An XCCDF Rule
/etc/kubernetes/kubelet/kubelet-config.json
featureGates: ... RotateKubeletClientCertificate: true ...