Can't access control-planes with proxied DNS entries from cloudflare about terraform-hcloud-kube-hetzner HOT 5 CLOSED

@mysticaltech I should've mentioned that as soon as I disable "proxy" mode at cloudflare, the connection works flawlessly. Thing is, I'd really like to use proxied DNS.

Without proxy, it returns the correct IPs.

Hm, probably proxied DNS entries use their own SSL certificate and that is what confuses kubectl since it doesn't match public key in kubeconfig?

from terraform-hcloud-kube-hetzner.

@maaft Are you sure it wasn't the dns that needed time to propagate?

from terraform-hcloud-kube-hetzner.

@maaft If you click the orange cloud to disable proxying, does it work?

Also dig +a your-domain.com to know which ip it's returning without proxy, and check if it's the correct one.

from terraform-hcloud-kube-hetzner.

@maaft Hmm, maybe check cloudflare's ssl settings, choose source to clouflare to not enforce ssl, because it's already encrypted. It will only enforce from your machine to cloudflare. Try that!

from terraform-hcloud-kube-hetzner.

Moving this to a discussion because it's probably not a bug on our side. But will continue to assist the best I can.

from terraform-hcloud-kube-hetzner.