NETOBSERV-773 Copy certificates across namespaces

[jotak]

Certificates (configmaps or secrets) can now be referred to with their source namespace; when that namespace doesn't match their target namespace (e.g. netobserv or netobserv-privileged), they are copied.

Had to refactor a little bit to break an import cycle between cert watchers and helper

Add tests

TODO

• make sure Kafka certificates are reloaded in pods, not only for agent also for FLP

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please ask for approval from jotak. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-merge-robot]

PR needs rebase.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[jotak]

@jpinsonneau this is what we talked about today on copying certificates. I need to rebase and retest, seems like it's full of conflicts 😬

[jotak]

I'll close and reopen a new one