<p>I have created an AKS cluster. Is Azure generating the following PKI certificate for us?</p>
<p><a href="https://kubernetes.io/docs/setup/best-practices/certificates/#how-certificates-are-used-by-your-cluster" rel="nofollow noreferrer">https://kubernetes.io/docs/setup/best-practices/certificates/#how-certificates-are-used-by-your-cluster</a>.</p>

<p>Yes, AKS manages all these certificates for you, with the exception of:</p>
<blockquote>
<p>Client certificates for administrators of the cluster to authenticate to the API server</p>
</blockquote>
<p>Because AKS hands out access tokens in the form of JWTs.</p>
