allErrs = append(allErrs, ValidateEtcd(&c.Etcd, field.NewPath("etcd"))...)
	allErrs = append(allErrs, ValidateEncryptionAlgorithm(c.EncryptionAlgorithm, field.NewPath("encryptionAlgorithm"))...)
	allErrs = append(allErrs, componentconfigs.Validate(c)...)
	for _, certError := range ValidateCertValidity(c) {
		klog.Warningf("WARNING: %s", certError.Error())
	}
	return allErrs
}

			k.config.NotAfter = k.creationTime.
				Add(ic.ClusterConfiguration.CACertificateValidityPeriod.Duration)
		}
	}

	// Use the encryption algorithm from ClusterConfiguration.
	k.config.EncryptionAlgorithm = ic.ClusterConfiguration.EncryptionAlgorithmType()
	return &k.config, nil
}

// CreateFromCA makes and writes a certificate using the given CA cert and key.

	// INFO: in.CIImageRepository opted out of conversion generation
	out.FeatureGates = *(*map[string]bool)(unsafe.Pointer(&in.FeatureGates))
	out.ClusterName = in.ClusterName
	// WARNING: in.EncryptionAlgorithm requires manual conversion: does not exist in peer-type
	// WARNING: in.CertificateValidityPeriod requires manual conversion: does not exist in peer-type