Migration of test-network-k8s

Migrating from test-network-k8s to a DigitalOcean cloud managed Kubernetes Service. Following the recommendations in the documentation.

When attempting to bootstrap enroll the CA users (after Fabric CAs are launched), it rejects my:

"https://org0-ca.myosd.net:443/enroll"

Indicating that the tls certificate is valid for ingress.local, not org0-ca.myosd.net

I suspect one of the key certificates is being signed as "ingress.local" instead of "org0-ca.myosd.net" -- but that address appears in my key certificates. I'm stumped.

Any help in general on migrating to cloud K8s?