This message was deleted.

Is the internal or external IP visible using an

ip a

command, because RKE2 (and transitively CAPBR) uses that to add IPs to certificates automatically. That’s why, for AWS, only internal IPs are added but no external ones (which need to be added as SANs).