This documentation is work in progress and might not be complete or fully tested. The latest supported version of version 3 is [3.11]. For the most recent version 4, see [4].
Node certificates are signed by the cluster; they come from a certificate authority (CA) that is generated by the bootstrap process. Once the cluster is installed, the node certificates are auto-rotated.
Management
These certificates are managed by the system and not the user.