Allow certificate rotation during cluster upgrade

Author: kishen-v

kubetest2-tf/data/k8s-ansible/roles/update-k8s-patch/tasks/main.yml

@@ -10,14 +10,14 @@
   when: node_type == "master"
 
 - name: Perform kubeadm upgrade on the first control-plane node
-  shell: kubeadm upgrade apply v{{ kubernetes_major_minor }}.{{ kubernetes_patch }} --certificate-renewal=false -y
+  shell: kubeadm upgrade apply v{{ kubernetes_major_minor }}.{{ kubernetes_patch }}
   when: groups['masters']|length > 1 and inventory_hostname == groups['masters'][0]
 
 - name: Update the kubelet and the kubectl utilities
   shell: sudo yum install -y kubelet-'{{ kubernetes_major_minor }}.{{ kubernetes_patch }}-*' kubectl-'{{ kubernetes_major_minor }}.{{ kubernetes_patch }}-*' --disableexcludes=kubernetes
 
 - name: Perform kubeadm upgrade on the rest of the nodes
-  shell: kubeadm upgrade node --certificate-renewal=false
+  shell: kubeadm upgrade node
   when: inventory_hostname != groups['masters'][0] and (node_type == "master" or node_type == "worker")
 
 - name: Reload the systemd processes