Verify this can run a non-trivial CRD-based workflow

[detiber]

cert-manager makes use of quite a few CRD-based features, such as multiple versions w/ conversion webhooks, validating and defaulting webhooks, use of secrets/config maps, etc. It might make a useful test case to be able to run a non-trivial CRD-based application on badidea.

One would need to run the actual Deployments for the components/webhooks externally, and disable the cainjector, but other features/functionality should work.

Upstream discussion: https://kubernetes.slack.com/archives/CDEQJ0Q8M/p1601312573013200