Sub CA for the deployment

[Meri Tadevosyan (Meritadev)]

we have a question related to the PKI, if we would like to rely on existing CA, will it be enough to have Sub CA for the deployment?

[Oleksandr K. (okozachenko1203)]

Atmosphere supports any kind of issuer spec.
So in this case, we can use CA issuer with the sub CA provided from customer

[Mohammed Naser (mnaser)]

That's correct. Indeed, we already use the built-in CA issuer to generate self-signed certificate in our Molecule deployment. I think the only thing missing here is the actual documentation on how to do this.

I've created an issue for building documentation on how to do this here: #31