CA cert validation failed; certificate is not valid for FQDN

[chrisatcho]

Hi all

I'm deploying an RKE2 cluster through the community Ansible playbook, and I'm hitting issues with the host's certificate generation.

The first control plane host comes up without issues, but then other members struggle to connect over TLS to this host.

Has anyone seen something similar where I may have misconfigured the deployment?

Logs from rke2-server.service:

Jul 29 08:51:09 dev-k8s-cp-01 systemd[1]: Starting rke2-server.service - Rancher Kubernetes Engine v2 (server)...
Jul 29 08:51:09 dev-k8s-cp-01 sh[26687]: + /usr/bin/systemctl is-enabled --quiet nm-cloud-setup.service
Jul 29 08:51:09 dev-k8s-cp-01 rke2[26694]: time="2024-07-29T08:51:09Z" level=warning msg="not running in CIS mode"
Jul 29 08:51:09 dev-k8s-cp-01 rke2[26694]: time="2024-07-29T08:51:09Z" level=info msg="Applying Pod Security Admission Configuration"
Jul 29 08:51:09 dev-k8s-cp-01 rke2[26694]: time="2024-07-29T08:51:09Z" level=info msg="Starting rke2 v1.28.11+rke2r1 (6b12d7a783238b72da8450fa1b6ec587cebb79ed)"
Jul 29 08:51:09 dev-k8s-cp-01 rke2[26694]: time="2024-07-29T08:51:09Z" level=fatal msg="starting kubernetes: preparing server: CA cert validation failed: Get \"https://dev-k8s-cp-00.dev.sy5.local.domain:9345/cacerts\": tls: failed to verify certificate: x509: certificate is valid for dev-k8s-cp-00, kubernetes, kubernetes.default, kubernetes.default.svc, kubernetes.default.svc.cluster.local, localhost, not dev-k8s-cp-00.dev.local.domain"
Jul 29 08:51:03 dev-k8s-cp-01 systemd[1]: Failed to start rke2-server.service - Rancher Kubernetes Engine v2 (server).
Jul 29 08:51:09 dev-k8s-cp-01 systemd[1]: rke2-server.service: Scheduled restart job, restart counter is at 1037.

Thanks for any and all help