Merge pull request #46795 from neolit123/1.31-add-note-about-ecdsa-fg-kubeconfig-bug

kubeadm: add note about a bug in the PublicKeysECDSA FG

Author: k8s-ci-robot

content/en/docs/reference/setup-tools/kubeadm/kubeadm-init.md

@@ -174,7 +174,9 @@ as a learner and promoted to a voting member only after the etcd data are fully
 `PublicKeysECDSA`
 : Can be used to create a cluster that uses ECDSA certificates instead of the default RSA algorithm.
 Renewal of existing ECDSA certificates is also supported using `kubeadm certs renew`, but you cannot
-switch between the RSA and ECDSA algorithms on the fly or during upgrades.
+switch between the RSA and ECDSA algorithms on the fly or during upgrades. Kubernetes
+{{< skew currentVersion >}} has a bug where keys in generated kubeconfig files are set use RSA
+despite the feature gate being enabled.
 
 `RootlessControlPlane`
 : Setting this flag configures the kubeadm deployed control plane component static Pod containers