Workload Domain Deletion fails due to System-Defined NSX Uplink Profile

Products

• VMware SDDC Manager
• VMware Cloud Foundation

Issue/Introduction

Workload Domain (WLD) deletion initiated from SDDC Manager fails.
The domainmanager.log shows errors like UPLINK_HOSTSWITCH_PROFILE_DELETION_FAILED and Profile ... is system-defined and cannot be modified or deleted.

[TIMESTAMP] ERROR [vcf_dm,[TRACE_ID],[SESSION_ID]] [c.v.e.s.o.model.error.ErrorFactory,dm-exec-17] [ID] UPLINK_HOSTSWITCH_PROFILE_DELETION_FAILED Deletion of Uplink Host Switch Profile(s) - [nsx-default-uplink-hostswitch-profile] in the NSX - ####.####.####
...
... error_message=Profile with id /infra/host-switch-profiles/[UUID] is system-defined and cannot be modified or deleted. ...

Environment

VMware Cloud Foundation 5.x

Cause

This issue occurs when the Workload Domain is created using the NSX system-defined nsx-default-uplink-hostswitch-profile.

Resolution

1. Retrieve the workflow.json for the failed workflow by following the steps outlined in Broadcom KB314620.

2. Edit the workflow.json file. Locate the "RemoveNsxtUplinkProfiles" entry within the wfExecPlan section and change its value from "EXECUTE" to "SKIP".

      "RemoveVxRailViEngine____4__RemoveNsx____5__RemoveNsxt____0__wfExecPlan" : [
         "com.vmware.vcf.common.fsm.plugins.nsxt.helpers.DeleteWfExecPlan",
         {
            "actions" : [
               "java.util.LinkedHashMap",
               {
                  "DeleteComputeCollectionAction" : "EXECUTE",
                  "DeleteComputeManagerAction" : "EXECUTE",
                  "DeleteNsxtVMAction" : "EXECUTE",
                  "DeleteTransportNodeProfileAction" : "EXECUTE",
                  "DeleteTransportNodes" : "EXECUTE",
                  "DeleteVmsInClusterAction" : "SKIP",
                  "FetchAz2UplinkProfileIdAction" : "SKIP",
                  "RemoveAz2UplinkProfilesAction" : "SKIP",
                  "RemoveNsxtAntiAffinityRuleAction" : "EXECUTE",
                  "RemoveNsxtCredentials" : "EXECUTE",
                  "RemoveNsxtIpPoolsAction" : "SKIP",
                  "RemoveNsxtSegmentsAction" : "SKIP",
                  "RemoveNsxtSubClustersAction" : "SKIP",
                  "RemoveNsxtSubConfigsAction" : "SKIP",
                  "RemoveNsxtUplinkProfiles" : "EXECUTE", <---------------- change to "SKIP"
                  "RemoveTransportZones" : "EXECUTE",
                  "UpdateFirewallExclusionMemberListAction" : "EXECUTE",
                  "ValidateServiceDeploymentsAction" : "EXECUTE"
               }
            ]
         }
      ]

3. Update the SDDC Manager workflow with the modified workflow.json by following Step 8 of Broadcom KB314620

4. Restart the failed task from the SDDC Manager UI.

Additional Information

Do not use NSX system-defined name (ex. Transport Zone Name, NSX Uplink Profile Name) when creating Workload Domain.
Even if a Workload Domain deployment succeeds using system-defined parameters (potentially after workflow.json modifications), subsequent Workload Domain deletion will likely fail due to NSX's protection of these system-defined objects.