DNS resolution fails for a local top level domain in VMware Cloud Director Container Service Extension

Products

• VMware Cloud Director

Issue/Introduction

• Errors similar to the following are seen in the Ephemeral VM when attempting to deploy a new cluster with VMware Cloud Director Container Service Extension:
  
  ... failed to authenticate using refresh token
2025-04-25T09:58:35.862Z        ERROR   Reconciler error        {"controller": "vcdcluster", "controllerGroup": "infrastructure.cluster.x-k8s.io", "controllerKind": "VCDCluster", "VCDCluster": {"name":"<cluster name>","namespace":"<cluster namespace>"}, "namespace": "<cluster namespace>", "name": "<cluster name>", "reconcileID": "########-####-####-####-############", "error": "Error creating VCD client to reconcile Cluster [<cluster name>] infrastructure: error creating VCD client from secrets to reconcile Cluster [<cluster name>] infrastructure: [unable to get swagger client from secrets: [unable to get bearer token from secrets: [failed to set authorization header: [error getting bearer token: error authorizing service account: Post \"https://<vCD FQDN>/oauth/tenant/ProviderOrg/token\": dial tcp: lookup <vCD FQDN> on xx.xx.xx.xx:53: server misbehaving]]]]", ...
  
  
• The DNS server is configured correctly on the network and the Ephemeral VM can successfully communicate with the DNS server to perform name resolution.
• The fully qualified domain name for the VMware Cloud Director address uses a .local top level domain, as in the following example:
  
  vcd.sample.local

Environment

VMware Cloud Director Container Service Extension 4.2.x

Cause

The .local top level domain is a special-use domain name and can require additional consideration to provide name resolution.

Resolution

Configure the DNS suffix on the routed org VDC network to include the internal domain (e.g., sample.local, as in the example above).

Additional Information

For information regarding the configuration requirements, please refer to the following:

VMware Cloud Director Container Service Extension 4.2: Before you begin

For additional details regarding the DNS configuration on the routed network, please refer to the following:

Add a Routed Organization Virtual Data Center Network in the VMware Cloud Director Tenant Portal