During supervisor deployment, getting error as below.
We checked the ESXI /var/log/esxupdate.log
2025-03-13T06:56:56Z Er(11) esxupdate [52033598]: File "/lib64/python3.11/site-packages/vmware/esximage/Downloader.py", line 202, in _urlopen 2025-03-13T06:56:56Z Er(11) esxupdate [52033598]: return opener.open(url, timeout=self.options['timeout'])
2025-03-13T06:56:56Z Er(11) esxupdate [52033598]: File "/lib64/python3.11/urllib/request.py", line 519, in open 2025-03-13T06:56:56Z Er(11) esxupdate [52033598]: File "/lib64/python3.11/urllib/request.py", line 536, in _open 2025-03-13T06:56:56Z Er(11) esxupdate [52033598]: File "/lib64/python3.11/urllib/request.py", line 496, in _call_chain 2025-03-13T06:56:56Z Er(11) esxupdate [52033598]: File "/lib64/python3.11/urllib/request.py", line 1391, in https_open 2025-03-13T06:56:56Z Er(11) esxupdate [52033598]: File "/lib64/python3.11/urllib/request.py", line 1351, in do_open 2025-03-13T06:56:56Z Er(11) esxupdate [52033598]: urllib.error.URLError: <urlopen error timed out>
2025-03-13T06:56:56Z Er (11) esxupdate [52033598]: During handling of the above exception, another exception occurred: 2025-03-13T06:56:56Z Er(11) esxupdate [52033598]: Traceback (most recent call last):
2025-03-13T06:56:56Z Er (11) esxupdate [52033598]: File "/lib64/python3.11/site-packages/vmware/esximage/Transaction.py", line 957, in _getVibsFromUrls 2025-03-13T06:56:56Z Er(11) esxupdate [52033598]: with d.Open() as rObj:
2025-03-13T06:56:56Z Er(11) esxupdate [52033598]: File "/lib64/python3.11/site-packages/vmware/esximage/Downloader.py", line 589, in Open 2025-03-13T06:56:56Z Er(11) esxupdate [52033598]: return self._openfromurl()
2025-03-13T06:56:56Z Er(11) esxupdate[52033598]: File "/lib64/python3.11/site-packages/vmware/esximage/Downloader.py", line 489, in _openfromurl 2025-03-13T06:56:56Z Er(11) esxupdate [52033598]: raise Downloader Error(self.url, self.local, str(e))
2025-03-13T06:56:56Z Er (11) esxupdate [52033598]: File "/usr/sbin/esxupdate", line 378, in main
2025-03-13T06:56:56Z Er(11) esxupdate [52033598]: esximage. Downloader. Downloader Error: ('https://VCSA-FQDN:443/wcp/spherelet/k8s-1.28/spherelet.vib', '', '<urlopen error timed out>')
2025-03-13T06:56:56Z Er(11) esxupdate [52033598]: During handling of the above exception, another exception occurred: 2025-03-13T06:56:56Z Er (11) esxupdate [52033598]: Traceback (most recent call last):
2025-03-13T06:56:56Z Er(11) esxupdate [52033598]: cmd.Run()
VMware vSphere with Tanzu
The firewall configurations within the vCenter Server Appliance (VCSA) environment were set, leading to the failure of deploying the spherelet VIB on the ESXi host over port 443 during the Supervisor cluster configuration.
This issue arises because the spherelet VIB installation requires uninterrupted communication between the VCSA and the ESXi host over port 443. If firewall rules block this port, the deployment process cannot complete successfully.
To resolve this, ensure that port 443 is open and properly configured in the firewall settings between the VCSA and the ESXi host.
ESXi SSH
> nc -z <destination-ip> <destination-port>
https://knowledge.broadcom.com/external/article/341078/troubleshooting-network-and-tcpudp-port.html
VC SSH
> curl -v telnet://<target ip address>:<desired port number>
https://knowledge.broadcom.com/external/article/316607/using-curl-to-test-port-connectivity-in.html
The connections should show success from both ESXI and VCSA.
VMware ports and protocols refer: https://ports.broadcom.com/home/Tanzu-Kubernetes-Grid+vSphere
ESXi port requirement: https://knowledge.broadcom.com/external/article/318895/port-requirements-for-vmware-vsphere-esx.html