diff --git a/pkg/cluster/https.go b/pkg/cluster/https.go
index d57c7f7af5..247182178c 100644
--- a/pkg/cluster/https.go
+++ b/pkg/cluster/https.go
@@ -35,7 +35,7 @@ func (c *Cluster) newListener(ctx context.Context) (net.Listener, http.Handler,
 		TLSConfig: tls.Config{
 			ClientAuth: tls.RequestClientCert,
 		},
-		SANs: c.config.SANs,
+		SANs: append(c.config.SANs, "localhost", "kubernetes", "kubernetes.default", "kubernetes.default.svc."+c.config.ClusterDomain),
 	})
 }