From d3690f5455f083c042a6dca3789935a83a0b6902 Mon Sep 17 00:00:00 2001
From: Maarten de Waard <maarten@greenhost.nl>
Date: Wed, 13 May 2020 15:01:36 +0200
Subject: [PATCH] also add "RotateKubeletServerCertificate" to kubelet config

---
 ansible/roles/rke_configuration/files/cluster-defaults.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ansible/roles/rke_configuration/files/cluster-defaults.yml b/ansible/roles/rke_configuration/files/cluster-defaults.yml
index eceec7598..822bd9628 100644
--- a/ansible/roles/rke_configuration/files/cluster-defaults.yml
+++ b/ansible/roles/rke_configuration/files/cluster-defaults.yml
@@ -66,6 +66,7 @@ services:
       eviction-minimum-reclaim: 'memory.available=0Mi,nodefs.available=0Mi,imagefs.available=0Gi'
       protect-kernel-defaults: 'true'
       hostname-override: 'false'
+      feature-gates: 'RotateKubeletServerCertificate=true'
     extra_binds:
     # Make local storage work with persistent volumes that use `subpath`
     # see https://open.greenhost.net/openappstack/openappstack/issues/236
-- 
GitLab