fierce-zoo-18185
09/11/2025, 10:09 AMserver-url
from VIP to FQDN and added a GoDaddy TLS cert.
• I updated the kube-apiserver cert on node1 & node3 to include the FQDN SAN → they work fine.
• On node2, /etc/pki/trust/anchors/embedded-rancher-ca.pem
is empty and join fails:
• tls: failed to verify certificate: x509: certificate signed by unknown authority
.
• <http://setting.management.cattle.io|setting.management.cattle.io> agent-tls-mode
doesn’t exist in Harvester 1.3.
Question:
How can I make node2 trust the FQDN and join the cluster without reinstalling?
Thanks 🙏