diff --git a/src/k8s/pkg/k8sd/setup/kube_controller_manager.go b/src/k8s/pkg/k8sd/setup/kube_controller_manager.go
index 6d142ee3eb..10b5f6561c 100644
--- a/src/k8s/pkg/k8sd/setup/kube_controller_manager.go
+++ b/src/k8s/pkg/k8sd/setup/kube_controller_manager.go
@@ -20,8 +20,8 @@ func KubeControllerManager(snap snap.Snap) error {
 		"--profiling":                        "false",
 		"--root-ca-file":                     path.Join(snap.KubernetesPKIDir(), "ca.crt"),
 		"--service-account-private-key-file": path.Join(snap.KubernetesPKIDir(), "serviceaccount.key"),
-		"--use-service-account-credentials":  "true",
 		"--terminated-pod-gc-threshold":      "12500",
+		"--use-service-account-credentials":  "true",
 	}
 	// enable cluster-signing if certificates are available
 	if _, err := os.Stat(path.Join(snap.KubernetesPKIDir(), "ca.key")); err == nil {