Networking

Downstream cluster reaches the gateway and the internet, but the WireGuard tunnel (wg0) to the Rancher Manager is down

Rancher stuck: waiting for cluster agent to connect

Rancher provisioning hung on “waiting for cluster agent to connect”. The agent was healthy, DNS was fine. The real cause was a down WireGuard tunnel to the Rancher subnet.