TLS error with Traefik contacting kubernetes api server in a kubespray cluster

Traefik Traefik v1
1

Kubernetes 1.14.3
Traefik chart 1.70 app version 1.7.12

E0627 21:45:12.726478 1 reflector.go:205] github.com/containous/traefik/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Service: Get https://10.233.0.1:443/api/v1/services?limit=500&resourceVersion=0: x509: cannot validate certificate for 10.233.0.1 because it doesn't contain any IP SANs

Kubectl etc seems to be fine

2

This usually happens when the Kubernetes API server certificates are generated with hostnames and not IPs.

Can you confirm that your kubernetes API server certificate contains the service IP (10.233.0.1)?

3

@daniel.tomcej yes it does contain the IP 10.233.0.1.