Feature Overview (aka. Goal Summary)  

By moving MCO certificate management out of MachineConfigs, certificate rotation can happen any time, even when pools are paused and would generate no drain or reboot.

Goals (aka. expected user outcomes)

Eliminate problems causes by certificate rotations being blocked by paused pools. Keep certificates up-to-date without disruption to workloads.

Requirements (aka. Acceptance Criteria):

• MCD reads certificates from our "controllerconfig" directly.

Interoperability Considerations

Windows MCO has been updated to work with this path.