You still have to rebuild each Application Container with new CACert and deploy them. Depending on teams are working, that can be disruptive.
AFAIK a container build just puts files into a base image, this creates a sort of a commit chained to the base image commit. This means to update the base image you only need to rebase that commit on top of the new base image branch automatically.
I would say that if rebuilding your docker containers is a disruptive process, that is a process issue.
AFAIK a container build just puts files into a base image, this creates a sort of a commit chained to the base image commit. This means to update the base image you only need to rebase that commit on top of the new base image branch automatically.