...

/usr/share/cagefs-skeleton/usr/lib/firewalld/services/kube-controller-manager-secure.xml