This message was deleted.

Maybe this helps you https://rancher.com/docs/rke/latest/en/config-options/services/services-extras/ I specified extra args for my kube_controller: kube_controller: extra_args: cluster-signing-cert-file: /etc/kubernetes/ssl/kube-ca.pem cluster-signing-key-file: /etc/kubernetes/ssl/kube-ca-key.pem

Awesome thank you. I ended up using extra_binds to mount /etc/ssl/certs into the containers.

extra_binds:
  - '/etc/ssl/certs:/etc/ssl/certs`