machine:
  kubelet:
    extraArgs:
      rotate-server-certificates: true