AKO Installation Using Helm Fails with Error "unauthorized: The client does not have permission for manifest"

Products

• VMware Avi Load Balancer

Issue/Introduction

While installing the AVI Kubernetes Operator (AKO) on a Tanzu workload cluster using Helm, the installation fails with the following error message.

response status code 403: unauthorized: The client does not have permission for manifest

This issue occurs when executing the command:

Command: helm show chart oci://projects.packages.broadcom.com/ako/helm-charts/ako --version 1.13.x

Error: failed to perform "FetchReference" on source: GET "https://projects.packages.broadcom.com/v2/ako/helm-charts/ako/manifests/1.13.4": response status code 403: unauthorized: The client does not have permission for manifest: map[manifest:ako/helm-charts/ako/1.13.4/manifest.json]

Environment

Tanzu Supervisor cluster

AKO

Cause

The underlying cause of this error is that the environment from which the Helm command is executed does not have access to the required URL (in this example: oci://projects.packages.broadcom.com/ako/helm-charts/ako). The Helm client needs to reach this URL to retrieve the chart manifests.

Resolution

>> The URL oci://projects.packages.broadcom.com/ako/helm-charts/ako is a public URL and typically does not have any access restrictions.
>> Verify that the system or virtual machine where the command is run can successfully reach the URL oci://projects.packages.broadcom.com/ako/helm-charts/ako
>> Ensure that no network policies, firewalls, proxies, or other restrictions are blocking access to the URL.
>> You can verify access by using network tools like curl or ping to confirm connectivity from your environment to the URL.