There's new support for multiple root CAs in a Couchbase Server cluster coming in Neo, see MB-44361 . We need this available to K8s deployed clusters as well.
Support for multiple trusted root certificates
Doc for Multiple root CA Certs in CAO
Document TLS Configuration Strategies
Is neo 7.1?
Build couchbase-operator-2.3.0-226 contains couchbase-operator commit e523a8e with commit message:
K8S-2287: CA Pool