Custom certificate authority (CA) support in AKS is now generally
available.
CAs allow you to establish trust between your Azure
Kubernetes Service (AKS) cluster and your workloads as private registries,
proxies, and firewalls. A Kubernetes secret is used to store the certificate
authority's information until it is passed to all nodes in the cluster.
Learn more.