Why do we have to recreate certificates for the entire cluster when upscaling?

[ilsaloving]

I was looking at the docker deployment methond, and in particular the certificate generation process. I discovered that, when upscaling a cluster, "it is recommended" that we recreate all the certificates from scratch. The certificates generation image bears that out... If you want to create new certificates, you have the move the old ones out of the way.

This makes no sense to me at all, and makes the upscaling process needlessly cumbersome. I am assuming that a given node needs to be restarted to pick up the updated certificate. This means for docker and kubernetes installations, you effectively have to bring down the entire wazuh cluster just to add a single node!

I don't understand how this can be considered in any way acceptable.

Edit: Whoops, I meant to post this in the main repo. I don't know how it got here.