SDDC async patch tool enable fails with error "Got HTTP error [403] while downloading async patch Input Spec [https://depot.vmware.com/PROD2/evo/vmware/asyncpatchspecs/vi/bundle.spec]

Products

• VMware SDDC Manager

Issue/Introduction

Disabling async patch tool will succeed but re-enabling async patch using below command fails with error:

./vcf-async-patch-tool -i '/home/vcf/asyncPatchTool/bundle-#.spec' --du <vcf-account-username> --depotPassword '' " --pdu <vcf-account-username> --pdp '' <password>" --rootUserPassword  ''<root-password>"  --sddcSSOUser <sso-username>  --sddcSSOPassword  ''<sso-password>" --sddcSSHUser vcf --sddcSSHPassword ''<password>" --sku VCF_ON_VXRAIL --it ONLINE --<proxy-server:port>

async_patch_tool.log:
####-##-#####:##:##.###+#### [main] DEBUG [com.vmware.evo.sddc.lcm.bundle.download.depot.DepotDownloader]
                      Got response: 403 Forbidden HTTP/1.1
####-##-#####:##:##.###+#### [main] ERROR [com.vmware.evo.sddc.lcm.bundle.download.depot.DepotDownloader]
                      Error getting file size, got response: 403 Forbidden HTTP/1.1
####-##-#####:##:##.###+#### [main] ERROR [com.vmware.evo.sddc.lcm.bundle.download.depot.DepotBundleDownloadServiceImpl]
                      Got Http error[403] while downloading Async Patch Input Spec [https://depot.vmware.com/PROD2/evo/vmw/asyncPatchSpecs/v1/bundle-#.spec]
####-##-#####:##:##.###+#### [main] ERROR [com.vmware.evo.sddc.lcm.tools.asyncpatch.AsyncPatchInputSpecUtil]
                      Instance type was specified online, but there were connection failures.

Attaching input spec file following KB https://knowledge.broadcom.com/external/article?legacyId=88287 also fails with same error.

The latest depot settings are changed as per KB https://knowledge.broadcom.com/external/article/390122 still the enable async patch tool task fails with same error.

The desired bundle will not be visible on SDDC manager ui for patch

 

Environment

SDDC 4.5.x

Resolution

Follow below steps to fix the issue:

1. Take snapshot of SDDC manager VM

2. Delete the AP tool output directory: /nfs/vmware/vcf/nfs-mount/apToolBundles 

3. Move the inputspec file to /home/vcf/asyncPatchtool/ 

4. Retry the Patch enablement operation using the APT with the command 

For Online and Offline command refer to the KB: https://knowledge.broadcom.com/external/article?articleNumber=327206

5. Change the permission to

chmod -R 755 /home/vcf/asyncPatchTool && chown -R vcf:vcf /home/vcf/asyncPatchTool

6. cd to /home/vcf/asyncPatchTool/bin

7. Run the command

./vcf-async-patch-tool -i '/home/vcf/asyncPatchTool/bundle-#.spec' --du <vcf-account-username> --depotPassword '' " --pdu <vcf-account-username> --pdp '' <password>" --rootUserPassword  ''<root-password>"  --sddcSSOUser <sso-username>  --sddcSSOPassword  ''<sso-password>" --sddcSSHUser vcf --sddcSSHPassword ''<password>" --sku VCF_ON_VXRAIL --it ONLINE --<proxy-server:port>

Now, after enabling async patch tool successfully,  the desired bundle will show as available for update on SDDC manager ui