Troubleshooting Tanzu Operations Manager on GCP

Learn how to troubleshoot known issues when deploying Operations Manager on Google Cloud Platform (GCP).

Problems connecting with single sign-on (SSO) for VMware Tanzu

Users may be unable to connect to applications running on Operations Manager using SSO for VMware Tanzu.

Explanation

SSO for VMware Tanzu does not support multi-subnets.

Solution

Ensure that you have configured only one subnet. See Preparing to deploy Tanzu Operations Manager on GCP.

Uploading TAS for VMs tile causes Operations Manager rails application crash

Uploading the VMware Tanzu Application Service for VMs (TAS for VMs) tile causes the Operations Manager Rails application to crash.

Explanation

In compressed format, the TAS for VMs tile is 5 GB in size. However, when uncompressed during installation, the TAS for VMs tile requires additional disk space that can exhaust the space allocated to the boot disk.

Solution

Ensure that the boot disk is allocated at least 50 GB of space. See Create the Operations Manager VM Instance in Deploying Tanzu Operations Manager on GCP.

TAS for VMs deployment fails - MySQL Monitor replication-canary job

During installation of the TAS for VMs tile, the replication-canary job fails to start. The error reported in the installation log resembles the following:

Started updating job mysql_monitor > mysql_monitor/0
(48e7ec82-3cdf-41af-9d0f-90d1f12683c8) (canary). Failed: 'mysql_monitor/0
(48e7ec82-3cdf-41af-9d0f-90d1f12683c8)' is not running after update.
Review logs for failed jobs: replication-canary (00:05:13)

Error 400007: 'mysql_monitor/0 (48e7ec82-3cdf-41af-9d0f-90d1f12683c8)'
is not running after update.
Review logs for failed jobs: replication-canary

Explanation

This error can appear as a result of incorrect configuration of network traffic and missed communication between the Gorouter and a load balancer.

Solution

Make sure you have selected the Forward SSL to TAS for VMs Router option in your TAS for VMs Network Configuration.
Verify that you have configured the firewall rules properly and that TCP ports 80, 443, 2222, and 8080 are accessible on your GCP load balancers. See Create Firewall Rules for the Network in Preparing to deploy Tanzu Operations Manager on GCP.
Verify that you have configured the proper SSL certificates on your HTTP(S) load balancer in GCP. See Create HTTP load balancer in Preparing to deploy Tanzu Operations Manager on GCP.
If necessary, upload a new certificate again and update any required SSL Certificate and SSH Key fields in your TAS for VMs Network Configuration.

Insufficient external database permissions

Upgrade issues can be caused when the external database user used for the network policy DB is given insufficient permissions. To avoid this upgrade issue, ensure that the networkpolicyserver database user has the ALL PRIVILEGES permission.