An XCCDF Rule
/etc/kubernetes/kubelet.conf
featureGates: ... RotateKubeletClientCertificate: true ...