graduate "kubeadm init phase kubelet-finalize experimental-cert-rotation"

[neolit123]

the kubeadm init phase kubelet-finalize experimental-cert-rotation phase of kubeadm init is responsible for modifying the initial kubelet.conf during primary node bootstrap to point to the /var/lib/kubelet/pki cert and key PEM file. it happens after the first kubelet in the cluster self-bootstraps.

we originally added this extra phase as experimental as we wasn't sure if this is what we want. now i regret this decision as it would require one release deprecation window vs just a EXPERIMENTAL note.

1.31

• add a new phase cert-rotation that does that same and mark experimental-cert-rotation as deprecated. there has to be a way to only execute one of them when doing "all"
• https://github.com/kubernetes/kubernetes/pull/124419

1.32:

• remove experrimental-cert-rotation https://github.com/kubernetes/kubernetes/pull/126913

[k8s-triage-robot]

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

• After 90d of inactivity, lifecycle/stale is applied
• After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
• After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

• Mark this issue as fresh with /remove-lifecycle stale
• Close this issue with /close
• Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale