03:48 View session

timmy-wright changed the title ~~Timmy/better error~~ fix: better error message in windows CSE when API server can't be contacted Feb 9, 2026

timmy-wright added the windows label Feb 9, 2026

Copilot AI reviewed Feb 9, 2026

View reviewed changes

staging/cse/windows/kubernetesfunc.ps1 Show resolved Hide resolved

staging/cse/windows/kubernetesfunc.ps1 Outdated Show resolved Hide resolved

staging/cse/windows/kubernetesfunc.ps1 Show resolved Hide resolved

djsly approved these changes Feb 10, 2026

View reviewed changes

Update staging/cse/windows/kubernetesfunc.ps1

da4cc14

Co-authored-by: Copilot <[email protected]>

Copilot AI review requested due to automatic review settings February 10, 2026 21:03

timmy-wright temporarily deployed to test February 10, 2026 21:03 — with GitHub Actions Inactive

Copilot started reviewing on behalf of timmy-wright February 10, 2026 21:03 View session

Copilot AI reviewed Feb 10, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix: better error message in windows CSE when API server can't be contacted #7828

fix: better error message in windows CSE when API server can't be contacted #7828

Uh oh!

timmy-wright commented Feb 9, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Feb 10, 2026

Uh oh!

Copilot AI Feb 10, 2026

Uh oh!

Copilot AI Feb 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

-    Set-ExitCode -ExitCode $global:WINDOWS_CSE_ERROR_CHECK_API_SERVER_CONNECTIVITY -ErrorMessage "Failed to connect to API server $MasterIP after $retryCount retries. Last exception: $lastExceptionMessage"
+    $baseErrorMessage = "Failed to connect to API server $MasterIP after $retryCount retries."
+    $errorMessage = $baseErrorMessage
+    if (-not [string]::IsNullOrEmpty($lastExceptionMessage)) {
+        $errorMessage = "$baseErrorMessage Last exception: $lastExceptionMessage"
+    }
+    Set-ExitCode -ExitCode $global:WINDOWS_CSE_ERROR_CHECK_API_SERVER_CONNECTIVITY -ErrorMessage $errorMessage

	Logs-To-Event -TaskName "AKS.WindowsCSE.CheckAPIServerConnectivity" -TaskMessage "Retry ${retryString}: Failed to connect to API server $MasterIP. AggregateException: " + $_.Exception.ToString()
	Logs-To-Event -TaskName "AKS.WindowsCSE.CheckAPIServerConnectivity" -TaskMessage "Retry ${retryString}: Failed to connect to API server $MasterIP. AggregateException: $($_.Exception.ToString())"

fix: better error message in windows CSE when API server can't be contacted #7828

Are you sure you want to change the base?

fix: better error message in windows CSE when API server can't be contacted #7828

Uh oh!

Conversation

timmy-wright commented Feb 9, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 10, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants