In Frankfurt, DCAE TLS init container (which is an extension of AAF agent/container) provides capability to generate certificate from AAF dynamically during deployment and make them available to the known mountpoint for Service components to access.  As the SAN's are explicitly set on AAF, currently there is no provision to set arbitrary hostnames based on instance.

This Jira is to track DCAE platform support for certificate generation at instance level for Guilin; corresponding AAF dependency Jira to be created/tagged later.