diff --git a/go.mod b/go.mod
index 682990046233592c1fd21050e80da8ac4dde7529..d2145f4692cf22f9866c8e84447bb99faa6917d8 100644
--- a/go.mod
+++ b/go.mod
@@ -72,7 +72,7 @@ require (
 	github.com/spf13/viper v1.15.0
 	github.com/vishvananda/netlink v1.2.1-beta.2
 	go.acides.org/daeman v0.3.4
-	go.acides.org/pekahi v0.2.0
+	go.acides.org/pekahi v0.2.1
 	go.acides.org/selfcontain v0.2.2
 	go.acides.org/sml v0.2.1
 	go.etcd.io/etcd/server/v3 v3.5.7
diff --git a/go.sum b/go.sum
index 04395a4f474a04edd36b0082aa007749c2cfdc87..44e85afdd2123b69289e4a406d190d5a5264f4a8 100644
--- a/go.sum
+++ b/go.sum
@@ -1332,6 +1332,8 @@ go.acides.org/pekahi v0.1.1 h1:lohNKOhw9Fz5K1Q6K3tP7XFWc+d/O29D9AEXnY2EKU8=
 go.acides.org/pekahi v0.1.1/go.mod h1:AxgN7Ss6dCRHoNOVWMymkmDafWYdDV7ce6jPl5bqyRc=
 go.acides.org/pekahi v0.2.0 h1:TCw91qooXutg+XbRVmWR/42lJP16cvBDcPVo0soA3nI=
 go.acides.org/pekahi v0.2.0/go.mod h1:AxgN7Ss6dCRHoNOVWMymkmDafWYdDV7ce6jPl5bqyRc=
+go.acides.org/pekahi v0.2.1 h1:ysmC14q+hnYXcuB1Ew2XoWDZsgR1jbut89ACRLwi43I=
+go.acides.org/pekahi v0.2.1/go.mod h1:AxgN7Ss6dCRHoNOVWMymkmDafWYdDV7ce6jPl5bqyRc=
 go.acides.org/selfcontain v0.2.2 h1:QGrC7K/E9YPibBdo0IyWwkpNDHwhK2nJ/onpqsygqQk=
 go.acides.org/selfcontain v0.2.2/go.mod h1:cyKYsVw1scp6MTVIhquG+2OJrsyaDCwkXlsBvMO+cws=
 go.acides.org/sml v0.2.1 h1:WxlUUZqCzv+He91iyzURMwrjuB9FR+8rwe9nm+WR0y0=
diff --git a/services/kubelet.go b/services/kubelet.go
index e13005a5dd0ff3504cd9752b99cf20ebc88f69c4..48c1d6135c83b4a15e389b2724412ecc2f99cebf 100644
--- a/services/kubelet.go
+++ b/services/kubelet.go
@@ -45,7 +45,7 @@ var kubeKubelet = &Unit{
 		// (very difficult to check otherwise)
 		time.Sleep(10 * time.Second)
 		kubeletRoot := path.Join(c.settings.DataDir, "kubelet")
-		clients, err := k8s.NewCertsClient(c.masterUrl, c.certs.TLS, c.certs.API)
+		clients, err := k8s.NewCertsClient(c.masterUrl, c.pki.TLS, c.certs.API)
 		if err != nil {
 			return fmt.Errorf("could not create clients: %w", err)
 		}