Background:

AWS non-sts and GCP non-workload-identity support ambient credential using env var CLOUD_CREDENTIALS_SECRET_NAME since openshift/cert-manager-operator#120 . AWS non-sts case using CLOUD_CREDENTIALS_SECRET_NAME is OCP-65033, documented as Authenticating the cert-manager Operator for Red Hat OpenShift on AWS. GCP non-workload-identity case using CLOUD_CREDENTIALS_SECRET_NAME is OCP-65035, documented as Authenticating the cert-manager Operator for Red Hat OpenShift on GCP.

Test to explore:

let's try if cert-manager CLOUD_CREDENTIALS_SECRET_NAME works well too in Azure non-workload-identity cluster. If works, we need to add a case. (And document it in future. Note, this Jira is for Azure non-workload-identity. Azure workload identity doc is tracked by OSDOCS-9276).