"Reason: ReconcileFailed. Message: ytt: Error: - struct has no .tls_crt field or method" error during CA Cluster Issuer Supervisor installation

Products

• VMware vSphere Kubernetes Service
• VMware vCenter Server
• VMware Cloud Foundation
• VMware vSphere Foundation

Issue/Introduction

During the installation of CA Cluster Issuer Supervisor Service, you may encounter the following error message:

"Reason: ReconcileFailed. Message: ytt: Error: - struct has no .tls_crt field or method"

Environment

• vSphere Kubernetes Service
• VMware vCenter Server
• VMware vSphere Foundation 9.x
• VMware Cloud Foundation 9.x

Cause

This is caused due to incorrect parameter or an incorrect certificate and key format.

Resolution

Follow the below steps to install the CA Cluster Issuer Supervisor Service.

1. Get the Cert and its Key, based on which certificate you want to use.
   
   Note: Below example use rootCA.crt and rootCA.key as file names. This certificate can be self signed or Enterprise CA issued certificate.
   
   
2. Base64-encode your Certificate:
   
   cat rootCA.crt | base64 | tr -d '\n'
   
   
3. Base64-encode your Private Key:
   
   cat rootCA.key | base64 | tr -d '\n'
   
   
4. Install the Service via vCenter UI.
5. Update the Service Config as follows:
   
   tls_crt: "LS0tLS1CRUdJTiB..."
tls_key: "LS0tLS1CRUdJTiB..."
   
   
6. Click Finish

Additional Information

Install a Supervisor Service on a Supervisor