cilium-olm fails to start - missing IP SANs

[eminchen]

Installing cilium 1.14.5 on Openshift 4.16, getting error with certificate as per log below. Any suggestions what I need to patch?

oc logs cilium-olm-55bc4bc585-548qh -n cilium
Flag --enable-leader-election has been deprecated, use --leader-elect instead.
Flag --metrics-addr has been deprecated, use --metrics-bind-address instead
1.7227919898045473e+09 INFO cmd Version {"Go Version": "go1.18.7", "GOOS": "linux", "GOARCH": "amd64", "helm-operator": "v1.22.2", "commit": "da3346113a8a75e11225f586482934000504a60f"}
1.7227919898047438e+09 DEBUG cmd Setting namespace with value in WATCH_NAMESPACE {"Namespace": "cilium"}
1.7227919898047497e+09 INFO cmd Watching single namespace. {"Namespace": "cilium"}
1.7227919898095002e+09 ERROR Failed to get API Group-Resources {"error": "Get "https://172.30.0.1:443/api?timeout=32s\": x509: cannot validate certificate for 172.30.0.1 because it doesn't contain any IP SANs"}
sigs.k8s.io/controller-runtime/pkg/cluster.New
/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/cluster/cluster.go:160
sigs.k8s.io/controller-runtime/pkg/manager.New
/go/pkg/mod/sigs.k8s.io/[email protected]/pkg/manager/manager.go:322
github.com/operator-framework/operator-sdk/internal/cmd/helm-operator/run.run
/workspace/internal/cmd/helm-operator/run/cmd.go:176
github.com/operator-framework/operator-sdk/internal/cmd/helm-operator/run.NewCmd.func1
/workspace/internal/cmd/helm-operator/run/cmd.go:75
github.com/spf13/cobra.(*Command).execute
/go/pkg/mod/github.com/spf13/[email protected]/command.go:860
github.com/spf13/cobra.(*Command).ExecuteC
/go/pkg/mod/github.com/spf13/[email protected]/command.go:974
github.com/spf13/cobra.(*Command).Execute
/go/pkg/mod/github.com/spf13/[email protected]/command.go:902
main.main
/workspace/cmd/helm-operator/main.go:40
runtime.main
/usr/local/go/src/runtime/proc.go:250
1.722791989809653e+09 ERROR cmd Failed to create a new manager. {"Namespace": "cilium", "error": "Get "https://172.30.0.1:443/api?timeout=32s\": x509: cannot validate certificate for 172.30.0.1 because it doesn't contain any IP SANs"}
github.com/operator-framework/operator-sdk/internal/cmd/helm-operator/run.NewCmd.func1
/workspace/internal/cmd/helm-operator/run/cmd.go:75
github.com/spf13/cobra.(*Command).execute
/go/pkg/mod/github.com/spf13/[email protected]/command.go:860
github.com/spf13/cobra.(*Command).ExecuteC
/go/pkg/mod/github.com/spf13/[email protected]/command.go:974
github.com/spf13/cobra.(*Command).Execute
/go/pkg/mod/github.com/spf13/[email protected]/command.go:902
main.main
/workspace/cmd/helm-operator/main.go:40
runtime.main
/usr/local/go/src/runtime/proc.go:250