VMware is aware of this issue. There is a workaround..
Workaround:
To work around this issue:
- Open SSH session to the affected node and login using root credentials.
- Check the status of iptables.service using command:
systemctl status iptables.service
Note: Service will be in a stopped or failed state.
- Start the iptables.service on all the nodes using below command:
systemctl start iptables.service
- Retry the upgrade.