From 606331714425849b495f30e4674c050df9cc4bb3 Mon Sep 17 00:00:00 2001
From: Darren Shepherd <darren@rancher.com>
Date: Wed, 13 Nov 2019 06:04:53 +0000
Subject: [PATCH] Add a couple more known SANs

---
 pkg/cluster/https.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkg/cluster/https.go b/pkg/cluster/https.go
index d57c7f7af5..247182178c 100644
--- a/pkg/cluster/https.go
+++ b/pkg/cluster/https.go
@@ -35,7 +35,7 @@ func (c *Cluster) newListener(ctx context.Context) (net.Listener, http.Handler,
 		TLSConfig: tls.Config{
 			ClientAuth: tls.RequestClientCert,
 		},
-		SANs: c.config.SANs,
+		SANs: append(c.config.SANs, "localhost", "kubernetes", "kubernetes.default", "kubernetes.default.svc."+c.config.ClusterDomain),
 	})
 }