The certificate for the cluster I deployed seems to get generated for the ip of the gateway of the network the control plane is on, not the ip of the control plane itself.
this is w/ tkgi 1.16