Thanks so much for sharing! I have not had a moment to review this is detail and attempt to apply it to our setup, but I sincerely appreciate it.
Thanks again!
Check the cert-pod manager’s logs and the status of the cert and cluster user to see what’s going on, and make sure the secret is created in the correct format and namespace.