move-leader command on cluster with TLS enabled is not working

[hubo1016]

I have a cluster with 5 nodes, all of them in etcd v3.3.5.

• TLS is set on both client authentications and peer authentications.
• Authentication is enabled
• Client is using the root user certification.

All the other functions are working properly, but the new move-leader command does not work. The following error log is reported in the server log:

etcd4_1         | 2018-06-05 10:35:24.183354 I | embed: rejected connection from "100.105.80.10:12650" (error "remote error: tls: bad certificate", ServerName "")

client command line is:

ETCDCTL_API=3 etcdctl --cacert=/etc/confd/keys/ca.pem --cert=/root/rootkey/root.cert --key=/root/rootkey/root.key --endpoints=https://100.105.150.23:2379 move-leader c42bd63b2d9bfb86

[hubo1016]

https://github.com/coreos/etcd/blob/8ee3f5aaac4e5bfb27a7704005dbfe7241d69555/etcdctl/ctlv3/command/move_leader_command.go#L55-L61

Looks like etcdctl is just ignoring the TLS options