Recommended method to auto distribute CA bundle for TLS

Besides manually defining the k8s secrets and referring it with `caCertSecret` in the helm chart, is there any way to auto distribute the ca bundle to the targeted kubernetes cluster during vso deployment?

for instance if i already vault-ca.pm locally can i just use the annotation to auto distribute ca bundle to vso clients to connect to a external vault?

Start with the Helm chart's caCertSecret configuration and the VSO deployment flow. Compare the manual Kubernetes Secret setup with the requested annotation-based distribution for vault-ca.pem and external Vault clients. Done means the supported approach and deployment steps are clearly documented, or the required feature scope is defined.

Written by the indexing model from the issue text.