Unable to remove NSX for Security only cluster with "Please update the group membership to remove the resource and try uninstalling again"
search cancel

Unable to remove NSX for Security only cluster with "Please update the group membership to remove the resource and try uninstalling again"

book

Article ID: 393657

calendar_today

Updated On:

Products

VMware NSX

Issue/Introduction

  • NSX Security only Cluster
  • No Process or Error reported when "REMOVE NSX" 
  • Logs from /var/log/proton/nsxapi.log

    YY-MM-DDTHHMMSS:  <NSX Manager>  NSX 277294 FABRIC [nsx@6876 comp="nsx-manager" level="WARNING" reqId="######-80a9-4c9e-####-######b" subcomp="manager" username="admin"] 9611 The resource TransportNode with ID ######-4c8f-40f8-#####-###### used by compute collection ######-4336-#### -######:domain-c8 is a member of a security group. Please update the group membership to remove the resource and try uninstalling again.


  • Transport Nodes are parts of vRNI Security Group from desired_state_manager.json

         "display_name": "vRNI-Node_Group_Profile_TN_######-4de8-9399-######",
         "id": "######-0f60-4620-b490-######8",
         "member_count": ##,
        "members": [
         ... ...
          {
            "op": "EQUALS",
            "resource_type": "NSGroupSimpleExpression",
            "target_property": "id",
            "target_resource": {
              "is_valid": true
            },
            "target_type": "TransportNode",
            "value": "######-4c8f-40f8-####-######"
           }

 

Environment

VMware NSX

Cause

Upon installing NSX security only on the cluster, all the transport nodes in the cluster get added to system created security groups.

Resolution

Delete the NSX Datasource from vRNI and then "REMOVE NSX" for security only cluster from NSX UI.