Recently patched my rancher deployment to change it from using internal tls certificates to using a cert stored in a secret (populated by cert-manager). This worked fine for the UI but now using kubectl interaction with the cluster fails with 'unknown authority'. Rancher is running on an rke2 cluster. Why did changing the Rancher cert cause basic kubernetes communication to start failing? What's the proper way to realign my certificates?