Is there any method to update the certificates inside of the vcluster?

[LinPr]

hello, I have a question Is there any method to update the certificates inside of the vcluster? Just like physical cluster, for example, k8s , started by kubeadm,
the certificate of apiserver, kubelet, controller_manager and so on, could be updated by executing kubeadm alpha certs renew all

since the vcluster based on k8s like distributions，i wanna ask if it is needed to support a mechanism to do this job

[heiko-braun]

@FabianKramm or @ThomasK33 do you know?

[vdombrovski]

+1 This feature is really useful, as many services might break once the in-cluster certificate is expired.