Add SSO CA support for Kyverno Reporter

General MR

Summary

Added SSO CA support for Kyverno Reporter.

• Creates the configured SSO CA secret in the kyverno-reporter namespace when SSO and a custom CA are enabled.
• Mounts the CA certificate into the Policy Reporter UI at /etc/oidc/ca.pem.
• Configures OpenID Connect to use the mounted CA while keeping TLS verification enabled.
• Leaves deployments without a custom SSO CA unchanged.

Validated locally through Big Bang. The Kyverno Reporter HelmRelease was Ready, all pods were 2/2 Running, the tls-ca-sso secret was mounted correctly, and the UI logs showed no TLS or certificate errors.

Relevant logs/screenshots

Linked Issue

big-bang/product/packages/kyverno-reporter#169 (closed)

Upgrade Notices

N/A