Container Platform: Preventing Supervisor Failures Caused by Proxy Image Repo Access

In VCF 9 with vSphere with Tanzu 9.0, Supervisor management can fail if the cluster inherits proxy settings that prevent access to required image repositories.

Source KB: https://knowledge.broadcom.com/external/article/421754/vks-cluster-management-config-error-the.html

Orchestrator action: Supervisor image repo connectivity check

Goal: validate image repository reachability before enabling or modifying Supervisor services.

Workflow steps (VMware Aria Orchestrator)

• Create a workflow: 'VKS - Verify Image Repo Connectivity'
• Inputs: vCenter (VC:SdkConnection), supervisorCluster (VC:ClusterComputeResource), testUrl (string)
• Step 1: Query vCenter proxy configuration and record whether Supervisor inherits it.
• Step 2: Run a connectivity test from a Supervisor control plane context (API-driven health check or scripted check) to testUrl.
• Step 3: If unreachable, fail with actionable output: proxy host/port + recommended remediation path.

Expected outcome

Supervisor changes stop failing late. You detect reachability problems before activation.