A platform operator runs a kubectl command and receives the error " Couldn’t get current...

In the VMware Cloud Foundation (VCF) 9.0 ecosystem, specifically when interacting with the vSphere Supervisor or vSphere Kubernetes Service (VKS) , the error " Couldn’t get current server API list " is a classic indicator of an authentication or connectivity failure between the local workstation and the Kubernetes API server. This typically occurs because the short-lived security token stored in the local kubeconfig file has expired, or the user has not yet established a valid session with the Supervisor.

The definitive resolution is to run the kubectl vsphere login command. This command is part of the vSphere CLI plugin and is specifically designed to facilitate the authentication flow between the developer ' s machine and the vSphere environment. When executed, it triggers the identity provider (IdP) workflow—utilizing OpenID Connect (OIDC) via the integrated Pinniped service—to verify the user ' s credentials. Once authenticated, the plugin automatically retrieves the necessary cluster connection details and updates the local kubeconfig with a fresh, valid bearer token and the correct server context. While kubectl config use-context (Option A) can switch between existing profiles, it cannot resolve a missing or expired API session. By running the login command, the platform operator ensures that the kubectl client can once again communicate with the declarative API of the Supervisor, allowing for continued management of namespaces, workload clusters, and associated SDDC resources.