An object representing the asynchronous update that promotes the certificate authority to be the cluster's signer.