Since setting up Rancher to use LetsEncrypt, I haven't been able to get rancher to communicate properly with Harvester. From within my rancher cluster, I've confirmed with curl that tls is failing (it sees Harvester offering a self-signed cert). I'm pretty sure that I just need to add Harvester's CA cert to rancher but it's not working.
1. I upgraded the rancher deployment to add 'additionalTrustedCAs: true'.
2. I've confirmed that in the rancher deployment includes the volume mount with mountPath: /etc/rancher/ssl/ca-additional.pem
3. Copied the contents of /var/lib/rancher/rke2/server/tls/server-ca.crt on my first Harvester node to /etc/rancher/ssl/ca-additional.pem on all three of my rancher cluster nodes.
4. I've restarted rke2-server on all three of my rancher cluster nodes, for good measure.
curl --verbose https://
harvester-cluster:6443 still fails with "curl: (60) SSL certificate problem: self-signed certificate". Any suggestions on where I've gone wrong?