So I’m working on setting up RKE2 as the underlyin...
# general
a
So I’m working on setting up RKE2 as the underlying cluster to host Rancher on. As part of the whole HA setup I am working on the load balancer config. I can hit any one of the rke2-server nodes directly with kubectl and it works fine however when I switch it over to the load balancer url which has a self signed ssl certificate on it I start getting a certificate signed by untrusted CA error from kubectl when trying to do anything even as simple as kubectl get nodes. I’ve added the CA root certificate the the host OS (RHEL9) trust store for all of the server nodes and then restarted the entire cluster after doing so but I’m still getting the same error. What am I missing? Also probably worth nothing I currently don’t want to replace the K8S/rke2 CAs with anything I basically just want to get kubectl trusting my self signed CA so I can get back to work through the load balancer rather than the server ips themselves.