Not sure about an existing cluster, but for a new one, you can add

--tls-san YOUR_DOMAIN

to the INSTALL_K3S_EXEC (or use

TOOL_K3S_CUSTOM_TLS_SAN

in our install script)