Unable to delete newly created Workload Domain from VCF 9.0.2

Products

• VMware SDDC Manager / VCF Installer

Issue/Introduction

• Attempts to delete a newly created Greenfield Workload Domain (WLD) in VMware Cloud Foundation (VCF) 9.0.2 fails.
• Standard deletion steps outlined in KB 436924 (How to remove an Imported domain from VCF 9.0) fail or time out during validation.
• The SDDC Manager UI or API reports the following error: DAYN_GUARDRAILS_VALIDATION_FAILED: DELETE_DOMAIN operation validation failed
• In SDDC logs:
  • /var/log/vmware/vcf/operationsmanager/operationsmanager.year-month-day.#.log
  • /var/log/vmware/vcf/lcm/lcm.year-month-day.#.log-debug
  • /var/log/vmware/vcf/domainmanager/domainmanager.year-month-day.#.log
  The following exception is observed:

  java.net.UnknownHostException: <VC-FQDN>: Name or service not known

Environment

VMware Cloud Foundation 9.0.2
SDDC Manager 9.0.2 

Resolution

1. Take an offline snapshot of the SDDC Manager appliance (without memory) before proceeding with troubleshooting. Taking and restoring snapshots of the SDDC Manager appliance
2. Confirm that the SDDC Manager appliance can successfully resolve the vCenter FQDN. Run the following commands from the SDDC Manager SSH console:

   getent hosts <add-correct FQDN-from-VC>
   nslookup <add-correct FQDN-from-VC>

   If resolution fails or returns an incorrect IP:
   • Verify the A-record for the vCenter FQDN in your internal DNS server.
   • Ensure that the record was correctly restored during the FQDN reversion process.
   • If using multiple DNS servers, verify replication health and check for stale TTL (Time to Live) entries.
   • Correct the DNS entry and ensure nslookup returns the valid IP from the SDDC Manager.
3. Once DNS resolution is functional and the vCenter is reachable:
   • Retry the Standard Deletion Through SDDC Manager using KB How to remove a Imported domain from VCF 9.0
   • Log in to the SDDC Manager UI.
   • Navigate to Inventory > Workload Domains.
   • Retry the domain deletion for the problematic WLD.
     Note: The Day-N Guardrails will automatically re-run; if DNS is healthy, the validation will now pass.
4. Confirm the cleanup was successful by verifying that the Workload Domain is no longer visible in the SDDC Manager inventory. Go to SDDC Manager UI > Inventory > Workload Domains.

5. Establish an SSH session to the SDDC Manager appliance using the vcf user account.

6. Escalate privileges to root by issuing the su root command and supplying the appropriate credentials.

7. Initiate the standard health check by executing the following command:

   sudo /opt/vmware/sddc-support/sos --health-check

8. Before attempting to redeploy the Workload Domain, verify that all management plane checks return green and that there are no active alarms in vCenter or SDDC Manager.