Configuring self-signed cert for private registry - Documentation

[x8-ball]

Hi,
I'm having problems integrating the client certificate for Tekton. It is not clear to me from the documentation what is meant by this section. Does it refer to the folder structure of the worker node or is it in a deployment of Tekton itself? Unfortunately, I can't find an answer to this question online.

For reference im talking about this section https://tekton.dev/docs/installation/additional-configs/#configuring-self-signed-cert-for-private-registry

Any help would be really appreciated.

[adambkaplan]

Likewise having a very hard time understanding the scope of this configuration:

1. What is this custom/self-signed cert used for?
2. Is this CA limited to private container registries? Or can it be used for anything that uses SSL/HTTPS?
3. Is this certificate made available to Tasks globally? If so, how?
4. What are the requirements for this CA cert? Does this need to have a full trust bundle, i.e. something generated by cert-manager's trust-manager? Or does it only need to have additional CAs for a particular service/endpoint?