Add cert-manager CSI driver, support component image sharing

Signed-off-by: Ryan Djurovich <git@ryan0x44.com>

Author: ryan0x44

charts/cert-manager/Chart.lock

@@ -5,5 +5,8 @@ dependencies:
 - name: cert-manager-approver-policy
   repository: https://charts.jetstack.io
   version: v0.21.0
-digest: sha256:338e6af00ee3357ec646ece4c0f90ff3bd3dc2a01f414b53bfeb519195fda999
-generated: "2026-05-29T23:03:22.35747+10:00"
+- name: cert-manager-csi-driver
+  repository: https://charts.jetstack.io
+  version: v0.10.2
+digest: sha256:6344faadfe323d162483d57c121ee5719594285505deb3609a7aaf2c922f4f92
+generated: "2026-07-24T12:55:58.480363+10:00"

charts/cert-manager/Chart.yaml

@@ -18,3 +18,7 @@ dependencies:
     version: "v0.21.0"
     # https://cert-manager.io/docs/policy/approval/approver-policy/installation/
     repository: "https://charts.jetstack.io"
+  - name: cert-manager-csi-driver
+    version: "v0.10.2"
+    # https://cert-manager.io/docs/usage/csi-driver/
+    repository: "https://charts.jetstack.io"

charts/cert-manager/values.yaml

@@ -44,3 +44,11 @@ cert-manager-approver-policy:
     approveSignerNames:
       - "issuers.cert-manager.io/*"
       - "clusterissuers.cert-manager.io/*"
+
+# https://github.com/cert-manager/csi-driver/blob/v0.10.2/deploy/charts/csi-driver/values.yaml
+cert-manager-csi-driver:
+  # Keep shared Kubernetes CSI sidecars on one version across components.
+  nodeDriverRegistrarImage:
+    tag: v2.16.0
+  livenessProbeImage:
+    tag: v2.18.0

charts/platform-components/templates/_image-mirror-values.tpl

@@ -35,6 +35,13 @@ cert-manager:
   cert-manager-approver-policy:
     image:
       repository: {{ printf "%s/quay.io/jetstack/cert-manager-approver-policy" $base | quote }}
+  cert-manager-csi-driver:
+    image:
+      repository: {{ printf "%s/quay.io/jetstack/cert-manager-csi-driver" $base | quote }}
+    nodeDriverRegistrarImage:
+      repository: {{ printf "%s/registry.k8s.io/sig-storage/csi-node-driver-registrar" $base | quote }}
+    livenessProbeImage:
+      repository: {{ printf "%s/registry.k8s.io/sig-storage/livenessprobe" $base | quote }}
 platform-certs:
   platform:
     certs: