Include every IP address into a cert's SAN field

[jay7x]

Just localhost and default routed IPs were added to a SAN before. That causes a problem on a server with multiple NICs when etcd or kube-apiserver should be accessed via non-default route.

[ananace]

I'm going to have to revert this again, it's causing issues as it's changing the SAN list - and therefore also triggering a recreation of the serving certs - every time a container starts or stops on the Kubernetes master nodes.

Additionally, it's also including link-local bindings as well as IPVS entries from kube-proxy into the certificates, which causes the SAN list to grow in size far too quickly. A simple test cluster with no active load is already up to 50 SANs, while our production cluster would have SAN lists with almost a thousand entries for each master.