This documentation is work in progress and might not be complete or fully tested.
This documentation is work in progress and might not be complete or fully tested.

Purpose

Node certificates are signed by the cluster; they come from a certificate authority (CA) that is generated by the bootstrap process. Once the cluster is installed, the node certificates are auto-rotated.

Management

These certificates are managed by the system and not the user.

Additional resources