NCP fails to delete the project NSG on namespace deletion during NCP downtime in NSX-T

Products

• VMware NSX

Issue/Introduction

• NCP fails to delete the project NSG on namespace deletion during NCP downtime.
• If a namespace with network policies is deleted when NCP is down, the expectation is that all namespace related resources are deleted from NSX. However in this case, a single stale NSGroup belonging to the namespace is left behind.

Environment

• VMware NSX-T Data Center 2.x
• VMware NSX-T Data Center

Resolution

This issue is resolved in VMware NSX-T Data Center 2.2.0.

Workaround:
Delete the stale NSGroup from NSX manually. The NSGroup can be identified with the following name:

proj-<cluster-name>-<namespace-name>.