A new label named `master_lb_allowed_cidrs` is added to control the IP range which can access the k8s api and etcd load balancers. It's a good security enhancement. Task: 39188 Story: 2007414 Change-Id: I157a3b01d169e550e79b94316803fde8ddf77b03