SSP upgrade failed during the creation of the upgrade-coordinator pod with an Error: Error occurred while installing chart napp-upgrade: services "upgrade-coordinator" is forbidden:

Products

• VMware vDefend Firewall
• VMware vDefend Firewall with Advanced Threat Prevention

Issue/Introduction

SSP upgrade failed during the creation of the upgrade-coordinator pod with the following error:

Error occurred while installing chart napp-upgrade:
services "upgrade-coordinator" is forbidden:
User "system:serviceaccount:nsxi-platform:cluster-api" cannot get resource "services" in API group "" in the namespace "nsxi-platform"
RBAC: clusterrole.rbac.authorization.k8s.io "nsp-priv-role" not found
clusterrole.rbac.authorization.k8s.io "cluster-api-role" not found
clusterrole.rbac.authorization.k8s.io "system:basic-user" not found

Environment

SSP 5.1

Cause

The upgrade attempt for the Security Services Platform (SSP) failed because it was initiated by a user account lacking the necessary administrative privileges. This resulted in a "Forbidden" error, as the system blocked the execution of critical installation tasks that require elevated permissions.

Resolution

Please log in with Admin privileges to the Security Services Platform and re-attempt the process using local Admin credentials. If the issue still persists after using the correct permissions, please contact the Broadcom support team for further investigation.

Upgrading Security Services Platform