kubelet tls bootstrap is a feature I am looking forward to. We just finished dev work and testing to get to 1.11 as we have to support various cni's and automated upgrades from 1.10, it will probably be couple of months before we get to 1.12