Add new golden tests case which generates secret and certificate

.sync.yml

@@ -16,3 +16,4 @@ docs/antora.yml:
       - custom-route-4.7
       - custom-route-legacy
       - custom-route-legacy-4.7
+      - custom-route-managed-tls

tests/custom-route-managed-tls.yml

@@ -0,0 +1,41 @@
+parameters:
+  kapitan:
+    dependencies:
+      - type: https
+        source: https://raw.githubusercontent.com/projectsyn/component-cert-manager/v2.2.0/lib/cert-manager.libsonnet
+        output_path: vendor/lib/cert-manager.libsonnet
+      - type: https
+        source: https://raw.githubusercontent.com/projectsyn/component-resource-locker/v2.0.1/lib/resource-locker.libjsonnet
+        output_path: vendor/lib/resource-locker.libjsonnet
+
+  resource_locker:
+    namespace: syn-resource-locker
+
+  openshift4_console:
+    route:
+      console:
+        hostname: console.cluster.example.org
+        servingCertKeyPairSecret:
+          name: console-cluster-example-org-tls
+    config:
+      route:
+        hostname: console.cluster.example.com
+        secret:
+          name: console-cluster-example-com-tls
+
+    secrets:
+      unused: null
+      console-cluster-example-com-tls:
+        stringData:
+          tls.crt: ?{vaultkv:${cluster:tenant}/${cluster:name}/openshift4-console/tls/cert}
+          tls.key: ?{vaultkv:${cluster:tenant}/${cluster:name}/openshift4-console/tls/key}
+
+    cert_manager_certs:
+      unused: null
+      console-cluster-example-org-tls:
+        spec:
+          dnsNames:
+            - console.cluster.example.org
+          issuerRef:
+            name: letsencrypt-staging
+            kind: ClusterIssuer

tests/golden/custom-route-managed-tls/openshift4-console/openshift4-console/00_namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  labels:
+    name: openshift-console
+  name: openshift-console

tests/golden/custom-route-managed-tls/openshift4-console/openshift4-console/01_certs.yaml

@@ -0,0 +1,15 @@
+apiVersion: cert-manager.io/v1
+kind: Certificate
+metadata:
+  annotations: {}
+  labels:
+    name: console-cluster-example-org-tls
+  name: console-cluster-example-org-tls
+  namespace: openshift-config
+spec:
+  dnsNames:
+    - console.cluster.example.org
+  issuerRef:
+    kind: ClusterIssuer
+    name: letsencrypt-staging
+  secretName: console-cluster-example-org-tls

tests/golden/custom-route-managed-tls/openshift4-console/openshift4-console/01_tls_secrets.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+data: {}
+kind: Secret
+metadata:
+  annotations: {}
+  labels:
+    name: console-cluster-example-com-tls
+  name: console-cluster-example-com-tls
+  namespace: openshift-config
+stringData:
+  tls.crt: t-silent-test-1234/c-green-test-1234/openshift4-console/tls/cert
+  tls.key: t-silent-test-1234/c-green-test-1234/openshift4-console/tls/key
+type: kubernetes.io/tls

tests/golden/custom-route-managed-tls/openshift4-console/openshift4-console/10_console.yaml

@@ -0,0 +1,9 @@
+apiVersion: operator.openshift.io/v1
+kind: Console
+metadata:
+  annotations: {}
+  labels:
+    name: cluster
+  name: cluster
+spec:
+  managementState: Managed

tests/golden/custom-route-managed-tls/openshift4-console/openshift4-console/20_ingress_config_patch.yaml

@@ -0,0 +1,63 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    name: cluster-manager
+  name: cluster-manager
+  namespace: syn-resource-locker
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    name: syn-resource-locker-cluster-manager
+  name: syn-resource-locker-cluster-manager
+rules:
+  - apiGroups:
+      - config.openshift.io
+    resources:
+      - ingresses
+    verbs:
+      - get
+      - list
+      - patch
+      - watch
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  labels:
+    name: syn-resource-locker-cluster-manager
+  name: syn-resource-locker-cluster-manager
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: syn-resource-locker-cluster-manager
+subjects:
+  - kind: ServiceAccount
+    name: cluster-manager
+    namespace: syn-resource-locker
+---
+apiVersion: redhatcop.redhat.io/v1alpha1
+kind: ResourceLocker
+metadata:
+  annotations:
+    argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+    argocd.argoproj.io/sync-wave: '10'
+  labels:
+    name: cluster
+  name: cluster
+  namespace: syn-resource-locker
+spec:
+  patches:
+    - id: patch1
+      patchTemplate: "\"spec\":\n  \"componentRoutes\":\n  - \"hostname\": \"console.cluster.example.org\"\
+        \n    \"name\": \"console\"\n    \"namespace\": \"openshift-console\"\n  \
+        \  \"servingCertKeyPairSecret\":\n      \"name\": \"console-cluster-example-org-tls\""
+      patchType: application/strategic-merge-patch+json
+      targetObjectRef:
+        apiVersion: config.openshift.io/v1
+        kind: ingress
+        name: cluster
+  serviceAccountRef:
+    name: cluster-manager