feat(system-upgrade): Configure kubelet to load local config

infrastructure/system-upgrades/kubelet.yaml

@@ -6,7 +6,10 @@ metadata:
   namespace: system-upgrade
 type: Opaque
 stringData:
-  kubelet.service: |
+  local.conf: |
+    [Service]
+    Environment="KUBELET_EXTRA_ARGS=--cgroup-driver=systemd --config=config.yaml"
+  flux.conf: |
     [Service]
     Environment="KUBELET_AUTHZ_ARGS=--authorization-mode=Webhook --authentication-token-webhook --client-ca-file=/etc/kubernetes/pki/ca.crt"
   upgrade.sh: |
@@ -15,7 +18,8 @@ stringData:
     set -x
     secrets="$(dirname $0)"
     rm -f /etc/systemd/system/kubelet.service.d/flux.conf /etc/systemd/system/kubelet.service.d/kubeadm-flux.conf
-    cp "$secrets/kubelet.service" /etc/systemd/system/kubelet.service.d/zz_flux.conf
+    cp "$secrets/flux.conf" /etc/systemd/system/kubelet.service.d/zz_flux.conf
+    cp "$secrets/local.conf" /etc/systemd/system/kubelet.service.d/zz_defaults.conf
     systemctl daemon-reload
     systemctl restart kubelet.service
 ---
@@ -37,6 +41,7 @@ spec:
         values:
           - "37"
           - "38"
+          - "39"
   serviceAccountName: system-upgrade
   drain:
     deleteLocalData: true
@@ -45,7 +50,7 @@ spec:
   secrets:
     - name: kubelet
       path: /host/run/system-upgrade/secrets/kubelet
-  version: "1.0.0"
+  version: "1.1.0"
   upgrade:
     image: quay.io/fedora/fedora:39
     command: ["chroot", "/host"]