Self assigned SSL Cert ist "not trusted" about quickstart

[Isengo1989]

Since Rancher 2.x there is an option to add an SSL Cert directly by Certbot/Lets Encrypt which is handy...

docker run -d ..... --acme-domain rancher.YOURDOMAIN.com

Works like a charm - maybe add it to this repo

[Isengo1989]

Sadly the provisioning is not working when just adding --acme-domain

[superseb]

The agents are connecting to the IP address assigned to the server (https://github.com/rancher/quickstart/blob/master/do/main.tf#L131), and that IP is not in the certificate so it will fail. You will need to adjust this if you want it to work with --acme-domain. (replacing passing the IP for a configured hostname)

Here is a way to extract the generated CA from Rancher to use to validate the connection: https://gist.github.com/superseb/2732303f0c85d6aca8fab617ea262ebb