Sub CA for the deployment

[Meritadev]

we have a question related to the PKI, if we would like to rely on existing CA, will it be enough to have Sub CA for the deployment?

[okozachenko1203]

Atmosphere supports any kind of issuer spec.
So in this case, we can use CA issuer with the sub CA provided from customer

[mnaser]

That's correct. Indeed, we already use the built-in CA issuer to generate self-signed certificate in our Molecule deployment. I think the only thing missing here is the actual documentation on how to do this.

I've created an issue for building documentation on how to do this here: #31