Create a storage account in the same resource group as the k8s cluster:
$ az storage account create -g <resource_group_name> -n <new_storage_account_name> --sku Standard_LRS -l <location>
Create a new role to assign principals to allow them to create secrets:
apiVersion: rbac.authorization.k8s.io/v1