An XCCDF Rule
/etc/kubernetes/kubelet.conf
featureGates: ... RotateKubeletServerCertificate: true ...