Kubeadm auto creates this

roles/kubernetes/master/templates/kubeadm-config.yaml.j2

@@ -54,12 +54,6 @@ apiServerExtraArgs:
   runtime-config: {{ kube_api_runtime_config | join(',') }}
 {% endif %}
   allow-privileged: "true"
-{% if kube_version | version_compare('1.9', '>=') %}
-  requestheader-client-ca-file: "{{ kube_cert_dir }}/ca.pem"
-  enable-aggregator-routing: "{{ kube_api_aggregator_routing }}"
-  proxy-client-cert-file: "{{ kube_cert_dir }}/front-proxy-client.pem"
-  proxy-client-key-file: "{{ kube_cert_dir }}/front-proxy-client-key.pem"
-{% endif %}
 controllerManagerExtraArgs:
   node-monitor-grace-period: {{ kube_controller_node_monitor_grace_period }}
   node-monitor-period: {{ kube_controller_node_monitor_period }}