VIDB or VCFA Deployment Failure – Docker: Error Response from Daemon

Products

• VCF Automation

Issue/Introduction

VIDB/VCF-A deployment may fail under certain conditions.

When deploying via Fleet Management you may receive the error LCMVSPHERECONFIG1000095 and the /var/log/vrlcm/vmsp_bootstrap_xxxxx.log may contain the following message.

Unable to enable DNAT rule: iptables --wait -t nat -A DOCKER -p tcp -d 0/0 --dport 5000 -j DNAT --to-destination 172.##.#.#:5000 ! -i docker0:

Environment

VCF Identity Broker

VCF Automation 9.0

Cause

An edge case may occur where Docker needs to be restarted to properly reload IPTables rules.

In such cases, Docker encounters an error while updating an IPTables rule, displaying:

iptables: No chain/target/match by that name.

Resolution

To resolve the issue, either reboot the Fleet Management appliance or SSH into the VM and, with root or sudo privileges, run the following command:

systemctl restart docker

Reboot the Fleet Management appliance if the issue persists after restarting docker.