[Bug]: Day 2: Can't create VCFA AllAppsOrg on fresh "ManagementOnly" deployment

[xzitony]

Holorouter Version

9.1

VCF Version

VCF 9.1

Target Type

Standalone ESX Host

Describe the bug

PS /root> Update-HoloDeckInstance -Site a -AddVcfAutomationAllAppsOrg -VIDomain Management
23-06-2026 12:52:02  VcfAutomationConfig[1386]: [INFO] Starting VCFA All-Apps Organization creation for Site a in Management domain
23-06-2026 12:52:02  VcfAutomationConfig[1386]: [INFO] Using Management domain configuration
23-06-2026 12:52:02  VcfAutomationConfig[1386]: [INFO] CPU limit not specified, will use cluster total
23-06-2026 12:52:02  VcfAutomationConfig[1386]: [INFO] Memory limit not specified, will use cluster total
23-06-2026 12:52:02  VcfAutomationConfig[1386]: [INFO] Storage limit not specified, will use cluster total
23-06-2026 12:52:02  VcfAutomationConfig[1386]: [INFO] Using organization details from config:
23-06-2026 12:52:02  VcfAutomationConfig[1386]: [INFO]   Region: us-west-a
23-06-2026 12:52:02  VcfAutomationConfig[1386]: [INFO]   Organization: Acme West Region A (Acme-West-A)
23-06-2026 12:52:02  VcfAutomationConfig[1386]: [INFO]   User: acme-west-a
23-06-2026 12:52:02  VcfAutomationConfig[1386]: [INFO] Authenticating to VCF Automation
23-06-2026 12:52:02  VcfAutomationConfig[1386]: [INFO] Authenticating to VCF Automation at auto-a.site-a.vcf.lab
23-06-2026 12:52:02  VcfAutomationConfig[1386]: [INFO] Successfully authenticated to VCF Automation
23-06-2026 12:52:02  VcfAutomationConfig[1386]: [INFO] Syncing VCF Instance to ensure NSX, vCenter, and Supervisors are visible
23-06-2026 12:52:02  VcfAutomationConfig[1386]: [INFO] Retrieving VCF Infrastructure Endpoint details (SDDC Manager details from VCF Automation)
23-06-2026 12:52:02  VcfAutomationConfig[1386]: [INFO] Retrieved Infrastructure Endpoint (SDDC Manager details from VCF Automation): instance-a (ID: urn:vcloud:vcfInfraEndpoint:7ede0408-b06f-4a2b-aa8f-79c01a905e43)
23-06-2026 12:52:02  VcfAutomationConfig[1386]: [INFO] Initiating infrastructure endpoint refresh for endpoint: urn:vcloud:vcfInfraEndpoint:7ede0408-b06f-4a2b-aa8f-79c01a905e43 on VCF Automation to update workload domain cluster details
23-06-2026 12:52:03  VcfAutomationConfig[1386]: [INFO] Refresh operation initiated successfully
23-06-2026 12:52:03  VcfAutomationConfig[1386]: [INFO] Task location: https://auto-a.site-a.vcf.lab/api/task/dd669845-15ad-4afd-889c-49eefaf102b2
23-06-2026 12:52:03  VcfAutomationConfig[1386]: [INFO] Monitoring task status: https://auto-a.site-a.vcf.lab/api/task/dd669845-15ad-4afd-889c-49eefaf102b2
23-06-2026 12:52:03  VcfAutomationConfig[1386]: [INFO] Task status: queued
23-06-2026 12:52:03  VcfAutomationConfig[1386]: [INFO] Checking status again in 10 seconds
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [SUCCESS] Task completed successfully!
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [SUCCESS] VCF Instance sync completed successfully
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] No existing deployment found for organization 'Acme-West-A', this is a new deployment
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Retrieving NSX Managers and checking supervisor availability
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Retrieving NSX Managers from VCF Automation
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Retrieved 1 NSX Manager(s)
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Looking for Management domain NSX Manager matching pattern: nsx-mgmt-a
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Found matching NSX Manager: nsx-mgmt-a.site-a.vcf.lab
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Retrieving supervisors with filter: nsxManagerId==urn:vcloud:nsxtmanager:6c7ef076-f16d-4e17-b78d-1105e6f274ee;region.id==null
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Retrieved 1 supervisor(s)
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] NSX Manager nsx-mgmt-a.site-a.vcf.lab has 1 available supervisor(s)
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Selected NSX Manager: nsx-mgmt-a.site-a.vcf.lab (ID: urn:vcloud:nsxtmanager:6c7ef076-f16d-4e17-b78d-1105e6f274ee)
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Retrieving supervisors for NSX Manager: nsx-mgmt-a.site-a.vcf.lab
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Retrieving supervisors with filter: nsxManagerId==urn:vcloud:nsxtmanager:6c7ef076-f16d-4e17-b78d-1105e6f274ee;region.id==null
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Retrieved 1 supervisor(s)
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Only one supervisor available, automatically selected: supervisor-mgmt
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Selected Supervisor: supervisor-mgmt
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Saving NSX Manager and Supervisor selection to config for organization: Acme-West-A
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Retrieving cluster information from supervisor
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Supervisor is in Management Domain
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] vCenter: vc-mgmt-a.site-a.vcf.lab, Cluster: cluster-mgmt-01a
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Calculating resource limits based on cluster capacity
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Retrieving cluster resource information for: cluster-mgmt-01a
23-06-2026 12:52:13  VcfAutomationConfig[1386]: [INFO] Connecting to vCenter: vc-mgmt-a.site-a.vcf.lab
23-06-2026 12:52:14  VcfAutomationConfig[1386]: [SUCCESS] Successfully connected to vCenter
23-06-2026 12:52:14  VcfAutomationConfig[1386]: [INFO] Cluster resource summary for 'cluster-mgmt-01a':
23-06-2026 12:52:14  VcfAutomationConfig[1386]: [INFO]   Total CPU: 281472 MHz
23-06-2026 12:52:14  VcfAutomationConfig[1386]: [INFO]   Total Memory: 786428 MiB (768 GB)
23-06-2026 12:52:14  VcfAutomationConfig[1386]: [INFO]   Total Storage: 3686336 MiB (3599.94 GB)
23-06-2026 12:52:14  Auth[1386]: [INFO] Testing connectivity to Target Host
23-06-2026 12:52:14  Auth[1386]: [SUCCESS] XXXXXXX.vcf.YYYYYY.com is successfully connected!
23-06-2026 12:52:14  Auth[1386]: [INFO] Target host is an ESX
23-06-2026 12:52:14  SetHoloDeckConfig[1386]: [INFO] Updating the Global Config, ConfigKey: TargetHostApiType, ConfigValue: HostAgent
23-06-2026 12:52:14  VcfAutomationConfig[1386]: [INFO] Using cluster total CPU limit: 281472 MHz
23-06-2026 12:52:14  VcfAutomationConfig[1386]: [INFO] Using cluster total Memory limit: 786428 MiB
23-06-2026 12:52:14  VcfAutomationConfig[1386]: [INFO] Using cluster total Storage limit: 3686336 MiB
23-06-2026 12:52:14  VcfAutomationConfig[1386]: [INFO] Retrieving storage profiles from vCenter: vc-mgmt-a.site-a.vcf.lab
23-06-2026 12:52:14  VcfAutomationConfig[1386]: [INFO] Retrieving storage profiles from vCenter: urn:vcloud:vimserver:98256328-7b58-4f6b-badc-d6105c5093ef
23-06-2026 12:52:15  VcfAutomationConfig[1386]: [INFO] Retrieved 19 storage profile(s)
23-06-2026 12:52:15  VcfAutomationConfig[1386]: [INFO] Selected Storage Class: vSAN Default Storage Policy
23-06-2026 12:52:15  VcfAutomationConfig[1386]: [INFO] Creating region: us-west-a
23-06-2026 12:52:15  VcfAutomationConfig[1386]: [INFO] Region creation initiated successfully
23-06-2026 12:52:15  VcfAutomationConfig[1386]: [INFO] Task location: https://auto-a.site-a.vcf.lab/api/task/990ad716-175c-489e-9e76-ed8cab19ae3e
23-06-2026 12:52:15  VcfAutomationConfig[1386]: [INFO] Monitoring task status: https://auto-a.site-a.vcf.lab/api/task/990ad716-175c-489e-9e76-ed8cab19ae3e
23-06-2026 12:52:15  VcfAutomationConfig[1386]: [INFO] Task status: queued
23-06-2026 12:52:15  VcfAutomationConfig[1386]: [INFO] Checking status again in 10 seconds
23-06-2026 12:52:25  VcfAutomationConfig[1386]: [SUCCESS] Task completed successfully!
23-06-2026 12:52:30  VcfAutomationConfig[1386]: [INFO] Retrieving regions from VCF Automation
23-06-2026 12:52:30  VcfAutomationConfig[1386]: [INFO] Retrieved 1 region(s)
23-06-2026 12:52:30  VcfAutomationConfig[1386]: [INFO] Region created with ID: urn:vcloud:region:b161fe4c-b50f-467b-9a28-a991f925585b
23-06-2026 12:52:30  VcfAutomationConfig[1386]: [INFO] Saving region ID to config for organization: Acme-West-A
23-06-2026 12:52:30  VcfAutomationConfig[1386]: [INFO] Retrieving available zones for region: us-west-a
23-06-2026 12:52:30  VcfAutomationConfig[1386]: [INFO] Retrieving zones from VCF Automation for region: urn:vcloud:region:b161fe4c-b50f-467b-9a28-a991f925585b
23-06-2026 12:52:30  VcfAutomationConfig[1386]: [INFO] Retrieved 1 zone(s)
23-06-2026 12:52:30  VcfAutomationConfig[1386]: [INFO] Using zone: zone-mgmt-a
23-06-2026 12:52:30  VcfAutomationConfig[1386]: [INFO] Retrieving VM classes for region: us-west-a
23-06-2026 12:52:31  VcfAutomationConfig[1386]: [INFO] Retrieving VM classes from VCF Automation for region: urn:vcloud:region:b161fe4c-b50f-467b-9a28-a991f925585b
23-06-2026 12:52:31  VcfAutomationConfig[1386]: [INFO] Retrieved 16 VM class(es)
23-06-2026 12:52:31  VcfAutomationConfig[1386]: [INFO] Retrieving region storage policies
23-06-2026 12:52:31  VcfAutomationConfig[1386]: [INFO] Retrieving region storage policies from VCF Automation
23-06-2026 12:52:31  VcfAutomationConfig[1386]: [INFO] Retrieved 1 region storage policy/policies
23-06-2026 12:52:31  VcfAutomationConfig[1386]: [INFO] Selected Region Storage Policy: vSAN Default Storage Policy (ID: urn:vcloud:regionStoragePolicy:5e060841-c55c-4a54-b60f-ae61d691fc16)
23-06-2026 12:52:31  VcfAutomationConfig[1386]: [INFO] Creating organization: Acme West Region A
23-06-2026 12:52:31  VcfAutomationConfig[1386]: [INFO] Monitoring task status: https://auto-a.site-a.vcf.lab/api/task/4cfde592-00b5-42fd-8f6d-d767110c597f
23-06-2026 12:52:32  VcfAutomationConfig[1386]: [INFO] Task status: queued
23-06-2026 12:52:32  VcfAutomationConfig[1386]: [INFO] Checking status again in 10 seconds
23-06-2026 12:52:42  VcfAutomationConfig[1386]: [SUCCESS] Task completed successfully!
23-06-2026 12:52:47  VcfAutomationConfig[1386]: [INFO] Organization created with ID: urn:vcloud:org:bff6dc8b-896b-4d10-905f-39e91bc88ea3
23-06-2026 12:52:47  VcfAutomationConfig[1386]: [INFO] Saving organization ID to config for organization: Acme-West-A
23-06-2026 12:52:47  VcfAutomationConfig[1386]: [INFO] Creating region quota for organization
23-06-2026 12:52:47  VcfAutomationConfig[1386]: [INFO] Creating Virtual Datacenter: Acme-West-A_us-west-a with region quota
23-06-2026 12:52:47  VcfAutomationConfig[1386]: [INFO] Monitoring task status: https://auto-a.site-a.vcf.lab/api/task/bbbeff48-7f34-4cba-89c3-684696233255
23-06-2026 12:52:47  VcfAutomationConfig[1386]: [INFO] Task status: queued
23-06-2026 12:52:47  VcfAutomationConfig[1386]: [INFO] Checking status again in 10 seconds
23-06-2026 12:52:58  VcfAutomationConfig[1386]: [SUCCESS] Task completed successfully!
23-06-2026 12:53:03  VcfAutomationConfig[1386]: [INFO] Virtual Datacenter created with ID: urn:vcloud:virtualDatacenter:b62b0510-4133-40c0-97d4-d393729ae67c
23-06-2026 12:53:03  VcfAutomationConfig[1386]: [INFO] Configuring VM classes for Virtual Datacenter
23-06-2026 12:53:04  VcfAutomationConfig[1386]: [INFO] VM classes configured successfully for Virtual Datacenter
23-06-2026 12:53:04  VcfAutomationConfig[1386]: [INFO] Configuring storage policy for Virtual Datacenter
23-06-2026 12:53:05  VcfAutomationConfig[1386]: [INFO] Storage policy configured successfully for Virtual Datacenter
23-06-2026 12:53:05  VcfAutomationConfig[1386]: [INFO] Configuring organization networking settings
23-06-2026 12:53:05  VcfAutomationConfig[1386]: [INFO] Setting networking settings for organization
23-06-2026 12:53:05  VcfAutomationConfig[1386]: [INFO] Organization networking settings updated successfully
23-06-2026 12:53:05  VcfAutomationConfig[1386]: [INFO] Using Management Domain IP space CIDR: 10.1.8.0/25
23-06-2026 12:53:05  VcfAutomationConfig[1386]: [INFO] Skipping T0 retrieval as distributed mode selected
23-06-2026 12:53:05  VcfAutomationConfig[1386]: [INFO] Creating IP Space: ipspace-mgmt-a
23-06-2026 12:53:05  VcfAutomationConfig[1386]: [INFO] Adding IP Address Ranges to IP Space creation payload
23-06-2026 12:53:06  VcfAutomationConfig[1386]: [INFO] Monitoring task status: https://auto-a.site-a.vcf.lab/api/task/2e10ed1a-bdb4-4d7d-89a1-3c3921b75fe2
23-06-2026 12:53:07  VcfAutomationConfig[1386]: [INFO] Task status: queued
23-06-2026 12:53:07  VcfAutomationConfig[1386]: [INFO] Checking status again in 10 seconds
23-06-2026 12:53:17  VcfAutomationConfig[1386]: [SUCCESS] Task completed successfully!
23-06-2026 12:53:22  VcfAutomationConfig[1386]: [INFO] IP Space created with ID: urn:vcloud:ipSpace:be874004-8f9d-4c71-9692-dc18e6c3aebf
23-06-2026 12:53:22  VcfAutomationConfig[1386]: [INFO] Creating Distributed VLAN Connection (distributed supervisor mode)
23-06-2026 12:53:22  VcfAutomationConfig[1386]: [ERROR] Response status code does not indicate success: 400 (Bad Request).
23-06-2026 12:53:22  VcfAutomationConfig[1386]: [ERROR] Error creating Distributed VLAN Connection.
23-06-2026 12:53:22  VcfAutomationConfig[1386]: [ERROR]
{
  "minorErrorCode": "BAD_REQUEST",
  "message": "[ 2a08dc29-c7f1-44e0-951b-9a1c15080675 ] The IP Space \u0027ipspace-mgmt-a\u0027 associated with Distributed VLAN Connection \u0027distributed-vlan-connection-mgmt-a\u0027 must match Gateway CIDR 10.1.7.129/25.",
  "stackTrace": "com.vmware.vcloud.api.presentation.service.BadRequestException: The IP Space \u0027ipspace-mgmt-a\u0027 associated with Distributed VLAN Connection \u0027distributed-vlan-connection-mgmt-a\u0027 must match Gateway CIDR 10.1.7.129/25.\n\tat com.vmware.ssdc.util.ExceptionUtil.logAndThrowBadRequest(ExceptionUtil.java:78)\n\tat com.vmware.vcloud.networking.vcf.model.distributedTransitGateway.NetworkingDistributedVlanConnection.verifyGatewayOverlapWithIpSpace(NetworkingDistributedVlanConnection.java:416)\n\tat com.vmware.vcloud.networking.vcf.model.distributedTransitGateway.NetworkingDistributedVlanConnection.verifyAndSetIpSpace(NetworkingDistributedVlanConnection.java:397)\n\tat com.vmware.vcloud.networking.vcf.model.distributedTransitGateway.NetworkingDistributedVlanConnection.validateAndSetProperties(NetworkingDistributedVlanConnection.java:381)\n\tat com.vmware.vcloud.networking.vcf.model.distributedTransitGateway.NetworkingDistributedVlanConnection.createLogicalRecord(NetworkingDistributedVlanConnection.java:132)\n\tat com.vmware.vcloud.networking.vcf.services.handlerproxy.DistributedVlanConnectionsHandlerProxyImpl.createDistributedVlanConnectionAsync(DistributedVlanConnectionsHandlerProxyImpl.java:101)\n\tat com.vmware.vcloud.api.rest.openapi.impl.vcf.networking.DistributedVlanConnectionsApiHandler.createDistributedVlanConnection(DistributedVlanConnectionsApiHandler.java:41)\n\tat java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)\n\tat java.base/java.lang.reflect.Method.invoke(Method.java:580)\n\tat org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:360)\n\tat org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:196)\n\tat org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)\n\tat org.springframework.aop.framework.adapter.MethodBeforeAdviceInterceptor.invoke(MethodBeforeAdviceInterceptor.java:58)\n\tat org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:184)\n\tat com.vmware.vcloud.common.validation.AbstractMethodInterceptor.invoke(AbstractMethodInterceptor.java:41)\n\tat org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:184)\n\tat org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:223)\n\tat jdk.proxy8/jdk.proxy8.$Proxy1054.createDistributedVlanConnection(Unknown Source)\n\tat java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:103)\n\tat java.base/java.lang.reflect.Method.invoke(Method.java:580)\n\tat org.apache.cxf.service.invoker.AbstractInvoker.performInvocation(AbstractInvoker.java:179)\n\tat org.apache.cxf.service.invoker.AbstractInvoker.invoke(AbstractInvoker.java:96)\n\tat org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:200)\n\tat com.vmware.vcloud.api.rest.jaxrs.ContextClassLoaderInvoker.invoke(ContextClassLoaderInvoker.java:27)\n\tat org.apache.cxf.jaxrs.JAXRSInvoker.invoke(JAXRSInvoker.java:103)\n\tat org.apache.cxf.interceptor.ServiceInvokerInterceptor$1.run(ServiceInvokerInterceptor.java:59)\n\tat org.apache.cxf.interceptor.ServiceInvokerInterceptor.handleMessage(ServiceInvokerInterceptor.java:96)\n\tat org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:307)\n\tat org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)\n\tat org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:267)\n\tat org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:233)\n\tat org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:207)\n\tat org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:159)\n\tat org.apache.cxf.transport.servlet.CXFNonSpringServlet.invoke(CXFNonSpringServlet.java:224)\n\tat org.apache.cxf.transport.servlet.AbstractHTTPServlet.handleRequest(AbstractHTTPServlet.java:312)\n\tat org.apache.cxf.transport.servlet.AbstractHTTPServlet.doPost(AbstractHTTPServlet.java:217)\n\tat jakarta.servlet.http.HttpServlet.service(HttpServlet.java:547)\n\tat org.apache.cxf.transport.servlet.AbstractHTTPServlet.service(AbstractHTTPServlet.java:279)\n\tat org.eclipse.jetty.ee9.servlet.ServletHolder$NotAsync.service(ServletHolder.java:1421)\n\tat org.eclipse.jetty.ee9.servlet.ServletHolder.handle(ServletHolder.java:780)\n\tat org.eclipse.jetty.ee9.servlet.ServletHandler$ChainEnd.doFilter(ServletHandler.java:1668)\n\tat org.springframework.security.web.FilterChainProxy.lambda$doFilterInternal$3(FilterChainProxy.java:231)\n\tat org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:365)\n\tat com.vmware.vcloud.security.filters.ValidityExceptionFilter.doFilterHttp(ValidityExceptionFilter.java:47)\n\tat com.vmware.vcloud.security.filters.HttpFilterBean.doFilter(HttpFilterBean.java:35)\n\tat org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:374)\n\tat org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:100)\n\tat org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:116)\n\tat org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:374)\n\tat com.vmware.vcloud.security.web.RestSessionFilter.doFilter(RestSessionFilter.java:265)\n\tat org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:374)\n\tat com.vmware.vcloud.security.web.MultisiteAuthContextFilter.doFilter(MultisiteAuthContextFilter.java:78)\n\tat org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:374)\n\tat com.vmware.vcloud.security.web.CellLivenessCheckFilter.doFilter(CellLivenessCheckFilter.java:52)\n\tat org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:374)\n\tat com.vmware.vcloud.security.filters.ConversationFilter$1.run(ConversationFilter.java:39)\n\tat com.vmware.vcloud.security.filters.ConversationFilter$1.run(ConversationFilter.java:37)\n\tat com.vmware.vcloud.common.persist.ConversationContextExecutor.execute(ConversationContextExecutor.java:67)\n\tat com.vmware.vcloud.security.filters.ConversationFilter.doFilter(ConversationFilter.java:45)\n\tat org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:374)\n\tat com.vmware.vcloud.security.web.PenTestHeadersFilter.doFilter(PenTestHeadersFilter.java:42)\n\tat org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:374)\n\tat com.vmware.vcloud.security.web.SecurityContextCleanerFilter.doFilter(SecurityContextCleanerFilter.java:31)\n\tat org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:374)\n\tat com.vmware.vcloud.api.rest.versioning.OpenApiAcceptHeaderFilter.doFilter(OpenApiAcceptHeaderFilter.java:93)\n\tat org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:374)\n\tat com.vmware.vcloud.openapi.OpenApiPathAliasFilter.doFilter(OpenApiPathAliasFilter.java:45)\n\tat org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:374)\n\tat com.vmware.vcloud.openapi.OpenApiIdentifierFilter.doFilter(OpenApiIdentifierFilter.java:34)\n\tat org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:374)\n\tat org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:233)\n\tat org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:191)\n\tat org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:362)\n\tat org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:278)\n\tat org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:210)\n\tat org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)\n\tat com.vmware.vcloud.common.web.deployment.impl.HostCheckerFilter.doFilter(HostCheckerFilter.java:107)\n\tat org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:202)\n\tat org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)\n\tat com.vmware.vcloud.common.web.deployment.impl.RequestDiagnosticFilter.doFilter(RequestDiagnosticFilter.java:161)\n\tat org.eclipse.jetty.ee9.servlet.FilterHolder.doFilter(FilterHolder.java:202)\n\tat org.eclipse.jetty.ee9.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1638)\n\tat org.eclipse.jetty.ee9.servlet.ServletHandler.doHandle(ServletHandler.java:526)\n\tat org.eclipse.jetty.ee9.nested.ScopedHandler.handle(ScopedHandler.java:127)\n\tat org.eclipse.jetty.ee9.security.SecurityHandler.handle(SecurityHandler.java:603)\n\tat org.eclipse.jetty.ee9.nested.HandlerWrapper.handle(HandlerWrapper.java:124)\n\tat org.eclipse.jetty.ee9.nested.ScopedHandler.nextHandle(ScopedHandler.java:197)\n\tat org.eclipse.jetty.ee9.nested.SessionHandler.doHandle(SessionHandler.java:612)\n\tat org.eclipse.jetty.ee9.nested.ScopedHandler.nextHandle(ScopedHandler.java:195)\n\tat org.eclipse.jetty.ee9.nested.ContextHandler.doHandle(ContextHandler.java:1045)\n\tat org.eclipse.jetty.ee9.nested.ScopedHandler.nextScope(ScopedHandler.java:164)\n\tat org.eclipse.jetty.ee9.servlet.ServletHandler.doScope(ServletHandler.java:483)\n\tat org.eclipse.jetty.ee9.nested.ScopedHandler.nextScope(ScopedHandler.java:162)\n\tat org.eclipse.jetty.ee9.nested.SessionHandler.doScope(SessionHandler.java:589)\n\tat org.eclipse.jetty.ee9.nested.ScopedHandler.nextScope(ScopedHandler.java:162)\n\tat org.eclipse.jetty.ee9.nested.ContextHandler.doScope(ContextHandler.java:966)\n\tat org.eclipse.jetty.ee9.nested.ScopedHandler.handle(ScopedHandler.java:125)\n\tat org.eclipse.jetty.ee9.nested.ContextHandler.handle(ContextHandler.java:1719)\n\tat org.eclipse.jetty.ee9.nested.HttpChannel$RequestDispatchable.dispatch(HttpChannel.java:1565)\n\tat org.eclipse.jetty.ee9.nested.HttpChannel.dispatch(HttpChannel.java:724)\n\tat org.eclipse.jetty.ee9.nested.HttpChannel.handle(HttpChannel.java:512)\n\tat org.eclipse.jetty.ee9.nested.ContextHandler$CoreContextHandler$CoreToNestedHandler.handle(ContextHandler.java:3029)\n\tat org.eclipse.jetty.server.handler.ContextHandler.handle(ContextHandler.java:1071)\n\tat org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:181)\n\tat org.eclipse.jetty.server.handler.gzip.GzipHandler.handle(GzipHandler.java:611)\n\tat org.eclipse.jetty.server.Handler$Wrapper.handle(Handler.java:740)\n\tat org.eclipse.jetty.rewrite.handler.RewriteHandler.handle(RewriteHandler.java:138)\n\tat org.eclipse.jetty.server.Handler$Wrapper.handle(Handler.java:740)\n\tat org.eclipse.jetty.server.handler.EventsHandler.handle(EventsHandler.java:81)\n\tat io.micrometer.jetty12.server.TimedHandler.handle(TimedHandler.java:173)\n\tat org.eclipse.jetty.server.Server.handle(Server.java:182)\n\tat org.eclipse.jetty.server.internal.HttpChannelState$HandlerInvoker.run(HttpChannelState.java:677)\n\tat org.eclipse.jetty.server.internal.HttpConnection.onFillable(HttpConnection.java:416)\n\tat org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:322)\n\tat org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:105)\n\tat org.eclipse.jetty.io.ssl.SslConnection$SslEndPoint.onFillable(SslConnection.java:612)\n\tat org.eclipse.jetty.io.ssl.SslConnection.onFillable(SslConnection.java:413)\n\tat org.eclipse.jetty.io.ssl.SslConnection$2.succeeded(SslConnection.java:155)\n\tat org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:105)\n\tat org.eclipse.jetty.io.SelectableChannelEndPoint$1.run(SelectableChannelEndPoint.java:53)\n\tat org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.runTask(AdaptiveExecutionStrategy.java:480)\n\tat org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.consumeTask(AdaptiveExecutionStrategy.java:443)\n\tat org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.tryProduce(AdaptiveExecutionStrategy.java:293)\n\tat org.eclipse.jetty.util.thread.strategy.AdaptiveExecutionStrategy.run(AdaptiveExecutionStrategy.java:201)\n\tat com.vmware.vcloud.common.threading.ExtendedJettyQueuedThreadPool$CleaningRunnable.run(ExtendedJettyQueuedThreadPool.java:58)\n\tat org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:311)\n\tat com.vmware.vcloud.common.threading.ExtendedJettyQueuedThreadPool$CleaningRunnable.run(ExtendedJettyQueuedThreadPool.java:58)\n\tat org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:981)\n\tat com.vmware.vcloud.common.threading.ExtendedJettyQueuedThreadPool.runJob(ExtendedJettyQueuedThreadPool.java:43)\n\tat org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.doRunJob(QueuedThreadPool.java:1211)\n\tat org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1166)\n\tat java.base/java.lang.Thread.run(Thread.java:1583)\n"
}
23-06-2026 12:53:22  VcfAutomationConfig[1386]: [ERROR] Failed to create VCFA All-Apps Organization
23-06-2026 12:53:22  VcfAutomationConfig[1386]: [ERROR] Exiting Function New-VcfAutomationDistributedVlanConnection

Reproduction steps

1. Ran New-HoloDeckInstance -Version 9.1.0.0 -InstanceID XXXX -DepotType Offline -vSANMode OSA -Site a -ManagementOnly -DeployVcfAutomation -DeploySupervisorMgmtDomain Distributed -NsxEdgeClusterMgmtDomain -VnaClusterMgmtDomain successfully
2. Ran Update-HoloDeckInstance -Site a -AddVcfAutomationAllAppsOrg -VIDomain Management right afterwards and got an error about incorrect IP space

Possible Workaround? I'm not expert on this for sure, but I updated the ipspace-mgmt-a to use 10.1.7.129 - 10.1.7.254 and after cleaning up the partially deployed Region, I was able to successfully run the command however I'm not sure if it's the IP Space or the CIDR that's incorrect so not sure if this is the right fix.

Expected behavior

23-06-2026 13:08:46  VcfAutomationConfig[1386]: [SUCCESS] VCFA All-Apps Organization created successfully!
23-06-2026 13:08:46  VcfAutomationConfig[1386]: [SUCCESS] Region: us-west-a (ID: urn:vcloud:region:a0532b81-68de-4bd6-b9fc-3f91fd893928)
23-06-2026 13:08:46  VcfAutomationConfig[1386]: [SUCCESS] Organization: Acme West Region A (ID: urn:vcloud:org:bff6dc8b-896b-4d10-905f-39e91bc88ea3)
23-06-2026 13:08:46  VcfAutomationConfig[1386]: [SUCCESS] Virtual Datacenter: Acme-West-A_us-west-a (ID: )
23-06-2026 13:08:46  VcfAutomationConfig[1386]: [SUCCESS]   CPU Limit: 281472 MHz, Memory Limit: 786428 MiB, Storage Limit: 3686336 MiB
23-06-2026 13:08:46  VcfAutomationConfig[1386]: [SUCCESS] IP Space: ipspace-mgmt-a (ID: urn:vcloud:ipSpace:be874004-8f9d-4c71-9692-dc18e6c3aebf)
23-06-2026 13:08:46  VcfAutomationConfig[1386]: [SUCCESS] Distributed VLAN Connection: (ID: urn:vcloud:distributedVlanConnection:63400440-8aa6-49d8-930f-85e51e615fee)
23-06-2026 13:08:46  VcfAutomationConfig[1386]: [SUCCESS] User: acme-west-a added with Organization Administrator role

Relevant logs

Additional context

No response