SSPI upgrade pending on 5.1.0.0 to 5.1.0.1
Article ID: 437728
Updated On:
Products
VMware vDefend Firewall with Advanced Threat Prevention
Issue/Introduction
In some cases, the SSPI upgrade from 5.1.0.0 to 5.1.0.1 becomes stuck in a pending state, which blocks the subsequent upgrade of SSP from 5.1.0 to 5.1.1.
When attempting to upgrade SSP while the SSPI is in this pending state, an error message similar to the following is displayed:
Within the SSPI, the upgrade status appears as follows:
Environment
SSPI 5.1.
Cause
The issue occurs when a Helm upgrade is interrupted, leaving the release stuck in a pending-upgrade state. It is possible there were some intruption during the upgrade.
Resolution
Follow the steps below to roll back the stuck Helm release and resume the upgrade.
- Verify the Helm release state using the workload cluster kubeconfig:
helm list -A --all --kubeconfig /config/clusterctl/1/workload.kubeconfig
Identify any release in the pending-upgrade state (in the example below, ssp-antrea).
- Roll back the Helm release to the last stable revision:
helm rollback ssp-antrea 2 -n kube-system --kubeconfig /config/clusterctl/1/workload.kubeconfig
- Confirm that the release has returned to the deployed state by re-running the helm list command from Step 1.
- Retry the upgrade from the SSP UI. The upgrade should proceed successfully once the Helm state has been normalized.
Example Output
sysadmin@n1sspi:~$ helm list -A --all --kubeconfig /config/clusterctl/1/workload.kubeconfig NAME NAMESPACE REVISION UPDATED STATUS CHART APP VERSION analytics-common nsxi-platform 2 2026-03-02 17:41:58.926811859 +0000 UTC deployed analytics-common-chart-5.1.1-0.0-25224329 5.1.1-0.0-25224329 cert-manager cert-manager 2 2026-02-24 01:17:34.864614911 +0000 UTC deployed cert-manager-5.1.1-0.0-25224329 5.1.1-0.0-25224329 cloud-connector nsxi-platform 2 2026-03-02 23:34:41.844897627 +0000 UTC deployed cloud-connector-5.1.1-0.0-25224329 5.1.1-0.0-25224329 ids-adv nsxi-platform 2 2026-03-02 17:57:57.816393744 +0000 UTC deployed ids-adv-chart-5.1.1-0.0-25224329 5.1.1-0.0-25224329 intelligence nsxi-platform 2 2026-03-02 17:52:30.434097085 +0000 UTC deployed nsxi-chart-5.1.1-0.0-25224329 5.1.1-0.0-25224329 malware-prevention nsxi-platform 1 2026-03-04 22:20:08.833346764 +0000 UTC deployed malware-prevention-5.1.1-0.0-25224329 5.1.1-0.0-25224329 metrics nsxi-platform 2 2026-03-02 17:29:17.312431371 +0000 UTC deployed metrics-5.1.1-0.0-25224329 5.1.1-0.0-25224329 network-traffic-analysis nsxi-platform 2 2026-03-02 17:47:33.644808501 +0000 UTC deployed nta-chart-5.1.1-0.0-25224329 5.1.1-0.0-25224329 nsx-metadata nsxi-platform 2 2026-03-02 23:36:11.748765916 +0000 UTC deployed nsx-metadata-service-5.1.1-0.0-25224329 5.1.1-0.0-25224329 nsx-ndr nsxi-platform 2 2026-03-02 23:37:11.454105781 +0000 UTC deployed nsx-ndr-5.1.1-0.0-25224329 5.1.1-0.0-25224329 nsx-ndr-data-sharing nsxi-platform 2 2026-03-02 23:40:42.208120964 +0000 UTC deployed nsx-ndr-data-sharing-5.1.1-0.0-25224329 5.1.1-0.0-25224329 nsxi-platform nsxi-platform 3 2026-03-02 16:06:30.343836737 +0000 UTC deployed napp-platform-advanced-5.1.1-0.0-25224329 5.1.1-0.0-25224329 projectcontour projectcontour 2 2026-02-24 01:20:03.784354017 +0000 UTC deployed contour-5.1.1-0.0-25224329 5.1.1-0.0-25224329 rule-analysis nsxi-platform 1 2026-03-04 22:35:34.517485074 +0000 UTC deployed firewall-5.1.1-0.0-25224329 5.1.1-0.0-25224329 ssp-antrea kube-system 2 2026-03-03 22:55:42.859641481 +0000 UTC pending-upgrade antrea-2.4.0 <<< Run helm rollback on any release in this state ssp-metallb metallb-system 2 2026-03-03 22:57:57.972257003 +0000 UTC deployed metallb-6.4.19 0.15.2
Feedback
Yes
No
Powered by
