Error: "Please wait" and spinning icon displayed indefinitely when trying to add Avi Controller for NSX-ALB integration

Products

• VMware Cloud Director

Issue/Introduction

• Attempting to Add Controller for Avi Load Balancer integration in the Cloud Director (VCD) Provider portal under Resources > Infrastructure Resources > NSX-ALB > Controllers > New.
• "Please wait" and spinning icon displayed indefinitely and the Avi Controller is never added.
• While adding the Avi Controller the VCD UI prompted to Trust the Avi Controller certificate and added it to VCD's Trusted Certificates.
• In the browser's Developer Tools > Network tab, it shows a call to VCD's OpenAPI /cloudapi/1.0.0/testConnection which gives a "200 OK" status but the JSON response states that the certificate could not be trusted similar to the following:
  
  {
    "targetProbe": {
        "result": "Certificate not trusted: java. security. cert.CertificateException: No name matching <AVI_CONTROLLER_FQDN> found",
        "resolvedIp": "#.#.#.#",
        "canConnect": true,
        "sslHandshake": false,
        "connectionResult": "SUCCESS",
        "sslResult": "ERROR_UNTRUSTED_CERTIFICATE",
        "certificateChain": " ----- BEGIN CERTIFICATE -----...----- END CERTIFICATE ----- ",
        "additionalCAIssuers": []
    },
    "proxyProbe": null
}
  
  
• The issue occurs even after attempting to Trust the Avi Controller certificate in VCD and adding it to Trusted Certificates.

Environment

• VMware Cloud Director 10.6.x
• VMware Avi Load Balancer

Cause

This issue occurs if the Avi Controller's SSL certificate does not have a Common Name and Subject Alternate Name (SAN) that matches the address entered in the Add Controller > URL field in VCD.

Resolution

To resolve this issue configure the Avi Controller with a valid SSL certificate that has a valid Common Name and Subject Alternate Name (SAN) that matches the URL being provided to VCD when adding the controller.

For more information on configuring the Avi Controller certificate, see the Avi Load Balancer documentation on Changing the Default Certificate of the Controller.

After ensuring the Avi Controller has a valid certificate, close the Add Controller dialogue in the VCD Provider portal if it is still open in a "Please wait" state, and attempt to add the controller again.

Additional Information

Register a Controller Instance in VMware Cloud Director