caddy-frontend: Switch to manual mode for node validation

software/caddy-frontend/buildout.hash.cfg

@@ -26,7 +26,7 @@ md5sum = e7d7e1448b6420657e953026573311ca
 
 [profile-caddy-replicate]
 filename = instance-apache-replicate.cfg.in
-md5sum = 59f3a67999f5fb3e595486e2b801af08
+md5sum = b6fed105bafcd095fc930b6103060706
 
 [profile-slave-list]
 _update_hash_filename_ = templates/apache-custom-slave-list.cfg.in

software/caddy-frontend/instance-apache-replicate.cfg.in

@@ -24,8 +24,8 @@
         'authenticate-to-backend',
     ]
 %}
-{% set aikc_enabled = slapparameter_dict.get('automatic-internal-kedifa-caucase-csr', 'true').lower() in TRUE_VALUES %}
-{% set aibcc_enabled = slapparameter_dict.get('automatic-internal-backend-client-caucase-csr', 'true').lower() in TRUE_VALUES %}
+{% set aikc_enabled = slapparameter_dict.get('automatic-internal-kedifa-caucase-csr', 'false').lower() in TRUE_VALUES %}
+{% set aibcc_enabled = slapparameter_dict.get('automatic-internal-backend-client-caucase-csr', 'false').lower() in TRUE_VALUES %}
 {# Ports 8401, 8402 and 8410+1..N are reserved for monitor ports on various partitions #}
 {% set master_partition_monitor_monitor_httpd_port = 8401 %}
 {% set kedifa_partition_monitor_httpd_port = 8402 %}

software/caddy-frontend/instance-caddy-input-schema.json

@@ -79,7 +79,7 @@
       "type": "integer"
     },
     "automatic-internal-kedifa-caucase-csr": {
-      "default": "true",
+      "default": "false",
       "description": "Automatically signs CSRs sent to KeDiFa's caucase, based on csr_id and matching certificate.",
       "enum": [
         "true",
@@ -89,7 +89,7 @@
       "type": "string"
     },
     "automatic-internal-backend-client-caucase-csr": {
-      "default": "true",
+      "default": "false",
       "description": "Automatically signs CSRs sent to Backend Client's caucase, based on csr_id and matching certificate.",
       "enum": [
         "true",