From ce26f17e9ecab564dc833e51d54190c4cdcf554c Mon Sep 17 00:00:00 2001
From: Imran Ahmed <imran.nappa@gmail.com>
Date: Tue, 3 Jun 2025 17:50:38 +1200
Subject: [PATCH] fix unquoted san cert causing issues with ips (#12256)

---
 .../control-plane/templates/kubeadm-config.v1beta3.yaml.j2      | 2 +-
 .../control-plane/templates/kubeadm-config.v1beta4.yaml.j2      | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/roles/kubernetes/control-plane/templates/kubeadm-config.v1beta3.yaml.j2 b/roles/kubernetes/control-plane/templates/kubeadm-config.v1beta3.yaml.j2
index f5ee517ce..4612917d1 100644
--- a/roles/kubernetes/control-plane/templates/kubeadm-config.v1beta3.yaml.j2
+++ b/roles/kubernetes/control-plane/templates/kubeadm-config.v1beta3.yaml.j2
@@ -286,7 +286,7 @@ apiServer:
 {% endif %}
   certSANs:
 {% for san in apiserver_sans %}
-  - {{ san }}
+  - "{{ san }}"
 {% endfor %}
   timeoutForControlPlane: 5m0s
 controllerManager:
diff --git a/roles/kubernetes/control-plane/templates/kubeadm-config.v1beta4.yaml.j2 b/roles/kubernetes/control-plane/templates/kubeadm-config.v1beta4.yaml.j2
index a157348e2..5d4d40eda 100644
--- a/roles/kubernetes/control-plane/templates/kubeadm-config.v1beta4.yaml.j2
+++ b/roles/kubernetes/control-plane/templates/kubeadm-config.v1beta4.yaml.j2
@@ -350,7 +350,7 @@ apiServer:
 {% endif %}
   certSANs:
 {% for san in apiserver_sans %}
-  - {{ san }}
+  - "{{ san }}"
 {% endfor %}
 controllerManager:
   extraArgs: