Use cert-manager to issue certificate for the capsule webhooks

[viveksyngh]

Describe the feature

the generation of the capsule-tls and capsule-ca, we are doing this through built-in controllers in the capsule and trying to
remove any other dependency required for the capsule to run.

But can we make this feature somehow optional and provide another way to provide the tls cert and ca cert? For other operators, we use cert-manager to inject ca and tls certs for webhooks, we would like to use the same thing for the capsule as well. If we can make these controllers optional and the certs path configurable then we can use cert-manager to inject certificates.

#439 (comment)

What would the new user story look like?

What would the new interaction with Capsule look like? E.g.

1. What are the prerequisites for this?
2. Tenant owner creates a new Namespace
3. This is going to be attached to the Tenant
4. All the magic happens in the background

Feel free to add a diagram if that helps explain things.

Expected behavior

A clear and concise description of what you expect to happen.

[MaxFedotov]

@viveksyngh funny thing is that i've just wrote the same thing to @prometherion yesterday :)
Already working on PR, will be ready today or on Monday

[viveksyngh]

Yeah, we had the same issue and discussed that solution some time back. here #439 . Happy to review and test it once you have the MR ready.

[MaxFedotov]

@viveksyngh done, tested locally and everything is ok