VCF 9.1 Runtimes Services Bootstrap Fails at NSX Firewall Exclusion Step

Products

• VMware SDDC Manager / VCF Installer

Issue/Introduction

When attempting to bootstrap the VCF Services Platform (VMSP) cluster within SDDC Manager, the task fails during the "Bootstrap VCF Services Platform" sub-task.

errorCode: PUBLIC_VSP_CLUSTER_BOOTSTRAP_FAILED

message: Failed to bootstrap VCF services runtime

causes: - type: java.lang.RuntimeException message: java.lang.StringIndexOutOfBoundsException: Range [-1, 42) out of bounds for length 42

"name":"Add VM Name Prefix to NSX firewall exclusion list",

Environment

VCF 9.1

Cause

This issue is environmental and occurs when the SDDC Manager is unable to reach the Health API of the VMSP bootstrap VM.

During the bootstrap process, SDDC Manager deploys a temporary bootstrap VM and repeatedly polls its health endpoint (https://<Bootstrap_VM_IP>:5480/health)

Resolution

Identify the Bootstrap VM IP

Check the SDDC Manager task details or /var/log/vmware/vcf/domainmanager/domainmanager.log file to identify the IP address assigned to the VMSP bootstrap VM.

 

Validate Network Connectivity

From the SDDC Manager console via SSH, run the following tests:

• Ping Test:

  ping <Bootstrap_VM_IP>

• Port Connectivity (Telnet/NC):

  nc -zv <Bootstrap_VM_IP> 5480

• Health API Check:

  curl -v -k --connect-timeout 10 https://<Bootstrap_VM_IP>:5480/health

 

Review Firewall Rules

If the curl or nc commands fail, ensure that port 5480 is allowed bi-directionally between the SDDC Manager appliance and the IP range used for the VMSP cluster/Management network.

 

Retry the Task

Once connectivity is confirmed (the curl command returns a HTTP 200 or a valid JSON health response), restart the VMSP Bootstrap task from the SDDC Manager UI.

Additional Information

VMware Cloud Foundation 9.1