Creating of kubernetes workload cluster from vRA fails

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

When trying to create a new K8s workload cluster from Automation and it fails with following error.

{"kind":"Status","apiVersion":"v1","metadata":{},"status":"Failure","message":"admission webhook \"default.validating.tanzukubernetescluster.run.tanzu.vmware.com\" denied the request: spec.settings.network.pods.cidrBlocks intersects with the network range of the container ip block in network provider's configuration","reason":"spec.settings.network.pods.cidrBlocks intersects with the network range of the container ip block in network provider's configuration","code":400}

Environment

VMware Aria Automation 8.18.1

Cause

Overlap between pod and container CIDR will create deployment failure. This overlap creates a conflict during IP allocation, which is detected by the Kubernetes admission webhook, leading to the denial of the cluster creation request.

Resolution

Resolution:

To resolve this issue, you must explicitly define non-overlapping network ranges for Pods and Services within the Kubernetes cluster plan in VMware Aria Automation.

Open vRA Cloud Assembly

1. Log in to vRA.

2. Go to Cloud Assembly.

3. Navigate to Infrastructure > Kubernetes > Cluster Plans.

4. Either create a new Cluster Plan or edit an existing one.

5. Set Custom networking in YAML in Cluster Plan.

You need to add the customNetwork section under the cluster configuration. This is where you Add pod and services CIDR.