Currently the k8s plugin mounts a volume (taken from a configmap) containing the AAF CA certificate in PEM format ("cacert.pem").  Some Java-based components require a JKS truststore (or a PKCS12 equivalent).   The plugin should include JKS and PKCS12 representations of the CA cert in the volume that it mounts.