# Edit /etc/kubernetes/kubeadm.yaml
# Add additional certSANs
kubeadm upgrade apply --config /etc/kubernetes/kubeadm.yaml
rm /etc/kubernetes/pki/apiserver.{crt,key}
kubeadm init phase certs apiserver --config /etc/kubernetes/kubeadm.yaml
systemctl restart docker kubelet