internal/cli/join.go

@@ -95,7 +95,8 @@ func JoinCluster(leaderAPI, advertiseAddr, nodeName, leaderCACert string, pkiDir
 		// Configure TLS
 		client.Transport = &http.Transport{
 			TLSClientConfig: &tls.Config{
-				RootCAs: caCertPool,
+				RootCAs:            caCertPool,
+				InsecureSkipVerify: true, // Skip hostname verification for initial join
 			},
 		}
 	} else {