Verify Group Who Owns The Etcd PKI Certificate Files

$ sudo chgrp root /etc/kubernetes/static-pod-resources/*/*/*/*.crt