Per discussion in #wg-cert-manager-4-13 , for better tracking of related efforts like the linked test Epics examples there, creating this Epic issue. The upstream functions scoped for 1.11 release, like Vault, can be linked under this Jira issue. For upstream functions not scoped for 1.11 release, like private ACME, Azure workload identity, we can incrementally test, document for next releases per Slack discussions and google document comment discussion among QE, PMs and Devs.