diff --git a/nixos/modules/services/cluster/kubernetes/pki.nix b/nixos/modules/services/cluster/kubernetes/pki.nix
index e560bb9b29a..4587373d519 100644
--- a/nixos/modules/services/cluster/kubernetes/pki.nix
+++ b/nixos/modules/services/cluster/kubernetes/pki.nix
@@ -200,6 +200,7 @@ in
 
     services.certmgr = {
       enable = true;
+      package = pkgs.certmgr-selfsigned;
       svcManager = "command";
       specs =
         let