VMware vSAN 8.x
vSAN File Service
vSAN RDMA
When vSAN RDMA is enabled with vSAN File Service, the vdfsd-proxy fails to query the cluster encryption state resulting in vSAN File Service failing to re-enable properly after the upgrade.
vSAN Engineering is aware of this issue and working on a fix for future release.
Workaround
If the environment was already upgraded and vSAN File Service is in an unhealthy state
esxcli system secpolicy domain set -l warning -n vdfsProxyDom (This will allow the vdfsd-proxy to refresh the config store and get the correct cluster encryption status.)pkill vdfsd-proxy on all hosts to get the correct cluster encryption statusIf further assistance is required open a case with vSAN Support.