nevermind... just pulled apart the cluster-agent-tools.sh provided by SUSE. Such a pain in the ass guys. I know you have to deal with jetstack cert-manager having to update due to LetsEncrypt.. so this is very spaghetti but some of these issues via my searching have been known for at least 4 years. Thanks Seb for a lot of 'unsupported' info you've provided that has helped me learn more.