New el9_8 nodes boot rke2 v1.33.11 (flannel v0.28.4 / calico v3.31.5) from
the rolling latest/1.33 repo, but the airgap preload pinned v1.33.4
(flannel v0.27.2 / calico v3.30.2), so canal's images were never on disk and
containerd fell back to the artifactapi mirror VIP, which is unreachable until
the flannel overlay it would provide is up. Classic bootstrap deadlock.
- bump pinned rke2_version 1.33.4 -> 1.33.11 so the versionlock, RPM and
preloaded tarball all match the canal image tags the running binary requests
- preload the canal-specific tarball alongside the default bundle so the
flannel/calico images are guaranteed on disk regardless of bundle layout
Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT