Hello,
Thank you for this summary.
I’ve been trying to form a cluster on a 2nd interface different from the default interface, where I want the API servers to use this interface.
But whenever you configure the --advertise-address of the kube-apiserver, joining a node will break the server certificate and the node will never show up on kubectl get nodes even though it joins the dqlite cluster.
The csr.cert will say “changeme” and it won’t be possible to update it using refresh-certs.
It seems to only work if you join the node before changing the advertise-address