---
kube_cert_group: kube-cert

rotate_kubernetes_certs: false # set this to true to regenerate certificates