Kubernetes: properly reuse tls certificates ⚠️

[YuryHrytsuk]

What do these changes do?

Generate certificate once and store them in global default traefik TLS Store

Implementation detail

1. we generate certificates by explicitly defining certificate resource
   in cert-manager (this is configured via helm chart values)
2. we copy generated secrets (containing certitificates) from cert-manager namespace to traefik namespace
   via reflector (this is achieved via secretTemplate annotations)
3. traefik explicitly defines TLS Store that references secrets
   containing certificates (tlsStore is configured in helm chart values)

Implications

• we don't need to specify TLS section in ingress objects anymore as traefik automatically matches domain with registered in TLS Store certificates

Bonus:

• Add HELMFILE_EXTRA_ARGS variable to Makefile to pass options to helmfile CLI if necessary
• Merge traefik values (we get rid of insecure configuration)
• Add pod security standard to reflector
• Update reflector watcher timeout (implication: if mirrored secret is removed, it will be copied again faster (<= 30 seconds))

Actions required

• Manually remove monitoring certificate, secret, order and certificaterequests from all affected workloads (e.g. portainer)
• Update reflector namespace (add pod security standard annotation)

To do / answer

• rearrange traefik chart values
• polish cert manager certificate file
• what happens if mirrored secret is manually deleted? will it be copied again? --> it will be (watcher timeout setting)
• how to force renew certificate --> https://cert-manager.io/docs/reference/cmctl/#renew

Related issue/s

• closes Kubernetes: properly reuse TLS certificates  #1228
• works around Documentation: clearly document Kubernetes Ingress Class namespaced tls certificate misconception traefik/traefik#12116

Related PR/s

• configuration https://git.speag.com/oSparc/osparc-ops-deployment-configuration/-/merge_requests/1636

Checklist

• I tested and it works

[mrnicegyu11]

looks solid, thanks for the verbose PR description. 🚀 🎸