diff --git a/resources/master-kubelet-conf.yaml b/resources/master-kubelet-conf.yaml
index b5ab290..7a48af5 100644
--- a/resources/master-kubelet-conf.yaml
+++ b/resources/master-kubelet-conf.yaml
@@ -15,4 +15,6 @@ clusterDomain: "cluster.local"
 ${feature_gates == "" ? "" : "featureGates:\n  ${feature_gates}"}
 serializeImagePulls: false
 staticPodPath: "/etc/kubernetes/manifests"
+tlsCertFile: "/etc/kubernetes/ssl/kubelet.pem"
+tlsPrivateKeyFile: "/etc/kubernetes/ssl/kubelet-key.pem"
 cgroupDriver: systemd
diff --git a/resources/master-kubelet.service b/resources/master-kubelet.service
index 8052d43..9fa67eb 100644
--- a/resources/master-kubelet.service
+++ b/resources/master-kubelet.service
@@ -32,8 +32,6 @@ ExecStart=${kubelet_binary_path} \
   --cni-conf-dir=/etc/cni/net.d \
   ${cloud_provider == "" ? "" : "--cloud-provider=${cloud_provider}"} \
   --lock-file=/var/run/lock/kubelet.lock \
-  --tls-cert-file=/etc/kubernetes/ssl/kubelet.pem \
-  --tls-private-key-file=/etc/kubernetes/ssl/kubelet-key.pem \
   --exit-on-lock-contention \
   --v=0
 Restart=always
diff --git a/resources/node-kubelet-conf.yaml b/resources/node-kubelet-conf.yaml
index d890275..d136e5d 100644
--- a/resources/node-kubelet-conf.yaml
+++ b/resources/node-kubelet-conf.yaml
@@ -15,6 +15,8 @@ clusterDomain: "cluster.local"
 ${feature_gates == "" ? "" : "featureGates:\n  ${feature_gates}"}
 serializeImagePulls: false
 staticPodPath: "/etc/kubernetes/manifests"
+tlsCertFile: "/etc/kubernetes/ssl/kubelet.pem"
+tlsPrivateKeyFile: "/etc/kubernetes/ssl/kubelet-key.pem"
 cgroupDriver: systemd
 
 # Resource allocation
diff --git a/resources/node-kubelet.service b/resources/node-kubelet.service
index d251c4c..42b6dc5 100644
--- a/resources/node-kubelet.service
+++ b/resources/node-kubelet.service
@@ -35,8 +35,6 @@ ExecStart=${kubelet_binary_path} \
 %{ if taints != "" }  --register-with-taints=${taints} \
 %{ endif ~}
   --lock-file=/var/run/lock/kubelet.lock \
-  --tls-cert-file=/etc/kubernetes/ssl/kubelet.pem \
-  --tls-private-key-file=/etc/kubernetes/ssl/kubelet-key.pem \
   --v=0
 Restart=always
 RestartSec=10