vSphere 7 with Tanzu 7.0 U3 fails to configure when using NSX Advanced Load Balancer

Products

• VMware vSphere ESXi
• VMware vSphere with Tanzu

Issue/Introduction

Symptoms:

• During an installation of vSphere 7 with Tanzu 7.0 U3 or during an upgrade from an earlier version of vSphere 7 with Tanzu to the 7.0 U3 version, the process hangs in a configuring state.
• NSX Advanced Load Balancer (NSX ALB) is used for providing load balancer services.
• You see messages similar to the following in the /var/log/wcp/wcpsvc.log file on the VCSA VM:

The control plane VM 421db583d532b2132ea35c6e43811b68 was unable to authenticate to the load balancer (Avi - https://nsxalb-cluster.corp.tanzu:443/api/cluster) with the username 'admin' and the supplied password. Validate the Supervisor cluster load balancer's authentication configuration.

• You are able to login to NSX Advanced Load Balancer with the same username and password supplied during the configuration of vSphere 7 with Tanzu.

Environment

VMware NSX Advanced Load Balancer 20.1.x
VMware vSphere 7.0.x

Resolution

This is a known issue affecting vSphere 7 with Tanzu 7.0 U3 when using NSX Advanced Load Balancer for load balancer services. There is currently no resolution.

Workaround:
To workaround this behavior, enable basic authentication in NSX ALB.

The Allow Basic Authentication option can be set on the Administration > Settings > Access Settings page in the NSX ALB UI.