Enable Continuous Delivery for a TKGs Cluster fails with "HelmRelease/cert-manager/cert-manager dry-run failed: failed to get API group resources: unable to retrieve the complete list of server APIs: helm.toolkit.fluxcd.io/v2:"

Products

• VMware vSphere 7.0 with Tanzu

Issue/Introduction

Enable Continuous Delivery for the Guest Cluster errors out as below.

The Guest cluster status in TMC shows "Reconciliation failed".

Cause

1. The helm.toolkit.fluxcd.io/v2 API service is missing inside the cluster. To validate the same, run the command "kubectl get apiservice"

2. The helm-controller pod would be missing.

3. Not all the fluxCD components (fluxCD namespaces tanzu-fluxcd-packageinstalls, tanzu-source-controller, tanzu-kustomize-controller and tanzu-continuousdelivery-resources) would be installed inside the affected guest cluster. The same can be validated using "kubectl get ns"

Resolution

1. Use Fluxcli to install Helm Controller

flux install --components=source-controller,kustomize-controller,helm-controller

 

2. Validate that the HelmRelease CRD is installed

kubectl get crds | grep helmreleases.helm.toolkit.fluxcd.io

 

3. Check the API resources now in the Guest cluster to ensure that the helm.toolkit.fluxcd.io/v2 API group is present.

To validate the same, run the command "kubectl get apiservice"