Baremetal Controller Connectivity Degraded

Products

• VMware vDefend Firewall with Advanced Threat Prevention
• VMware vDefend Firewall
• SSP

Issue/Introduction

An alarm with the description "Baremetal Service - <controllerID> is degraded" is observed on the SSP UI

Environment

vDefend SSP >= 5.1

Cause

The alarm is raised when the Baremetal Controller detects that one or more of its core services (Database, Management Plane Adapter, or Bare Metal Server Controller) are degraded or unavailable. Common causes include VMware NSX connectivity issues, database connection failures, or internal service errors preventing normal operation.

Resolution

Steps to resolve:

1. Try restarting the StatefulSet. This should resolve any transient issues.

   1. Log in to the SSPI root shell.

   2. Run the following command to restart the StatefulSet:

      k rollout restart statefulset baremetal-controller -n nsxi-platform

   3. Wait for approximately 5 minutes, then check if the baremetal-controller pods have recovered:

      k get pods -n nsxi-platform | grep baremetal-controller

   4. Wait for around 20 minutes and verify if the alarm is automatically resolved

2. If the issue is not resolved, collect the SSP Support Bundle and raise a support ticket with Broadcom for further assistance.