[Bug / Issue]: Error while running Configure-AksWorkloadCluster.ps1 on LocalBox VM

[sagarnl]

Jumpstart Solution

• Jumpstart ArcBox
• Jumpstart LocalBox
• Jumpstart Agora
• A specific Jumpstart scenario
• Jumpstart Drops
• Something else

What happened?

Provisioning the AKSArc cluster. This operation might take a while...
2025-05-07 12:55:35.940628+00:00
(ResourceDeploymentFailure) (/subscriptions/cdd39586-95df-4218-a8a5-cfe8eda16de8/resourceGroups/rg-itnetic-hybrid-deployments/providers/Microsoft.Kubernetes/connectedClusters/localbox-aks/providers/Microsoft.HybridContainerService/ProvisionedClusterInstances/default) The resource write operation failed to complete successfully, because it reached terminal provisioning state 'Failed'.
(BadRequest) admission webhook "vhybridakscluster.kb.io" denied the request: {
"result": "Failed",
"validationChecks": [
{
"name": "K8sVersionValidation",
"message": "Kubernetes version 1.29.4 is not ready for use on Linux. Please go to https://aka.ms/aksarccheckk8sversions for details of how to check the readiness of Kubernetes versions.",
"recommendation": "Please check https://aka.ms/AKSArcValidationErrors/K8sVersionValidation for recommendations"
}
]
}

We need a URL from you

https://jumpstart.azure.com/azure_jumpstart_localbox/AKS

Deployment Method

PowerShell

Relevant log output.

Code of Conduct and Licensing

• I agree to follow this project's Code of Conduct and Licensing terms.

[ldabas-msft]

Hi @sagarnl , this occurs in Azure Local images on version <2503. The kubernetesVersions/default ARM resource (returned by the az aksarc get-versions command or the equivalent API call that Portal uses) is out of the sync with the on-prem K8s versions supported by the aks extension on the host.

If you're running a Azure Local version <2503, I would recommend updating and retrying.

If that does not work please try and mitigate the issue:

$subscription = <subscription_id>
$cl_id = <custom_location_id>

az login --use-device-code
az account set -s $subscription
$token = $(az account get-access-token --query accessToken)
$url = "https://management.azure.com${cl_id}/providers/Microsoft.HybridContainerService/kubernetesVersions/default?api-version=2024-01-01"

# Get the kubernetes version azure resource
az rest --headers "Authorization=Bearer $token" "Content-Type=application/json;charset=utf-8" --uri $url --method GET

# Delete the kubernetes version azure resource
az rest --headers "Authorization=Bearer $token" "Content-Type=application/json;charset=utf-8" --uri $url --method DELETE

# Get the kubernetes version using CLI (it will automatically create the kubernetes version azure resource)
az aksarc get-versions --custom-location $cl_id