New host added to Supervisor cluster not configuring

Products

• VMware vSphere Kubernetes Service

Issue/Introduction

• When adding a new host to a Supervisor cluster the host staying in a configuring state
• We see the message "“Configured ESXi Host as Kubernetes Worker Node A general system error occurred. Error message: context deadline exceeded.”
• We see that newly added hosts are not showing up when listing out the nodes with command kubectl get nodes -A :

   

  kubectl get nodes -A
  
  
  NAME                               STATUS   ROLES                  AGE   VERSION
  422d24e636a9708f5c51a51473219082   Ready    control-plane,master   89d   v1.30.10+vmware.1-fips
  422d5c72de2482ea4e91fb0c7152350e   Ready    control-plane,master   89d   v1.30.10+vmware.1-fips
  422dc584a0993279088ece305e6637cd   Ready    control-plane,master   89d   v1.30.10+vmware.1-fips
  esxi01.gslabs.local                Ready    agent                  89d   v1.30.5-sph-806add6
  esxi02.gslabs.local                Ready    agent                  89d   v1.30.5-sph-806add6
  esxi03.gslabs.local                Ready    agent                  89d   v1.30.5-sph-806add6
  esxi04.gslabs.local                Ready    agent                  89d   v1.30.5-sph-806add6
  
  
  
  ***added host not shown in above output

Cause

This can happen if not all mandatory ports are available.

Resolution

Please check the ports are open - 

Port	Protocol	Source	Destination	Mandatory/Optional	Notes
53	UDP, TCP	ESXi Server(s) Mgmt IP	DNS	Mandatory	Must be enabled during initial infrastructure setup.
123	UDP	ESXi Server(s) Mgmt IP	NTP	Mandatory	Must be enabled during initial infrastructure setup.
6443	TCP	ESXi Server(s) Mgmt IP	Supervisor Mgmt IP Pool (VIP)*	Mandatory	Supervisor Mgmt IP Pool (VIP) is the floating IP in the Supervisor Mgmt IP Pool. This is for document purposes only.
10250	TCP	ESXi Server(s) Mgmt IP	Primary Workload Network IP Pool (Supervisor Service)	Mandatory
443	TCP	vCenter	Internet	Optional	Egress Internet traffic. It may not be required for an airgapped setup. If so, would need private endpoints for corresponding services
443, 902, 9080	TCP	vCenter	ESXi Server(s) Mgmt IP	Mandatory	Must be enabled during initial infrastructure setup.
443, 6443	TCP	vCenter	Supervisor Mgmt IP Pool
22, 443, 5000, 6443	TCP	vCenter	Supervisor Mgmt IP Pool (VIP)*	Mandatory	Supervisor Mgmt IP Pool (VIP) is the floating IP in the Supervisor Mgmt IP Pool. This is for document purposes only.

Additional Information

The full list can be found here - 

https://github.com/vsphere-tmm/vsphere-supervisor/blob/main/port-and-protocols.md