diff --git a/.gitignore b/.gitignore
index 08c6fe87692..d6235ae4498 100644
--- a/.gitignore
+++ b/.gitignore
@@ -42,6 +42,7 @@ __debug_bin*
 /devenv/docker/blocks/auth/saml-enterprise
 /devenv/docker/blocks/auth/signer
 /devenv/docker/blocks/mt-db
+/devenv/mt-tilt
 
 /tmp
 tools/phantomjs/phantomjs
diff --git a/hack/make-aggregator-pki.sh b/hack/make-aggregator-pki.sh
index 92fd11ebe4d..72edea899e6 100755
--- a/hack/make-aggregator-pki.sh
+++ b/hack/make-aggregator-pki.sh
@@ -20,7 +20,7 @@ openssl x509 -req -days 3650 -in data/grafana-aggregator/client.csr -CA data/gra
 
 openssl req -out data/grafana-aggregator/server.csr -new -newkey rsa:4096 -nodes -keyout data/grafana-aggregator/server.key \
   -subj "/CN=localhost/O=aggregated" \
-  -addext "subjectAltName = DNS:v0alpha1.example.grafana.app.default.svc,DNS:localhost" \
+  -addext "subjectAltName = DNS:v0alpha1.example.grafana.app.default.svc,DNS:localhost,DNS:*.default.svc,DNS:*.default.svc.cluster.local" \
   -addext "extendedKeyUsage = serverAuth, clientAuth"
 openssl x509 -req -days 3650 -in data/grafana-aggregator/server.csr -CA data/grafana-aggregator/ca.crt -CAkey data/grafana-aggregator/ca.key \
   -set_serial 02 \