should the fulcio keys & cert be removed from chart in favor of the secret creation from files?

[sallyom]

Copy/pasting the values in the helm UI is more tedious than creating the secret via oc with below cmds from files on disk. The user experience for cp/pasting values is not ideal. I'm not sure we should keep those options in the scaffolding chart. Instead, a BYO secret with the necessary content can be a pre-req.

oc create ns fulcio-system
./fulcio-create-root-ca-openssl.sh
./rekor-create-signer-key.sh
cd keys-cert
oc -n fulcio-system create secret generic fulcio-secret-rh --from-file=private=file_ca_key.pem --from-file=public=file_ca_pub.pem --from-file=cert=fulcio-root.pem  --from-literal=password=secure --dry-run=client -o yaml | oc apply -f-
oc -n rekor-system create secret generic rekor-private-key --from-file=private=./keys-cert/rekor_key.pem --dry-run=client -o yaml | oc apply -f-