User Story:

As a ARO HCP user, I want to be able to:

• mount certificates from Key Vault using the Secrets Store CSI Driver on AKS

so that I can

• use certificates to authenticate with Azure API for Cluster Ingress Operator on the HCP

Acceptance Criteria:

Description of criteria:

• Upstream documentation
• HyperShift PR with the changes to mount the certificate to the Cluster Ingress Operator deployment using the Secrets Store CSI driver

(optional) Out of Scope:

N/A

Engineering Details:

• This expects the AKS management cluster to have the Secrets Store CSI driver installed, for example, through the flag `--enable-addons azure-keyvault-secrets-provider`.
• https://learn.microsoft.com/en-us/azure/aks/csi-secrets-store-driver

This does not require a design proposal.
This does not require a feature gate.