ingress_secret_provider.yaml

apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
  name: azure-tls
spec:
  provider: azure
  secretObjects:                            # secretObjects defines the desired state of synced K8s secret objects
  - secretName: ingress-tls-csi
    type: kubernetes.io/tls
    data: 
    - objectName: aks-aro-cert
      key: tls.key
    - objectName: aks-aro-cert
      key: tls.crt
  parameters:
    usePodIdentity: "false"
    useVMManagedIdentity: "true"
    userAssignedIdentityID: a3c08cbe-52a4-43b4-8dde-bad48e656e2e
    keyvaultName: ingresskey                 # the name of the AKV instance
    objects: |
      array:
        - |
          objectName: aks-aro-cert
          objectType: secret
    tenantId:  72f988bf-86f1-41af-91ab-2d7cd011db47                    # the tenant ID of the AKV instance