Intelligence capacity precheck API fails with Bad Request during Activation

Products

• VMware vDefend Firewall with Advanced Threat Prevention

Issue/Introduction

Error : Failed to invoke API on NAPP (NSX Application Platform). Please check logs on pre-check job pod for more information.

 

kubectl logs job/nsx-intelligence-precheck-jobs -c validate-capacity -n nsxi-platform
Found 4 pods, using pod/nsx-intelligence-precheck-jobs-w8qmk
/usr/lib/python3/dist-packages/urllib3/connectionpool.py:1020: InsecureRequestWarning: Unverified HTTPS request is being made to host 'cluster-api'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
  warnings.warn(
/usr/lib/python3/dist-packages/urllib3/connectionpool.py:1020: InsecureRequestWarning: Unverified HTTPS request is being made to host 'monitor'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
  warnings.warn(
/usr/lib/python3/dist-packages/urllib3/connectionpool.py:1020: InsecureRequestWarning: Unverified HTTPS request is being made to host 'cluster-api'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
  warnings.warn(
/usr/lib/python3/dist-packages/urllib3/connectionpool.py:1020: InsecureRequestWarning: Unverified HTTPS request is being made to host 'cluster-api'. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
  warnings.warn(
calling POST https://cluster-api:443/report/precheck {'id': 'capacity', 'name': 'feature.precheck.capacityName', 'desc': 'feature.precheck.capacityDesc', 'feature': 'intelligence', 'status': 'INPROGRESS', 'reason': ''}
REST OK
Calling Monitor service to get platform information
calling GET https://monitor:443/api/v1/platform/monitor/platform/status None
REST OK
Calling cluster-api to check if capacity exists to deploy feature
calling POST https://cluster-api:443/features/intelligence/capacity/validate {'remaining_cpu_percent': 25, 'remaining_memory_percent': 25}
calling POST https://cluster-api:443/report/precheck {'id': 'capacity', 'name': 'feature.precheck.capacityName', 'desc': 'feature.precheck.capacityDesc', 'feature': 'intelligence', 'status': 'FAILED', 'reason': 'feature.precheck.nappApiInvocationFailedReason'}
REST OK
REST FAILED: Internal Server Error
Traceback (most recent call last):
  File "/opt/vmware/nsxi/hombre/__main__.py", line 129, in <module>
    main()
  File "/opt/vmware/nsxi/hombre/__main__.py", line 113, in main
    capacity_plugin.check()
  File "/opt/vmware/nsxi/hombre/precheck/plugin_capacity.py", line 54, in check
    json_response = requests_wrapper.incluster_request('POST', url, data=req_data)
  File "/opt/vmware/nsxi/hombre/utils/requests_wrapper.py", line 56, in incluster_request
    return _invoke_requests(method=method, url=url, data=data,
  File "/opt/vmware/nsxi/hombre/utils/requests_wrapper.py", line 42, in _invoke_requests
    raise Exception("REST FAILED: {reason}"
Exception: REST FAILED: Internal Server Error

 

Environment

All NAPP versions before 4.2

Cause

The API endpoint is not available in the cluster-api pod, which is causing the error. The cluster-api pod is not compatible with the new API endpoint, resulting in the "Bad Request" error.

 

 

Resolution

Upgrade to 4.2 to fix this issue.