Support automatic generation, injection and rotation of TLS artifacts required for component protection webhook #1216
Description
How to categorize this issue?
/area open-source
/area ops-productivity
/kind enhancement
What would you like to be added:
It should be possible for a human operator to install helm chart with component protection webhook enabled. etcd-druid should as part of the installation, ensure that it generates the CA bundle and injects it into the webhook configuration clientConfig.caBundle. It should also be able to rotate the TLS artifacts.
Why is this needed:
This will help easier consumption of etcd-druid by non-gardener users.