title: Vault operator raft join getting : [ERROR] core: failed to join raft cluster: error="failed to join any raft leader node"
body: <p>i try to install the 3 nodes using raft on k8s,  i successfully init and unsealed vault-0 pod
  but when i try to from other pods (vault-1,vault-2) invoke:
  vault operator raft join:</p>
  <pre><code>echo $CA_CERT
  -----BEGIN CERTIFICATE----- MIICyDCCAbCgAwIBAgIBADANBgkqhkiG9w0BAQsFADAVMRMwEQYDVQQDEwprdWJl xxxxxxi9ThJsj4xMxEw= -----END CERTIFICATE----- 
  
  vault operator raft join -leader-ca-cert=&quot;${CA_CERT}&quot; https://vault-0.vault-internal:8200
  </code></pre>
  <p>I'm getting this error :</p>
  <pre><code>Error joining the node to the Raft cluster: Error making API request.
  
  URL: POST https://127.0.0.1:8200/v1/sys/storage/raft/join
  Code: 500. Errors:
  
  * failed to join raft cluster: failed to join any raft leader node
  
  </code></pre>
  <p>error in logs of vault-1</p>
  <pre><code>2021-01-23T11:17:18.939Z [INFO]  core: security barrier not initialized
  2021-01-23T11:17:18.939Z [INFO]  core: seal configuration missing, not initialized
  2021-01-23T11:17:23.942Z [INFO]  core: security barrier not initialized
  2021-01-23T11:17:23.942Z [INFO]  core: seal configuration missing, not initialized
  2021-01-23T11:17:28.941Z [INFO]  core: security barrier not initialized
  2021-01-23T11:17:28.941Z [INFO]  core: security barrier not initialized
  2021-01-23T11:17:28.941Z [INFO]  core: attempting to join possible raft leader node: leader_addr=https://vault-0.vault-internal:8200
  2021-01-23T11:17:28.950Z [INFO]  core: security barrier not initialized
  2021-01-23T11:17:28.950Z [INFO]  core: seal configuration missing, not initialized
  2021-01-23T11:17:28.955Z [WARN]  core: join attempt failed: error=&quot;error during raft bootstrap init call: Error making API request.
  
  URL: PUT https://vault-0.vault-internal:8200/v1/sys/storage/raft/bootstrap/challenge
  Code: 503. Errors:
  
  * Vault is sealed&quot;
  2021-01-23T11:17:28.955Z [ERROR] core: failed to join raft cluster: error=&quot;failed to join any raft leader node&quot;
  2021-01-23T11:17:33.952Z [INFO]  core: security barrier not initialized
  2021-01-23T11:17:33.952Z [INFO]  core: seal configuration missing, not initialized
  2021-01-23T11:17:38.930Z [INFO]  core: security barrier not initialized
  2021-01-23T11:17:38.930Z [INFO]  core: seal configuration missing, not initialized
  2021-01-23T11:17:43.939Z [INFO]  core: security barrier not initialized
  </code></pre>
  <p>This is how my-values.yaml looks :</p>
  <pre><code>global:
    enabled: true
    tlsDisable: false
    extraEnvironmentVars:
      VAULT_CACERT: /vault/userconfig/vault-tls/vault.ca
  server:
    extraVolumes:
    - type: secret
      name: vault-tls
  
    ha:
      enabled: true
      replicas: 3
      raft:
        enabled: true
        setNodeId: false
        config: |
          ui = true
  
          listener &quot;tcp&quot; {
            address = &quot;0.0.0.0:8200&quot;
            cluster_address = &quot;0.0.0.0:8201&quot;
            tls_cert_file = &quot;/vault/userconfig/vault-tls/vault.crt&quot;
            tls_key_file = &quot;/vault/userconfig/vault-tls/vault.key&quot;
            tls_client_ca_file = &quot;/vault/userconfig/vault-tls/vault.ca&quot;
          }
  
          storage &quot;raft&quot; {
            path = &quot;/vault/data&quot;
          }
  
          service_registration &quot;kubernetes&quot; {}
  </code></pre>
  <p>and the csr.conf :</p>
  <pre><code>[req]
  default_bits = 4096
  prompt = no
  encrypt_key = yes
  default_md = sha256
  req_extensions = v3_req
  distinguished_name = req_distinguished_name
  [req_distinguished_name]
  emailAddress = admin@admin.dev
  CN = vault.vault-perso.svc
  [ v3_req ]
  basicConstraints = CA:FALSE
  keyUsage = nonRepudiation, digitalSignature, keyEncipherment
  extendedKeyUsage = serverAuth
  subjectAltName = @alt_names
  [alt_names]
  DNS.1 = vault
  DNS.2 = vault.vault-perso
  DNS.3 = vault.vault-perso.svc
  DNS.4 = vault.vault-perso.svc.cluster.local
  DNS.5 = *.vault-internal
  IP.1 = 127.0.0.1
  </code></pre>
  <pre><code></code></pre>