certificates

!!! warning

This is a legacy role that is meant to be phased out eventually when there
is no need for the control-plane systems to have the CA installed on them.