Stop Rotating Trust Anchors Manually. It’s a Production Nightmare Waiting to Happen.
Manually rotating trust anchors in a production Kubernetes cluster is a terrifying high-wire act that guarantees eventual failure. Automating the process with cert-manager is the only way forward, but it introduces a dangerous second-order effect: a new, centralized dependency that can tear your service mesh apart if it fails.