rke2-canal configuration keeps reverting canal_iface_regex, crippling our nodes

Something or other in Rancher's auto-upgrade enchilada keeps reverting the regexIface patch, which results in nodes that appear to Kubernetes to work fine, but whose pods are actually incapable of communicating with the rest of the cluster. Such nodes act as magnets-of-death for pods.