[patch] Update AI Service Gitops automation to add watsonxai_ca_crt conditionally when available

[jasmin-30]

Description

Add watsonx CA crt conditionally only when it is available in Secret on AWS SM.

Test Results

• Tested changes by updating CLI version for aiservice tenant pipeline in saas-tekton.
• Validated that generated GitOps-env params files contains watsonx_ca_crt parameter only when it exist

Test without CA Cert

Successful SPS pipeline:

Successful Argo Sync:

Kubernetes secret without watsonx ca crt:

Test with CA cert

Successful SPS pipeline:

Successful Argo Sync:

Kubernetes secret with watsonx ca crt:

---

⚠️ Notes for Reviewers

• Ensure you have understood the PR guidelines in the Playbook before proceeding with a review.
• Ensure all sections in the PR template are appropriately completed.

[boonware]

Has the case where the CA cert is defined in SM been tested?

[jasmin-30]

Has the case where the CA cert is defined in SM been tested?

Yes, Updated test results in description.

However, CA cert needs to be included in SM when watsonx is configured with Self signed certificate. For SaaS deployments, only Watsonx SaaS is supported which uses CA signed certificate.
With that said, We need to clean up the on-prem watsonx configuration from gitops, which will be taken up as separate ticket.