adding the service account issuer params, need to check if those paths exits,...

adding the service account issuer params, need to check if those paths exits, if we have a PKI and how to stuff the openssl certs into this

roles/rke2/templates/config.yaml.j2

@@ -39,7 +39,14 @@ resolv-conf: "{{ resolv_conf_server }}"
 {# disable-cloud-controller: true #}
 write-kubeconfig-mode: "0644"
 kube-apiserver-arg: "--feature-gates=ServiceAccountIssuerDiscovery=true,JobTrackingWithFinalizers=true,PodSecurity=true"
-kube-apiserver-extra-env: 
+#TODO write nice for-loop 
+kube-ansible_default_ipv4:
+  extra_args:
+    service-account-issuer: "kubernetes.default.svc"
+    service-account-signing-key-file: "/etc/kubernetes/ssl/kube-service-account-token-key.pem"
+    service-account-key-file:"/etc/kubernetes/ssl/kube-service-account-token"
+    service-account-jwks-uri: "https://localhost:6443/openid/v1/jwks"
+
 
 
 {% if cni is defined and cni | length > 0 %}