Add support for super_admin.conf, which was introduced after K8s v1.29.

[Unknown256]

CERTIFICATE EXPIRES RESIDUAL TIME CERTIFICATE AUTHORITY EXTERNALLY MANAGED
admin.conf May 11, 2034 09:39 UTC 9y ca no
apiserver May 11, 2034 09:39 UTC 9y ca no
apiserver-etcd-client May 11, 2034 09:39 UTC 9y etcd-ca no
apiserver-kubelet-client May 11, 2034 09:39 UTC 9y ca no
controller-manager.conf May 11, 2034 09:39 UTC 9y ca no
etcd-healthcheck-client May 11, 2034 09:39 UTC 9y etcd-ca no
etcd-peer May 11, 2034 09:39 UTC 9y etcd-ca no
etcd-server May 11, 2034 09:39 UTC 9y etcd-ca no
front-proxy-client May 11, 2034 09:39 UTC 9y front-proxy-ca no
scheduler.conf May 11, 2034 09:39 UTC 9y ca no
super-admin.conf May 11, 2034 09:39 UTC 9y ca no

CERTIFICATE AUTHORITY EXPIRES RESIDUAL TIME EXTERNALLY MANAGED
ca May 11, 2034 07:34 UTC 9y no
etcd-ca May 11, 2034 07:34 UTC 9y no
front-proxy-ca May 11, 2034 07:34 UTC 9y no

[yuyicai]

Good work! Thanks!

[yuyicai]

K8s add super_admin.conf after 1.29.0
https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#no-really-you-must-read-this-before-you-upgrade

kubeadm: a separate "super-admin.conf" file is now deployed. The User in admin.conf is now bound to a new RBAC Group kubeadm:cluster-admins that has cluster-admin ClusterRole access. The User in super-admin.conf is now bound to the system:masters built-in super-powers / break-glass Group that can bypass RBAC. Before this change, the default admin.conf was bound to system:masters Group, which was undesired. Executing kubeadm init phase kubeconfig all or just kubeadm init will now generate the new super-admin.conf file. The cluster admin can then decide to keep the file present on a node host or move it to a safe location. kubadm certs renew will renew the certificate in super-admin.conf to one year if the file exists; if it does not exist a "MISSING" note will be printed. kubeadm upgrade apply for this release will migrate this particular node to the two file setup. Subsequent kubeadm releases will continue to optionally renew the certificate in super-admin.conf if the file exists on disk and if renew on upgrade is not disabled. kubeadm join --control-plane will now generate only an admin.conf file that has the less privileged User.

kubernetes/kubernetes#121305