When creating a cluster through rancher, using the Harvester driver, Harvester makes a request to rancher during provisioning (eg., https://rancher.somedomain.com/k8x/clusters/c-m-********/apis/harvesterhci.io/v1beta1/settings/server-version). I'm getting an x509 error there (signed by unkown authority). All other downstream clusters are working properly (I recently switched from internal to public cert). Any idea what's holding on to the original certificate-authority data?