Bootstrapped Node Certificate Gets Deleted on Reboot

[BugRoger]

We're using the TLS bootstrap method for creating node specific client certificates. Upon the first time the kubelet is started it will create a CSR and request a certificate. The bootstrap mechanism creates:

• /var/lib/kubelet/kubeconfig
• /var/run/kubernetes/kubelet-client.crt

Now, as long as the kubeconfig file exists the registration will not run again. /var/run is either mounted as tmpfs or cleared on reboot. This will delete the kubelet certificates.