diff --git a/magnum/drivers/common/templates/kubernetes/fragments/make-cert.sh b/magnum/drivers/common/templates/kubernetes/fragments/make-cert.sh
index 2c618e7c93627dadcbb7294897aeb42685db0934..a5801d8d26e7d006933607741bea822e5974ca6a 100644
--- a/magnum/drivers/common/templates/kubernetes/fragments/make-cert.sh
+++ b/magnum/drivers/common/templates/kubernetes/fragments/make-cert.sh
@@ -46,6 +46,10 @@ if [[ -n "${MASTER_HOSTNAME}" ]]; then
 fi
 sans="${sans},IP:127.0.0.1"
 
+KUBE_SERVICE_IP=$(echo $PORTAL_NETWORK_CIDR | awk 'BEGIN{FS="[./]"; OFS="."}{print $1,$2,$3,$4 + 1}')
+
+sans="${sans},IP:${KUBE_SERVICE_IP}"
+
 cert_dir=/srv/kubernetes
 cert_conf_dir=${cert_dir}/conf
 
diff --git a/magnum/drivers/k8s_coreos_v1/templates/fragments/make-cert.yaml b/magnum/drivers/k8s_coreos_v1/templates/fragments/make-cert.yaml
index 196b8941c23024626ac97bae2dc4a4354a309878..0625ad5b6367ad83cb74a4823347b88e273f2e7b 100644
--- a/magnum/drivers/k8s_coreos_v1/templates/fragments/make-cert.yaml
+++ b/magnum/drivers/k8s_coreos_v1/templates/fragments/make-cert.yaml
@@ -66,6 +66,9 @@ write_files:
 
       cert_dir=/etc/kubernetes/ssl
       cert_conf_dir=${cert_dir}/conf
+      KUBE_SERVICE_IP=$(echo $PORTAL_NETWORK_CIDR | awk 'BEGIN{FS="[./]"; OFS="."}{print $1,$2,$3,$4 + 1}')
+
+      sans="${sans},IP:${KUBE_SERVICE_IP}"
 
       mkdir -p "$cert_dir"
       mkdir -p "$cert_conf_dir"