Hi, we are doing a worker rotation to a new base image (rke2/vsphere), during this rotation 16 nodes upgraded fine, but the next worker gives doesnt get a worker role assigned

[FATAL]  You must select at least one role.

on the node which wont upgrade we see this in the agent logs

machine-plan': handler secret-watch: secret received was too old, requeuing"