https://rancher.com/ logo
Title
s

silly-airline-38945

06/29/2022, 12:43 PM
Hi @quiet-fountain-46593 tried another upgrade from rke2 1.21 to 1.22 and checking enforcer and controller logs after restarting pods. The consul agent on enforcer does not start. But a lot of
Failed to get container task - error=no running task found:
is seen in the logs last common logline before these are:
main.parseHostAddrs: - maxMTU=1500
q

quiet-fountain-46593

06/30/2022, 10:32 PM
Can you please provide a little bit more detail on which rancher versions you were on when you built the rke2 cluster, installed neuvector, upgraded etc… It should work, but possible there is a case in certain upgrade order that causes an issue.
s

silly-airline-38945

07/01/2022, 8:43 AM
Hi @quiet-fountain-46593, I tried this morning a clean v1.22.10+rke2r2 install. 1. FlatCar OS 3139.2.3 2. Rancher v2.6.5 First adding Neuvector via cluster tools, using default rancher mirror images (5.0.0). enforcers still not coming up. So, since 5.0.1 tag was released (not as rancher mirror yet) I tried these ones and now everything is OK. Not sure which PR in neuvector has fixed this issue.
r

ripe-actor-83292

07/01/2022, 4:28 PM
I do not recall anything in the forthcoming release notes I had a chance to glance at, but when they drop, maybe there will be a revelation in there? Regardless, we’re glad you got it humming along in your configuration. 🙂
👍 1
q

quiet-fountain-46593

07/01/2022, 5:25 PM
There was a bugfix for
Enforcer is not becoming operational on k8s 1.24 cluster with 1.64 containerd runtime. Separately, enforcer sometimes fails to start.
😍 1
🎯 1
maybe related
but glad it is working now.
👍 1