"Check for data inconsistencies in DB upgrade" NSX precheck error for VCF 9 upgrades - "MP Objects found in DB"
search cancel

"Check for data inconsistencies in DB upgrade" NSX precheck error for VCF 9 upgrades - "MP Objects found in DB"

book

Article ID: 385606

calendar_today

Updated On:

Products

VMware NSX

Issue/Introduction

  • During upgrade to VCF / NSX 9 prechecks will fail with errors similar to the below observed in NSX or SDDC:

    UC MP - Check for data inconsistencies in DB 

Found data inconsistencies: MP Objects found in DB before promotion for tables : <table_name, table_name, etc>, please perform Manager to Policy promotion or delete the MP objects and retry the prechecks. Delete any Bridge firewall section/rule if they exist and then retry the prechecks. For more details, please refer to - https://knowledge.broadcom.com/external/article/385606

Environment

VMware VCF 9

Cause

MP Logical APIs and the MP to Policy promotion tool have been removed in VCF 9.0. Prior to upgrade any Manager objects must be either removed or migrated to Policy objects. This precheck purposefully blocks the upgrade to allow the resolution steps to be followed.

Resolution

Any Manager objects must be promoted to Policy and Bridge Firewall rules must be removed.

Bridge Firewall

  1. System > General Settings > User Interface, Edit the User Interface Mode Toggle
  2. Set "Toggle Visibility" to "Visible to All Users"
  3. Set "Default Mode" to Policy
  4. Click Save the page will refresh automatically
  5. Select the Security tab, in the top righthand corner, select Manager instead of Policy
  6. Click Bridge Firewall, if configuration exists here, remove it. 

Manager Objects

Prerequisites

The migration coordinator service must be first started by running the following admin cli command on any one node of Manager cluster nodes.

 start service migration-coordinator

Remediation Steps

  1. On the NSX UI navigate to System > General Settings > Manager Objects Promotion
  2. Click Start Objects Promotion.
    The system displays summary of manager objects.
  3. Click Continue.
    The system starts the promotion and displays the progress and status of promotion. If any object fails to get promoted, the system displays an error. You can click Skip and Continue to continue the promotion, or you can click Cancel to stop the promotion.
  4. Once the promotion is completed successfully, the system displays the Manager to Policy Objects Promotion page.
  5. Rerun the Upgrade prechecks

 

Alternatively the promotion of Manager to Policy objects can be performed via API:

  1. Get the total count of pure MP objects and different types of pure MP objects that are eligible for promotion.

    Request
    GET https://<nsx-manager-ip>/api/v1/migration/mp-to-policy/stats?pre_promotion=true
    Response Collapse source
    {
        "current_resource_type_in_promotion": "NONE",
        "migration_stats": [
            {
                "resource_type": "LOGICAL_SWITCH",
                "promotion_status": "NOT_STARTED",
                "total_count": "2",
                "promoted_objects_count": "0",
                "failed_objects_count": "0"
            }
        ],
        "total_count": 2
    }

  2. Start Objects Promotion 

    Request
    POST https://<nsx-manager-ip>/api/v1/migration/mp-to-policy/     
     
    {
        "skip_failed_resources": false,
        "mode": "GENERIC"
    }

       

  3. Check the status summary of the migration

    Request
    GET https://<nsx-manager-ip>/api/v1/migration/status-summary
    Response Collapse source
    {
        "overall_migration_status": "IN_PROGRESS",
        "component_status": [
            {
                "status": "SUCCESS",
                "percent_complete": 100.0,
                "details": "Config translation completed",
                "component_type": "MP_TO_POLICY_PRECHECK",
                "can_skip": true
            },
            {
                "status": "NOT_STARTED",
                "percent_complete": 0.0,
                "component_type": "MP_TO_POLICY_MIGRATION",
                "can_skip": false
            }
        ]
    }

  4. Check the migration stats of each object

    Request
    GET https://<nsx-manager-ip>/api/v1/migration/mp-to-policy/stats
    Response Collapse source
    {
        "current_resource_type_in_promotion": "NONE",
        "migration_stats": [
            {
                "resource_type": "LOGICAL_SWITCH",
                "promotion_status": "DONE",
                "total_count": "2",
                "promoted_objects_count": "2",
                "failed_objects_count": "0"
            }
        ],
        "total_count": 2
    }

  5. History of the successful completed promotion can be checked using history

    Request
    GET https://<nsx-manager-ip>/api/v1/migration/mp-policy-promotion/history
    Response Collapse source
    {
        "results": [
            {
                "date_time": "1736405353487",
                "status": "SUCCESS"
            },
            {
                "date_time": "1736405347924",
                "status": "INITIATED"
            },
            {
                "date_time": "1736326570440",
                "status": "SUCCESS"
            },
            {
                "date_time": "1736326565370",
                "status": "INITIATED"
            },
            {
                "date_time": "1736322105827",
                "status": "SUCCESS"
            },
            {
                "date_time": "1736322098588",
                "status": "INITIATED"
            }
        ]
    }

Additional Information

Related Issues:

Manager to Policy promotion fails with error: Promotion cancellation has resulted in inconsistent system state

MP2Policy promotion fails with mixed mode configuration of MP virtual server and Policy certificates

Error: Resource type: TIER1 is dependent on resource type: TIER0 during NSX Manager to Policy API migration in EAR

Promotion of Manager objects to Policy objects in NSX-T fails: Either use another path or wait for the purge cycle (max 5 minutes) for permanent removal of the object

MP2P Migration INITIATE Call Duration Expected Behavior

NSX manager to policy migration is available for some LogicalPorts even though they already have an associated segment

"Migration not Supported for DFW_Section" error encountered when attempting to promote objects from NSX Management Profile

Application deployment failing intermittently after NSX Manager to Policy Mode promotion

Powered by Wolken Software