hi, while setting up rke2 using external LB facing error. i have already added lb IP in tls-san and while adding 2 nd master getting this error May 27 111414 SDI-RMS-Master02 rke2[1273344]: time=“2024-05-27T111414+03:00” level=fatal msg=“starting kubernetes: preparing server: failed to get CA certs: Unauthorized”

Can you confirm that the token is the same in the first and the second node? The token you provided in the config

Yes token is same. Seems like problem is only with f5 haproxy is working. But we was able to reach master01 on both ports 6443 and 9345

I remember reading this issue with haproxy: https://github.com/k3s-io/k3s/issues/2852#issuecomment-792370658

For now, both HA Proxy and F5 are in L4 mode. There should not be any issues. Maybe some TLS inspection on F5 or the firewall in between is causing problems. For now, using HA Proxy is working. We are checking in parallel to determine why F5 is failing.