fix Certificate SANs

internal/selfhosted/webhook/certificate.go

@@ -5,7 +5,6 @@ import (
 	"crypto/rsa"
 	"crypto/x509"
 	"crypto/x509/pkix"
-	"encoding/base64"
 	"encoding/pem"
 	"math/big"
 	"time"
@@ -18,10 +17,6 @@ type TlsCredential struct {
 	certificate []byte
 }
 
-func (t TlsCredential) CaBundle() string {
-	return base64.StdEncoding.EncodeToString(t.certificate)
-}
-
 func (t TlsCredential) Certificate() []byte {
 	return t.certificate
 }
@@ -53,6 +48,12 @@ func CreateTlsCredential(serviceNamespacedName types.NamespacedName) (TlsCredent
 		IsCA:                  true,
 	}
 
+	// Add SANs to the certificate template
+	template.DNSNames = []string{
+		serviceNamespacedName.Name + "." + serviceNamespacedName.Namespace + ".svc",
+		serviceNamespacedName.Name + "." + serviceNamespacedName.Namespace + ".svc.cluster.local",
+	}
+
 	// Create the certificate
 	certBytes, err := x509.CreateCertificate(rand.Reader, &template, &template, &privateKey.PublicKey, privateKey)
 	if err != nil {