From 64dfbf7315d304a3498517aaeeca119603cb8442 Mon Sep 17 00:00:00 2001
From: MichaelFisher1997 <contact@michaelfisher.tech>
Date: Sun, 1 Mar 2026 02:25:13 +0000
Subject: [PATCH] fix: use primary public IP for k3s join to match existing API
 cert SAN

---
 ansible/site.yml | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/ansible/site.yml b/ansible/site.yml
index 7a8f9e3..983e6fa 100644
--- a/ansible/site.yml
+++ b/ansible/site.yml
@@ -20,7 +20,7 @@
   vars:
     k3s_primary: true
     k3s_token: "{{ lookup('password', '/dev/null length=32 chars=ascii_letters,digits') }}"
-    k3s_primary_ip: "{{ ansible_all_ipv4_addresses | select('match', '^10\\.') | first }}"
+    k3s_primary_ip: "{{ ansible_default_ipv4.address }}"
     k3s_node_ip: "{{ ansible_all_ipv4_addresses | select('match', '^10\\.') | first }}"
 
   roles:
@@ -35,14 +35,10 @@
       register: node_token
       changed_when: false
 
-    - name: Get private IP
-      set_fact:
-        k3s_primary_private_ip: "{{ ansible_all_ipv4_addresses | select('match', '^10\\.') | first }}"
-
     - name: Set join token fact
       set_fact:
         k3s_token: "{{ node_token.stdout }}"
-        k3s_primary_ip: "{{ k3s_primary_private_ip }}"
+        k3s_primary_ip: "{{ ansible_default_ipv4.address }}"
 
     - name: Fetch kubeconfig
       fetch: