- [ ] Use `Workload Identity` for auth: https://external-secrets.io/v0.7.2/provider/azure-key-vault/#referenced-service-account - [ ] TLS secret sync: https://external-secrets.io/v0.7.2/provider/azure-key-vault/#creating-external-secret