There is an open PR to this project to document an HA control plane. Basically, you add the kube-podmaster onto each master machine, which does a leader election for the API, controller manager, etc so that only one instance is mutating the cluster. If that does down, another leader election happens.