Machine Config Operator certificates overview
Learn how Machine Config Operator (MCO) certificates secure node connections to the Machine Config Server (MCS) during cluster provisioning, so you can plan for certificate maintenance and for troubleshooting node provisioning issues.
This certificate authority (CA) is used to secure connections from nodes to the MCS during initial provisioning.
There are two certificates:
-
A self-signed CA, the
machine-config-server-caconfig map (MCS CA). -
A derived certificate, the
machine-config-server-tlssecret (MCS certificate).