TLS error with Traefik contacting kubernetes api server in a kubespray cluster

Kubernetes 1.14.3
Traefik chart 1.70 app version 1.7.12

E0627 21:45:12.726478 1 reflector.go:205] github.com/containous/traefik/vendor/k8s.io/client-go/informers/factory.go:86: Failed to list *v1.Service: Get https://10.233.0.1:443/api/v1/services?limit=500&resourceVersion=0: x509: cannot validate certificate for 10.233.0.1 because it doesn't contain any IP SANs

Kubectl etc seems to be fine

This usually happens when the Kubernetes API server certificates are generated with hostnames and not IPs.

Can you confirm that your kubernetes API server certificate contains the service IP (10.233.0.1)?

@daniel.tomcej yes it does contain the IP 10.233.0.1.