I think I saw people doing that. But they used VMs with static IP addresses for that. So no dynamic provisioning of nodes. You can prepare the machineGlobalConfig with the necessary values, probably also a TLS-SAN and a certificate which includes the node addresses and the LB address.
But I would never try that myself. It's not really necessary, Rancher is perfectly able to handle the loss of the first node and replace it.