Unable to remove deleted Local Managers from Federation Global Managers in NSX
Article ID: 444001
Updated On:
Products
Issue/Introduction
When attempting to remove a Local Manager from the Federation Global Manager user interface, the operation fails. This issue typically occurs if the Local Manager virtual machine was previously deleted from the environment and its Fully Qualified Domain Name (FQDN) was removed from DNS before it was detached from the Federation.
The following error is recorded in the /var/log/syslog on the Global Manager:
GM.FQDN NSX 78913 SYSTEM [nsx@6876 audit="true" comp="global-manager" level="INFO" subcomp="global-manager"] UserName:'admin' ModuleName:'Policy' Operation:'DELETE@/api/v1/infra/sites/SITE-NAME' Operation status: 'failure' Error: Site is not reachable because the Site or its services are down or GM certificate is unavailable on LM.
Environment
VMware NSX
NSX Federation
Cause
The Global Manager user interface is unable to remove the Local Manager because standard deletion workflows require communication with the site. Since the Local Manager no longer exists and is completely unreachable, the API call fails.
Resolution
To remove the unreachable Local Manager, bypass the standard verification by executing a forced delete via the NSX API.
Run the following HTTP DELETE request using an API client (such as Postman or curl) directed at the Global Manager:
DELETE https://<GM-IP>/global-manager/api/v1/global-infra/sites/<SITE-NAME>?force=true
To run the API call using cURL from a Global Manager root login use:
curl -l -k -u 'admin' -H 'Content-Type:application/json' -X DELETE https://localhost/global-manager/api/v1/global-infra/sites/<SITE-NAME>?force=true
Additional Information
For more details regarding force-deletion parameters and site-management APIs, refer to the NSX Global Policy API Guide.
Tip: Subscribe to this knowledge article to get updates on this issue.
Feedback
