<p>I need add argument <code>--authentication-token-webhook</code> in Kubelet. I can change file <code>/etc/systemd/system/kubelet.service.d/10-kubeadm.conf</code> at all nodes step by step with my hands. But it is not funny )). How can I change Kubelet arguments from single point?</p>

<p>You can either</p>

<ol>
<li>configure your Kubernetes workers via tools like <a href="https://puppet.com/" rel="nofollow noreferrer">Puppet</a> or <a href="https://www.ansible.com/" rel="nofollow noreferrer">Ansible</a>. Write your service drop-in once and deploy it via the tool to all nodes. Make sure you don't restart all kubelets at once (keyword serial for Ansible). Also, don't change <code>10-kubeadm.conf</code>, drop in another file like <code>20-kubeadm-extra-args.conf</code> and set the environment variable <code>KUBELET_EXTRA_ARGS</code>.</li>
<li>or use a Kubernetes feature called <a href="https://kubernetes.io/docs/tasks/administer-cluster/reconfigure-kubelet/" rel="nofollow noreferrer">DynamicKubeletConfig</a>. Beware that this is an alpha feature (as of Kubernetes 1.10) and has to be enabled by hand. I wouldn't recommend this method (yet, as long as it's an alpha feature), but it might become a feasible option in the future.</li>
</ol>
