You no longer need to monitor and manually rotate non-CA certificates on the AKS control plane and agent nodes for compliance or policy reasons.

Source