tls: failed to verify certificate: x509: certificate is valid for webhook-service.metallb-system.svc, not metallb-webhook-service.metallb-system.svc

[FatmanUK]

Trying to add a pool.

failed: [gang-mother-01] (item={'changed': False, 'stat': {'exists': False}, 'invocation': {'module_args': {'path': '/home/fatman/k3s_playground/manifests/metallb-pool.yaml.j2', 'follow': False, 'get_md5': False, 'get_checksum': True, 'get_mime': True, 'get_attributes': True, 'checksum_algorithm': 'sha1'}}, 'failed': False, 'item': 'metallb-pool.yaml.j2', 'ansible_loop_var': 'item'}) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/usr/local/bin/kubectl", "create", "-f", "/home/ansible/manifests/metallb/metallb-pool.yaml.j2", "-n", "metallb-system"], "delta": "0:00:00.721641", "end": "2024-02-24 20:10:59.578381", "failed_when_result": true, "item": {"ansible_loop_var": "item", "changed": false, "failed": false, "invocation": {"module_args": {"checksum_algorithm": "sha1", "follow": false, "get_attributes": true, "get_checksum": true, "get_md5": false, "get_mime": true, "path": "/home/fatman/k3s_playground/manifests/metallb-pool.yaml.j2"}}, "item": "metallb-pool.yaml.j2", "stat": {"exists": false}}, "msg": "non-zero return code", "rc": 1, "start": "2024-02-24 20:10:58.856740", "stderr": "Error from server (InternalError): error when creating \"/home/ansible/manifests/metallb/metallb-pool.yaml.j2\": Internal error occurred: failed calling webhook \"ipaddresspoolvalidationwebhook.metallb.io\": failed to call webhook: Post \"https://metallb-webhook-service.metallb-system.svc:443/validate-metallb-io-v1beta1-ipaddresspool?timeout=10s\": tls: failed to verify certificate: x509: certificate is valid for webhook-service.metallb-system.svc, not metallb-webhook-service.metallb-system.svc\nError from server (InternalError): error when creating \"/home/ansible/manifests/metallb/metallb-pool.yaml.j2\": Internal error occurred: failed calling webhook \"l2advertisementvalidationwebhook.metallb.io\": failed to call webhook: Post \"https://metallb-webhook-service.metallb-system.svc:443/validate-metallb-io-v1beta1-l2advertisement?timeout=10s\": tls: failed to verify certificate: x509: certificate is valid for webhook-service.metallb-system.svc, not metallb-webhook-service.metallb-system.svc", "stderr_lines": ["Error from server (InternalError): error when creating \"/home/ansible/manifests/metallb/metallb-pool.yaml.j2\": Internal error occurred: failed calling webhook \"ipaddresspoolvalidationwebhook.metallb.io\": failed to call webhook: Post \"https://metallb-webhook-service.metallb-system.svc:443/validate-metallb-io-v1beta1-ipaddresspool?timeout=10s\": tls: failed to verify certificate: x509: certificate is valid for webhook-service.metallb-system.svc, not metallb-webhook-service.metallb-system.svc", "Error from server (InternalError): error when creating \"/home/ansible/manifests/metallb/metallb-pool.yaml.j2\": Internal error occurred: failed calling webhook \"l2advertisementvalidationwebhook.metallb.io\": failed to call webhook: Post \"https://metallb-webhook-service.metallb-system.svc:443/validate-metallb-io-v1beta1-l2advertisement?timeout=10s\": tls: failed to verify certificate: x509: certificate is valid for webhook-service.metallb-system.svc, not metallb-webhook-service.metallb-system.svc"], "stdout": "", "stdout_lines": []}

metallb/metallb#1597
I know it's a domain mismatch, but I checked the cert validity anyway and it's good.