Error: Compatibility check timed out during VKS Service

Products

• Tanzu Kubernetes Runtime

Issue/Introduction

 

• The vSphere UI displays the error: "Cannot complete the operation. See the event log for details."
• In /var/log/vmware/wcp/wcpsvc.log, the following error is found: error wcp [precheck/version_constraints.go:####] [opID=####] Fail to do the request: Get "http://localhost:1080/external-cert/http2/####/443/appplatform/checkupgrade...": net/http: request canceled (Client.Timeout exceeded while awaiting headers)
• A curl test from the vCenter Server to the Supervisor Control Plane VM IP on port 443 fails to connect.

 

Environment

• VMware Cloud Foundation (VCF) 5.x, 9.x
• vSphere Kubernetes Service (VKS) 3.x

Cause

Network connectivity is blocked between the vCenter Server and the Supervisor Control Plane nodes on port 443. The vCenter Server requires access to the Supervisor API to validate compatibility before initiating the upgrade.

Resolution

1. Verify the IP addresses of the Supervisor Control Plane VMs.
2. Ensure that the firewall allows bidirectional traffic between the vCenter Server IP and all Supervisor Control Plane VM IPs on port 443.
3. Test connectivity from the vCenter bash shell: curl -kv <Supervisor_IP>:443
4. Once connectivity is established, retry the VKS upgrade or service installation from the vSphere Client.

Additional Information

 Refer to the official VMware Cloud Foundation Ports and Protocols documentation for a complete list of required firewall rules.