You are viewing documentation for a release that is no longer maintained. The latest supported version of version 3 is [3.11]. For the most recent version 4, see [4].
Node certificates are signed by the cluster; they come from a certificate authority (CA) that is generated by the bootstrap process. Once the cluster is installed, the node certificates are auto-rotated.
Management
These certificates are managed by the system and not the user.