* robust handling of API server SANs

* use apiserver_loadbalancer_domain_name if it is defined, according to PR 3977