docs: add External Secrets Operator v0.14.4 installation guide

[SuJinpei]

Adds an installation guide for External Secrets Operator v0.14.4, the version now available in the Alauda Cloud marketplace for ACP 4.1, 4.2, 4.3 and 4.4.

Contents

• Install from OperatorHub, then deploy ESO with an OperatorConfig.
• A Quick Start that needs no external system (the kubernetes provider).
• Reading from HashiCorp Vault with Kubernetes auth.
• An in-place upgrade from the marketplace's 0.10.7, and what changes for upgraded clusters.
• Known limitations, uninstall and FAQ.

Validation: every command and YAML block was run unchanged on an ACP 4.3.2 cluster. Only the Vault and API-server addresses were filled in. Each claim was paired with a negative check. For example:

• removing the reader's permissions turns the ExternalSecret SecretSyncedError while the Secret keeps its last value;
• a bare kubectl get operatorconfig resolves to the Ceph CSI kind on ACP, so the guide always uses the full resource name.

The upgrade path is described from release testing on ACP 4.1, 4.2, 4.3.2 and 4.4.

The id: field is omitted on purpose so CI assigns the KB id on merge; zh is generated by the translation job.

🤖 Generated with Claude Code