add additional SAN to k3s certificates update README with k8s certificate instructions open port for kubectl