Rancher 2.8.5创建 k8s 集群成功，但是注册集群节点报证书问题

Rancher 2.x
1

Rancher Server 设置

  • Rancher 版本：2.8.5
  • 安装选项 (Docker install/Helm Chart):
    • 如果是 Helm Chart 安装，需要提供 Local 集群的类型（RKE1, RKE2, k3s, EKS, 等）和版本：
  • 在线或离线部署：
    docker run 的方式启动

下游集群信息

  • Kubernetes 版本: 1.28.10
  • Cluster Type (Local/Downstream):
    • 如果 Downstream，是什么类型的集群?(自定义/导入或为托管 等):
      自定义

用户信息

  • 登录用户的角色是什么？ （管理员/集群所有者/集群成员/项目所有者/项目成员/自定义）：
    • 如果自定义，自定义权限集：

主机操作系统：
redhat 8.1
问题描述：
用 docker run 这种方式安装 rancher 2.8.5，拉取私有镜像 harbor，现在 local-node 的集群正常了；创建了新 k8s demo集群，但是节点加入demo集群的时候，一直报证书问题
重现步骤：

结果：

预期结果：

截图：

image
image1598×776 116 KB

image
image1904×506 29.8 KB

其他上下文信息：

日志 

  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 32317    0 32317    0     0  2254k      0 --:--:-- --:--:-- --:--:-- 2103k
[INFO]  Label: cattle.io/os=linux
[INFO]  Role requested: etcd
[INFO]  Role requested: controlplane
[INFO]  Role requested: worker
[INFO]  Using default agent configuration directory /etc/rancher/agent
[INFO]  Using default agent var directory /var/lib/rancher/agent
[INFO]  Determined CA is necessary to connect to Rancher
[INFO]  Successfully downloaded CA certificate
[INFO]  Value from https://linking-rancher-zb.di.bigdata/cacerts is an x509 certificate
curl: (60) SSL certificate problem: self signed certificate in certificate chain
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
[ERROR]  000 received while testing Rancher connection. Sleeping for 5 seconds and trying again
curl: (60) SSL certificate problem: self signed certificate in certificate chain
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
[ERROR]  000 received while testing Rancher connection. Sleeping for 5 seconds and trying again
2

感觉想是自签名证书有问题，可参考：从0开始安装rancher通过自签名证书 - Ksd的博客 | KSD Blog