also add "RotateKubeletServerCertificate" to kubelet config

d3690f54 · Maarten de Waard · 0614ce0a · d3690f54
Verified Commit d3690f54 authored 4 years ago by Maarten de Waard
--- a/ansible/roles/rke_configuration/files/cluster-defaults.yml
+++ b/ansible/roles/rke_configuration/files/cluster-defaults.yml
@@ -66,6 +66,7 @@ services:
      eviction-minimum-reclaim: 'memory.available=0Mi,nodefs.available=0Mi,imagefs.available=0Gi'
      protect-kernel-defaults: 'true'
      hostname-override: 'false'
+      feature-gates: 'RotateKubeletServerCertificate=true'
    extra_binds:
    # Make local storage work with persistent volumes that use `subpath`
    # see https://open.greenhost.net/openappstack/openappstack/issues/236