Hi  Bob, Tee, Ghada, Joao:

Starlingx shares same certificate between kubernetes-ca and etcd-ca.

It will dramatically increase the complexity of updating etcd-ca cert.

Therefore do the separating CA work.

Need your help to check and review.

Thanks

Please refer to patches below

https://review.opendev.org/c/starlingx/ansible-playbooks/+/800412

https://review.opendev.org/c/starlingx/stx-puppet/+/799569

Best Regard

Chant Yu