fix cilium routing and cluster dns

local-quickstart/k3d-cilium-cluster-config.yaml

@@ -20,6 +20,14 @@ options:
       - arg: --disable-kube-proxy
         nodeFilters:
           - server:*
+      # Include both the external Flatcar address and the internal k3d server
+      # address so workstation and in-cluster API clients pass TLS validation.
+      - arg: --tls-san=K3D_EXTERNAL_API_SERVER_IP
+        nodeFilters:
+          - server:*
+      - arg: --tls-san=K3D_INTERNAL_API_SERVER_IP
+        nodeFilters:
+          - server:*
       - arg: --disable=traefik
         nodeFilters:
           - server:*
@@ -29,4 +37,3 @@ options:
   kubeconfig:
     updateDefaultKubeconfig: true
     switchCurrentContext: true
-