ARO installs require two sets of credentials for Azure, a first party service principal and cluster service principal.

To install the second set of credentials the cluster service principal to the cluster ARO would like to use installer manifests to override the cloud credential operator secret.

The manifests function in Hive uses mounts manifests into the installer using a ConfigMap (keys as file names and values as contents) which is not suitable for storing the contents of a secret like the cluster service principal. Hive uses an kube corev1 API VolumeSource to do it. We need to reference a Secret type instead of a ConfigMap type. VolumeSource supports it.

Done criteria

• Allow the configuration of manifests to be source from a Secret type