Help, I Cannot Pass IaaS Provider Step when Deploying TKG 1.4.2 Management Cluster to vSphere!

In TKG 1.4, if you deploy management clusters to vSphere with the installer interface, as a first step of configuring vCenter Server as IaaS Provider, you’ll need to fill in your vCenter Server IP Address or FQDN, username/password then hit Connect. If your vCenter use the default certificate, you’ll found this error:

Failed to connect to the specified vCenter Server. Post "https://IP_or_FQDN/sdk": x509: cannot validate certificate for IP_or_FQDN because it doesn't contain any IP SANs

The problem, there’s nothing we can do in the UI. You’ll just stuck there with the error, all other steps will still be grayed. 😓

Well, here’s what you can do. You’ll need to allow TLS thumbprint verification by doing the following on the bootstrap machine:

$export VSPHERE_INSECURE=true

Then redo the tanzu management-cluster create job, input vCenter information, click Connect and you'll be able to proceed.

Reference:

https://docs.vmware.com/en/VMware-Tanzu-Kubernetes-Grid/1.4/vmware-tanzu-kubernetes-grid-14/GUID-tanzu-config-reference.html 

----------------------------------

The good news, now with TKG 1.5.1 we have that option in the UI. 👏👏👏👏👏