"VCF Networking with VPC" networking stack in (Not Available ) state during the Supervisor cluster deployment

Products

• VMware vSphere Kubernetes Service

Issue/Introduction

During the Supervisor cluster deployment process,  under Select a networking stack,  “VCF networking with VPC” option appears to be grayed out in the UI. 

Environment

VMware vCenter Server 8.x

Cause

vmware-trustmanagement service is in stopped state , this service handles internal token signing and certificate trust.  Due to this "VCF networking with VPC" option in the UI selection is grayed out .

In vCenter wcpsvc.log  will have following messages:

20xx-xx-xxTxx:xx:xx:XXZ error wcp [trustmanagement/client.go:43] [opID=CoreServiceController] Error fulfilling request &{GET http://localhost:1080/rest/vcenter/identity/vc-identity HTTP/1.1 1 1 map[Accept:[application/json] Cookie:[vmware_soap_session="2451df41c502abf11b1e2bee3ad480858693585d"] User-Agent:[wcpsvc govmomi/0.48.1 (go1.23.4 X:boringcrypto;linux;amd64)] Vmware-Api-Session-Id:[] X-Request-Id:[wcp-CoreServiceController]] <nil> <nil> 0 [] false localhost:1080 map[] map[] <nil> map[]   <nil> <nil> <nil>  {{}} <nil> [] map[]}. Error: GET http://localhost:1080/rest/vcenter/identity/vc-identity: 503 Service Unavailable

20xx-xx-xxTxx:xx:xx:XXZ error wcp [compatibility/check_compatibility.go:117] [opID=CoreServiceController] Error validating if cluster is running on cloud: GET http://localhost:1080/rest/vcenter/identity/vc-identity: 503 Service Unavailable 20xx-xx-xxTxx:xx:xx:XXZ info wcp [controller/core_service_controller.go:671] [opID=CoreServiceController] Registering core service '.vsphere.vmware.com' 20xx-xx-xxTxx:xx:xx:XXZ info wcp [controller/core_service_controller.go:724] [copID=CoreServiceController] successfully synced service velero.vsphere.vmware.com, versions [{1.8.2-embedded+24925800 CARVEL_APPS_YAML /etc/vmware/wcp/supervisorservices/packages/velero-package.yaml }] 20xx-xx-xxTxx:xx:xx:XXZ error wcp [controller/core_service_controller.go:550] [opID=CoreServiceController] error registering core services: map[tkg.vsphere.vmware.com:Failed to validate where vCenter is hosted. Error: GET http://localhost:1080/rest/vcenter/identity/vc-identity: 503 Service Unavailable .vsphere.vmware.com:Failed to validate where vCenter is hosted. Error: GET http://localhost:1080/rest/vcenter/identity/vc-identity: 503 Service Unavailable] 20xx-xx-xxTxx:xx:xx:XXZ info wcp [controller/core_service_controller.go:153] [opID=CoreServiceController] Reconciling core services on all Supervisors

 

Also when you verify the service status vmware-trustmanagement service appears in the Stopped state.:

Resolution

Start the vmware-trustmanager service using the following command :

1. Starting service 
   "service-control --start vmware-trustmanagement"
2. Wathching the service status 
   service-control --status vmware-trustmanagement