Hi everyone i am trying to register harvester clus...
# random
b
Hi everyone i am trying to register harvester cluster to Rancher prime, and it stays in pending state , during dbeug i found that on my harvester cluster two pods are in crash loop state , [root@localhost external-snapshotter]# kubectl get pods -n cattle-system NAME READY STATUS RESTARTS AGE cattle-cluster-agent-6b8b7f498b-2jvhw 0/1 CrashLoopBackOff 1 (3s ago) 5s cattle-cluster-agent-6b8b7f498b-xck2q 0/1 CrashLoopBackOff 1 (2s ago) 5s suspecting them to be an issue I see it has cert issues [root@localhost external-snapshotter]# kubectl logs -n cattle-system cattle-cluster-agent-6b8b7f498b-2jvhw INFO: Environment: CATTLE_ADDRESS=10.52.1.160 CATTLE_CA_CHECKSUM=2b0fef7aff75773458d8aeb908897443101b91274978da6a758092e6f24c7c34 CATTLE_CLUSTER=true CATTLE_CLUSTER_AGENT_PORT=tcp://10.53.170.228:80 CATTLE_CLUSTER_AGENT_PORT_443_TCP=tcp://10.53.170.228:443 CATTLE_CLUSTER_AGENT_PORT_443_TCP_ADDR=10.53.170.228 CATTLE_CLUSTER_AGENT_PORT_443_TCP_PORT=443 CATTLE_CLUSTER_AGENT_PORT_443_TCP_PROTO=tcp CATTLE_CLUSTER_AGENT_PORT_80_TCP=tcp://10.53.170.228:80 CATTLE_CLUSTER_AGENT_PORT_80_TCP_ADDR=10.53.170.228 CATTLE_CLUSTER_AGENT_PORT_80_TCP_PORT=80 CATTLE_CLUSTER_AGENT_PORT_80_TCP_PROTO=tcp CATTLE_CLUSTER_AGENT_SERVICE_HOST=10.53.170.228 CATTLE_CLUSTER_AGENT_SERVICE_PORT=80 CATTLE_CLUSTER_AGENT_SERVICE_PORT_HTTP=80 CATTLE_CLUSTER_AGENT_SERVICE_PORT_HTTPS_INTERNAL=443 CATTLE_CLUSTER_REGISTRY=registry.rancher.com CATTLE_INGRESS_IP_DOMAIN=sslip.io CATTLE_INSTALL_UUID=b1dbf732-2442-46c5-9db7-a436271da9fe CATTLE_INTERNAL_ADDRESS= CATTLE_IS_RKE=false CATTLE_K8S_MANAGED=true CATTLE_NODE_NAME=cattle-cluster-agent-6b8b7f498b-2jvhw CATTLE_RANCHER_PROVISIONING_CAPI_VERSION=105.1.0+up0.6.0 CATTLE_RANCHER_WEBHOOK_VERSION=105.0.4+up0.6.5 CATTLE_SERVER=https://192.168.70.170:31747 CATTLE_SERVER_VERSION=v2.10.4 INFO: Using resolv.conf: search cattle-system.svc.cluster.local svc.cluster.local cluster.local nameserver 10.53.0.10 options ndots:5 INFO: https://192.168.70.170:31747/ping is accessible INFO: Value from https://192.168.70.170:31747/v3/settings/cacerts is an x509 certificate time="2025-05-05T090456Z" level=info msg="Listening on /tmp/log.sock" time="2025-05-05T090456Z" level=info msg="Rancher agent version v2.10.4 is starting" time="2025-05-05T090456Z" level=info msg="Testing connection to https://192.168.70.170:31747 using trusted certificate authorities within: /etc/kubernetes/ssl/certs/serverca" time="2025-05-05T090456Z" level=error msg="Could not securely connect to https://192.168.70.170:31747: Get \"https://192.168.70.170:31747\": tls: failed to verify certificate: x509: certificate signed by unknown authority (possibly because of \"x509: ECDSA verification failure\" while trying to verify candidate authority certificate \"dynamiclistener-ca@1744360806\")" Canb someone please help me surpassing this cert issue s?