Unable to provision K3S downstream cluster in Rancher about k3s

[mdrahman-suse]

Validation on master branch with commit 94e29e2

Environment and config

Sles 15 sp4
1 etcd, 1 cp, 1 worker

Testing

• Install k3s on a split role cluster
• Ensure the cluster is up
• Perform the curl from etcd node
  • to localhost, should return data with nodeIP
  • to cp-only node, should return data with 403 Forbidden

Replication

~> k3s -v
k3s version v1.29.3+k3s1 (8aecc26b)
go version go1.21.8

• localhost

~> curl -ks https://localhost:6443/db/info
{"members":[{"ID":17663870494773375509,"name":"ip-xxx-xx-xx-140.us-east-2.compute.internal-2cb028bb","peerURLs":["https://xxx.xx.xx.140:2380"],"clientURLs":["https://xxx.xx.xx.140:2379"]}]}

• cp-only node

~> curl -ks https://<cp-hostname or ip>:6443/db/info
{"members":[{"ID":17663870494773375509,"name":"ip-xxx-xx-xx-140.us-east-2.compute.internal-2cb028bb","peerURLs":["https://xxx.xx.xx.140:2380"],"clientURLs":["https://xxx.xx.xx.140:2379"]}]}

Validation

~> k3s -v
k3s version v1.29.4+k3s-94e29e2e (94e29e2e)
go version go1.21.9

• localhost

~> curl -ks https://localhost:6443/db/info
{"members":[{"ID":16136583629868037345,"name":"ip-xxx-xx-x-55.us-east-2.compute.internal-cdf0642f","peerURLs":["https://xxx.xx.x.55:2380"],"clientURLs":["https://xxx.xx.x.55:2379"]}]}

• cp-only node

~> curl -ks https://<cp-hostname or ip>:6443/db/info
{
  "kind": "Status",
  "metadata": {},
  "status": "Failure",
  "message": "forbidden",
  "reason": "Forbidden",
  "code": 403
}

Note: Not able to validate in Rancher as this version is not supported yet. Will validate on supported versions with Rancher