Kops: Enable the usage of --kubelet-certificate-authority in kube-apiserver

[Nilubkal]

1. Describe IN DETAIL the feature/behavior/change you would like to see.

It seems that i cannot pass the flag --kubelet-certificate-authority to the kube-apiserver when using a template to create the cluster. In the https://github.com/kubernetes/kops/blob/master/pkg/apis/kops/componentconfig.go there is no such option ?

[rifelpet]

You're correct, it appears that we dont expose that field through the Kops API. It should be pretty straight forward to add if someone is willing to add it. here's an example PR: https://github.com/kubernetes/kops/pull/7109, simply add the field to each of the componentconfig.go files and run make apimachinery crds to update some generated files.

[robinpercy]

/assign

I'll take this one. I need to re-familliarize myself with the build process anyway :)

[tanjunchen]

@robinpercy Any progress？

[tanjunchen]

/close

[k8s-ci-robot]

@tanjunchen: Closing this issue.

In response to this:

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.