Tanzu Mission Control & VMware Cloud Director Discussion Board topics

Unable to delete TMC-SM add-on instance

nazu — Mon, 28 Aug 2023 15:08:23 GMT

I am having issues with the installation of TMC-SM.

I got till the page 22 of installation – tried to install TMC-SM add-on instance.

It run for some time, then stopped and remained in ‘In progress’ state.

So now I am not able to either delete it, or create a new one (as only 1 instance is supported).

I tried deleting tmc Kubernetes cluster from VCD UI and the project from harbor and recreated those from the scratch but seems something else needs to be cleaned up.

Attached the log from the tmc instance installation.

Could you help with deleting it?

Unable remove instance - CSE not found

returntrip — Fri, 25 Aug 2023 15:14:56 GMT

I am not sure if "CSE4" is referring to a VM or vApp or if that is just some hardcoded name and of no consequence to the search.

I am asking cause I have just updated CSE to 4.1 and delete the previous vApp/VM (IIRC both called CSE4).

Would be great to have some help with this as I need to remove this instance and reinstall it.

root@PhotonOS-001 [ ~ ]# /mnt/cdrom/linux.run delete instance --name $TMC_SM_INSTANCE_NAME --accept --host $VCD_HOSTNAME --username $VCD_USERNAME --certificate-file /tmp/vcd.pem --encryption-key ${TMC_SM_ENCRYPTION_KEY} --accept --password $VCD_EXT_PASSWORD
INFO [0019] Triggering action action=hook event=PreDelete
INFO [0021] All global roles are ready to delete action=hook event=PreDelete
INFO [0021] cluster:tmc action=hook event=PreDelete
INFO [0021] Get Solution Org action=hook event=PreDelete
INFO [0021] Solution Org: CSE action=hook event=PreDelete
INFO [0021] Search CSE4 Cluster action=hook event=PreDelete
ERROR [0021] Failed to find any cse cluster in org CSE action=hook event=PreDelete
ERROR [0021] Failed to delete instance 'tmc' name=tmc
ERROR [0021] Failed to find any cse cluster in org CSE: exit status 23: failed to execute trigger hook errorCode=5012120012191213

TMC Managed K8s Cluster - CLI authentication and Access Roles

returntrip — Wed, 16 Aug 2023 13:12:00 GMT

Currently, I can login to TMC CLI in the following ways:

1) Using LDAP accountswith `Cloud Administrator` role

2) Using LDAP account with role `tmc:admin`

3) Using local accounts `tmc-amin`, `tmc-member` or any other local accounts with role `tmc:admin` or `tmc:member` assigned to them

I cannot authenticate to TMC CLI from LDAP/local accounts/groups for which I have authentication configured TMC GUI Access section. See screenshot that shows current access policy.

To me, it seems like the `tmc-admin` or `tmc-member` roles are necessary to log ont TMC CLI and subsequentially accesst the K8s API via says kubectl However, having those roles gives automatically admin access to TMC managed K8s clusters which defeats the purpose of RBAC.

Am I missing something?

Unable to reconcile tanzu-standard repo

returntrip — Tue, 08 Aug 2023 11:53:35 GMT

I am unable to reconcile the tanzau-standard repo due to a certificate error. How can I import or trust the authority for the harbor host to overcome this issue?

API Error: Failed to list cluster's integrations: Not Implemented

returntrip — Tue, 08 Aug 2023 08:59:36 GMT

I am getting this error: "API Error: Failed to list cluster's integrations: Not Implemented: please try again later (unimplemented)" as a red banner. Any hints how to solve this? Thanks.