I upgraded my EKS cluster to v1.11.5 from v.1.10.3, but it's giving me x509: cannot validate certificate for <WORKER_IP> because it doesn't contain any IP SANs error when i try to get logs or helm ls on it. Other commands like kubectl get nodes are working fine.

For the upgrade, I clicked "Upgrade cluster" button on the web console, and modified cloudformation template for workers to use latest AWS provided ami (ami-0a9006fb385703b54). read this guide from AWS, including this.

My cluster was completely unuseable so I rollbacked my worker nodes with old ami (ami-0c7a4976cb6fafd3a) for now, and the error is gone.

I'm really not sure that what i missed. Anyone experiencing similar issue with me? I need help.

Thanks.