# ca

> **Docs live on Discourse — this repo is the executable source of truth.**
> **Topic:** https://community.turnsys.com/t/327
> **Redmine:** https://projects.knownelement.com/issues/697 · **Split from** KNEL/PFVCluster@041d311 per [#769](https://projects.knownelement.com/issues/769)

Fleet CA on tsys-ca: init/issue/selftest, fleet TLS rollout, HTTP artifact mirror (pinned wazuh-agent debs + SHA256SUMS). Roadmap: ACME endpoint, k8s CA integration, SSH certificates. [\#697]

## Layout
- `scripts/` — rule engine + hooks (see `bash scripts/check-rules.sh --fast`)
- (imported content at repo root, mirroring its PFVCluster path layout)

## Provenance
Code imported from KNEL/PFVCluster (041d311); full git history retained in PFVCluster. Enforcement layer copied per ADOPTING.md. IaC consumers: KNEL/KNELIAC references this repo.