Skip to main content
Question

NKP Deployment Issue - Bastion VM Failing with Invalid Nutanix Credentials

  • August 3, 2026
  • 4 replies
  • 46 views
M

Dear Team,

I am trying to deploy an NKP cluster using the Prism Central Marketplace. All prerequisites have been completed successfully, and the deployment process is starting normally.

However, after the Bastion VM creation step, the deployment continuously fails with the error message indicating "Nutanix username/password is invalid." I have already changed the Nutanix credentials and retried the deployment using the updated password, but the same issue persists.

For your reference, the environment details are as follows:

  • Prism Central Version: 7.6
  • AOS Version: 7.6
  • NKP Image: nkp-rocky-9.7-release-cis-1.34.3-20260504011927.qcow2

 

Could you please check and advise if this is a known issue or a bug related to this NKP image/version combination? Kindly confirm the recommended fix or any additional troubleshooting steps required.

4 replies

M

 

Eric De Witte
Nutanix Employee
  • Eric De WitteNutanix Employee
  • Nutanix Employee
  • August 3, 2026

Hi ​@Muthu Kumar Raja 


You should be able to collect the logs from the bastion host to get more details about the issue.

Could you also provide more information on how you created and configured the specific user for NKP deployment?
Did you use a “super admin” role or a “least priviledge” role ? How did you configure the “Authorization Policy” ?

Have you tried logging on Prism Central using the credentials you provided to ensure its working as expected ?

M

Warning: REGISTRY_MIRROR_URL is not set. Skipping registry mirror configuration.
Deploying the cluster in AGF mode with local bundles.
Running: nkp create cluster nutanix --cluster-name=gbm-nkp-clus   --control-plane-prism-element-cluster=GBM-NTNX-Prod   --worker-prism-element-cluster=GBM-NTNX-Prod   --control-plane-subnets=GBM-KUBER-NTX   --worker-subnets=GBM-KUBER-NTX   --control-plane-endpoint-ip=10.3.33.225   --csi-storage-container=default-container-26711648118618   --endpoint=https://10.3.33.100:9440   --control-plane-vm-image=nkp-rocky-9.7-release-cis-1.34.3-20260504011927.qcow2   --worker-vm-image=nkp-rocky-9.7-release-cis-1.34.3-20260504011927.qcow2   --kubernetes-service-load-balancer-ip-range=10.3.33.220-10.3.33.240   --ssh-username=konvoy   --csi-hypervisor-attached-volumes=true   --csi-reclaim-policy=Delete   --worker-cores-per-vcpu=1   --worker-memory=32   --worker-disk-size=80   --worker-vcpus=8   --control-plane-cores-per-vcpu=1   --control-plane-memory=16   --control-plane-disk-size=80   --control-plane-vcpus=4   --worker-replicas=4   --control-plane-replicas=3   --csi-file-system=ext4   --self-managed   --insecure --bundle=/home/konvoy/agf/container-images/kommander-image-bundle-v2.17.1.tar,/home/konvoy/agf/container-images/konvoy-image-bundle-v2.17.1.tar --timeout=60m --ssh-public-key-file=/home/konvoy/certs/node_ssh_public_key --control-plane-endpoint-port=6443 --kubernetes-pod-network-cidr=192.168.0.0/16 --kubernetes-service-cidr=10.96.0.0/12
2026-08-03 12:04:04 INF  • Creating a bootstrap cluster...
 ✓ Creating a bootstrap cluster
2026-08-03 12:04:36 INF  • Initializing new CAPI components...
 ✓ Initializing new CAPI components
2026-08-03 12:05:13 INF  • Initializing new CAPI components...
 ✓ Initializing new CAPI components
2026-08-03 12:05:20 INF  • Creating ClusterClass resources...
 ✓ Creating ClusterClass resources
2026-08-03 12:05:20 INF  • Creating ClusterClass resources...
 ✓ Creating ClusterClass resources
2026-08-03 12:05:20 INF  • Generating cluster configuration (Kubernetes resources)...
 ✓ Generating cluster configuration (Kubernetes resources)
2026-08-03 12:05:21 INF  • Running preflight checks...
secret/gbm-nkp-clus-pc-credentials created
secret/gbm-nkp-clus-pc-credentials-for-csi created
secret/gbm-nkp-clus-pc-credentials-for-konnector-agent created
secret/global-nutanix-credentials created
 ✗ Running preflight checks
2026-08-03 12:05:25 ERR     err="The following preflight checks failed:
---
Name:         NutanixCredentials
Explanation:  Failed to validate credentials: invalid Nutanix credentials. Please check the username and/or password.
User Input:   Environment variables NUTANIX_USER and NUTANIX_PASSWORD
Flag to skip: --skip-preflight-checks=NutanixCredentials
---
Please read the explanations, correct the user input as needed, and try again.
If you believe a check failure is incorrect, you can skip it by using the flag shown with its explanation."
Error: Cluster creation failed. Diagnosing with bootstrap config: gbm-nkp-clus-bootstrap.conf
2026-08-03 12:05:25 INF creating namespace nkp-diagnostics for node-diagnostics collector
2026-08-03 12:05:25 INF  • Collecting support bundle node-diagnostics...
2026-08-03 12:05:40 INF  ✓ Collecting support bundle node-diagnostics
2026-08-03 12:05:40 INF  • Collecting support bundle configmap...
2026-08-03 12:05:40 INF  ✓ Collecting support bundle configmap
2026-08-03 12:05:40 INF  • Collecting support bundle secret...
2026-08-03 12:05:40 INF  ✓ Collecting support bundle secret
2026-08-03 12:05:40 INF  • Collecting support bundle cluster-resources...
2026-08-03 12:05:44 INF  ✓ Collecting support bundle cluster-resources
2026-08-03 12:05:44 INF  • Collecting support bundle cluster-info...
2026-08-03 12:05:44 INF  ✓ Collecting support bundle cluster-info
2026-08-03 12:05:44 INF  • Collecting support bundle pod-logs...
 ✓ Collecting support bundle pod-logs
2026-08-03 12:05:45 INF  • Redacting support bundle...
 ✓ Redacting support bundle
2026-08-03 12:05:52 INF A support bundle has been created in the current directory
support-bundle-2026-08-03T12_05_25.tar.gz
=====> Please login to the bastion VM 10.3.33.226 with user konvoy and access the log bundle in /home/konvoy directory. <=====
=====> Log bundle has been created in /home/konvoy directory. <=====
 

M

Yes, I am unable to log in to the Bastion VM. I am using the Prism Central super admin account admin and I have not configured any Authorization Policy. I can log in to Prism Central successfully with the same credentials.

I have copied the deployment logs, but they are currently pending moderation approval. Once they are approved, I will share them with you for further analysis.

 

Terms & ConditionsAccessibility statement