Hi @quiet-fountain-46593 tried another upgrade from rke2 1.21 to 1.22 and checking enforcer and controller logs after restarting pods. The consul agent on enforcer does not start. But a lot of

Failed to get container task - error=no running task found:

is seen in the logs last common logline before these are:

main.parseHostAddrs: - maxMTU=1500

Can you please provide a little bit more detail on which rancher versions you were on when you built the rke2 cluster, installed neuvector, upgraded etc… It should work, but possible there is a case in certain upgrade order that causes an issue.

Hi @quiet-fountain-46593, I tried this morning a clean v1.22.10+rke2r2 install. 1. FlatCar OS 3139.2.3 2. Rancher v2.6.5 First adding Neuvector via cluster tools, using default rancher mirror images (5.0.0). enforcers still not coming up. So, since 5.0.1 tag was released (not as rancher mirror yet) I tried these ones and now everything is OK. Not sure which PR in neuvector has fixed this issue.

I do not recall anything in the forthcoming release notes I had a chance to glance at, but when they drop, maybe there will be a revelation in there? Regardless, we’re glad you got it humming along in your configuration. 🙂

There was a bugfix for

Enforcer is not becoming operational on k8s 1.24 cluster with 1.64 containerd runtime. Separately, enforcer sometimes fails to start.