Moin all! I have question regarding cert/tls setup on a rke2 rancher:
My VMs for the nodes are in a different domain that my load balancer, e.g.: nodes.backend.local and lb.frontend.dev
Now I’m seeing that the certs provided behind /cacerts on my first node does not provide a valid cert for nodes.backend.local but just for backend.local and the actual IP.
For initial setup, I added the IP as server address to the config.yaml which works but sending kubectl commands through the load balancer doesn’t work. How should the tls section of the config.yaml look like or is that not relevant for the initial CA creation?