is it necessary using enterprise pki as root ca，then using cert-manager generate intermediate ca store in openbao ，last using openbao generate cert and key。and all component using the same root ca。

[13567436138]

Question

is it necessary using enterprise pki as root ca，then using cert-manager generate intermediate ca store in openbao ，last using openbao generate cert and key。and all component using the same root ca and different intermediate ca。
using openbao version mechenism，to achieve stale cert。