During an upgrade or recreation of a cluster node, the EXTERNAL-IP is not set for the new node.
The node has not been initialised with the cloud provider (vCenter)
Check connectivity from new node to vCenter FQDN
curl -v https://<vCenter FQDN>
Check the vCentre thumbprint is valid. Review the CPI logs and the vCenter thumbprint.
kubectl logs -n kube-system <vsphere-cloud-controller-manager pod>
echo |openssl s_client -connect <vCenter FQDN>:443 2>/dev/null | openssl x509 -noout -fingerprint -sha1
Refer to KB to change vCenter thumbprint on TKG