User Story:

As a ARO HCP user, I want to be able to:

• mount certificates from Key Vault using the Secrets Store CSI Driver on AKS

so that I can

• use certificates to authenticate with Azure API for image registry on the HCP

Acceptance Criteria:

Description of criteria:

• Upstream documentation
• HyperShift PR with the changes to mount the certificate to the image registry deployment using the Secrets Store CSI driver

(optional) Out of Scope:

N/A

Engineering Details:

• This expects the AKS management cluster to have the Secrets Store CSI driver installed, for example, through the flag `--enable-addons azure-keyvault-secrets-provider`.
• https://learn.microsoft.com/en-us/azure/aks/csi-secrets-store-driver

This requires/does not require a design proposal.
This requires/does not require a feature gate.