You still have to rebuild each Application Container with new CACert and deploy them. Depending on teams are working, that can be disruptive.
I would say that if rebuilding your docker containers is a disruptive process, that is a process issue.
loading story #50278240
AFAIK a container build just puts files into a base image, this creates a sort of a commit chained to the base image commit. This means to update the base image you only need to rebase that commit on top of the new base image branch automatically.
loading story #50286765