Error: "ReconcileFailed" occurs when configuring vSphere Supervisor Services

Products

• VMware vSphere Kubernetes Service

Issue/Introduction

• Attempts to install vSphere Supervisor Services generate the following warning:

Reason: ReconcileFailed. Message: vendir: Error: Syncing directory '0': Syncing directory '.' with imgpkgBundle contents: Fetching image: Error while preparing a transport to talk with the registry: Unable to create round tripper: Get "https://projects.packages.broadcom.com/v2/'": dial tcp <IP>:443: i/o timeout.

• From a Supervisor node, using openssl to test connectivity to projects.packages.broadcom.com:443 fails to return a result:

openssl s_client -connect projects.packages.broadcom.com:443

• The imgfetcher guest log records errors similar to the following:

level=info msg="trying next host" error="failed to do request: Head \"[https://projects.packages.broadcom.com/v2/vsphere/iaas/lci-service/9.0.1/lci-service/blobs/sha256:##################################": dial tcp <IP>:443: connect: network is unreachable" host=projects.packages.broadcom.com

Environment

VMware vSphere Kubernetes Service

Cause

The Supervisor nodes lack the necessary connection to projects.packages.broadcom.com over port 443, which triggers the ReconcileFailed warning. This connectivity issue typically stems from network component restrictions, such as an incorrectly configured firewall or proxy blocking the imgfetcher request.

Note: The FQDN projects.packages.broadcom.com resolves to multiple IP addresses.

Resolution

Configure the network component (such as a firewall or proxy) to allow traffic from the Supervisor nodes (Management and Workload networks) to projects.packages.broadcom.com over port 443.

• Test from the management network:
  curl -kv --interface eth0 https://projects.packages.broadcom.com:443
   
• Test from the workload network:
  curl -kv --interface eth1 https://projects.packages.broadcom.com:443

Additional Information

For more information, see Networking Requirements for downloading VKS Supervisor Services