On a newly created AKS cluster we're having trouble with pods setting up k8s resources (calling <https://10.0.0.1:443/api/v1/namespaces/kube-system/..>.). Error being timed out TLS handshake to the api. By login in to the pod an using OpenSSL I can see there are no certificates returned from the server.

```
openssl s_client -connect 10.0.0.1:443
CONNECTED(00000003)

write:errno=0
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 293 bytes
Verification: OK
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)

```

We've tried upgrading etc, but to no avail. Any tips on how we can recreate these certificates?