Hi all,
this is my first post, so be softly 
I’m trying to install Rancher2 on a vSphereCluster with a Private CA Root Certificate (following this guide https://rancher.com/docs/rancher/v2.x/en/installation/single-node/ ).
YThe host is a ubuntu server with certs correctly installed.
I started rancher with this command:
docker run -d --restart=unless-stopped -p 80:80 -p 443:443 -v /etc/ssl/certs:/etc/ssl/certs -e SSL_CERT_DIR="/etc/ssl/certs" rancher/rancher:latest
The nodes was created correctly until the state “Waiting to register with Kubernetes”.
Now I have this error:
Can’t pull Docker image [rancher/rke-tools:v0.1.10] for host [etcd-host-IP]: Error response from daemon: Get https://registry-1.docker.io/v2/: x509: certificate signed by unknown authority
It seems that etcd node can’t pull rke-tools image.
If I try "docker pull rancher/rke-tools:v0.1.10 from etcd node, i get the same error (x509: certificate signed by unknown authority).
How can I install certs on RancherOS etcd nodes?
Thanks for help.