Feature Overview (aka. Goal Summary)  

Provide a way to automatically recover a cluster with expired etcd server and peer certificates.

Goals (aka. expected user outcomes)

A cluster has etcd serving, peer, and serving-metrics certificates that are expired. There should be a way to either trigger certificate rotation or have a process that automatically does the rotation.

Requirements (aka. Acceptance Criteria):

Deliver rotation and recovery requirements from OCPSTRAT-714