This article provides work around to NSX Edge deployment failures when Orchestrator node is shutdown/unavailable.
Symptoms:
"OVF certificate validation failed. Error: Ovf, manifest and certificate files not found"
Log location: /proton/nsxapi.log
2020-03-23T13:29:27.344Z INFO ActivityWorkerPool-1-12 HttpUtils - FABRIC [nsx@6876 comp="nsx-manager" level="INFO" subcomp="manager"] java.net.NoRouteToHostException: No route to host (Host unreachable) exception occurred while reading the urlStr- http://x.x.x.x:8080/repository/2.5.1.0.0.15314288/Edge/ovf/nsx-edge-2.5.1.0.0.15314297.mf
java.net.NoRouteToHostException: No route to host (Host unreachable)
at java.net.PlainSocketImpl.socketConnect(Native Method) ~[?:1.8.0_212]
at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:350) ~[?:1.8.0_212]
at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:206) ~[?:1.8.0_2
Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.
This issue is resolved in VMware NSX-T Data Center 3.0.
Workaround:
To work around the issue
Check the repository IP by nsx_manager-1>get service
Service name: install-upgrade
Service state: running
Enabled on: x.x.x.x
Execute command on one of the available nsx-managers (nsx-manager-2, nsx-manager-3)
nsx-manager-2> set repository-ip
Since the nsx-manager is not available the workflow fails, by executing the command "set repository-ip" over-rides with the new IP.
set repository-ip: Set current node's IP address as repository IP. This command will restart the install-upgrade service.