diff --git a/pkg/controller/template/render.go b/pkg/controller/template/render.go
index 05758bbae6..d896ad9d8a 100644
--- a/pkg/controller/template/render.go
+++ b/pkg/controller/template/render.go
@@ -331,6 +331,7 @@ func etcdPeerCertDNSNames(cfg RenderConfig) (interface{}, error) {
 	}
 
 	var dnsNames = []string{
+		"localhost",
 		"${ETCD_DNS_NAME}",
 		fmt.Sprintf("%s.%s", cfg.ClusterName, cfg.BaseDomain), // https://github.com/etcd-io/etcd/blob/583763261f1c843e07c1bf7fea5fb4cfb684fe87/Documentation/op-guide/clustering.md#dns-discovery
 	}
diff --git a/templates/master/00-master/_base/files/etc-kubernetes-manifests-etcd-member.yaml b/templates/master/00-master/_base/files/etc-kubernetes-manifests-etcd-member.yaml
index 7ad0c9be9f..3a5aff1f28 100644
--- a/templates/master/00-master/_base/files/etc-kubernetes-manifests-etcd-member.yaml
+++ b/templates/master/00-master/_base/files/etc-kubernetes-manifests-etcd-member.yaml
@@ -55,7 +55,7 @@ contents:
                 --assetsdir=/etc/ssl/etcd \
                 --dnsnames={{etcdPeerCertDNSNames .}} \
                 --commonname=system:etcd-peer:${ETCD_DNS_NAME} \
-                --ipaddrs=${ETCD_IPV4_ADDRESS} \
+                --ipaddrs=${ETCD_IPV4_ADDRESS},127.0.0.1 \
           
         securityContext:
           priviledged: true