Secretless can be deployed with a sidecar injector

[izgeri]

Objective

Once this epic is complete, end users will no longer be required to deploy Secretless by adding it to their application deployment manifests. Instead, they will be able to leverage a sidecar injector webhook to automatically inject the Secretless sidecar into application pods with the appropriate configuration.

Demo

(TODO: Describe the demo that will be delivered)

1. Installation of the sidecar injector webhook (including via Helm Chart)
2. Annotation of an application pod to qualify for injection
3. Fully functioning application leveraging injected sidecar
   • Configurable Secretless sidecar
   • Configurable Authenticator sidecar
   • Mount summon and modify entrypoint to include summon [original entrypoint]

Feature Overview

(TODO: Write the "Getting Started guide for this feature.)

Story Breakdown

• Parent of Simplify secretless deployment in Kubernetes #317 - Simplify Secretless deployment in Kubernetes
• Parent of a sidecar injector exists for secretless #174 - A sidecar injector exists for Secretless
• Parent of sidecar-injector should allow sharing of secretless domain sockets via volume mounts  #342 - sidecar-injector should allow sharing of secretless domain sockets via volume mounts
• Parent of Website includes documentation on setting up the sidecar injector #337 - Website includes documentation on setting up the sidecar injector
• Parent of a generic sidecar injector webhook (+/- CLI) exists #335 - a generic sidecar injector webhook (+/- CLI) exists
• Parent of a helm chart exists for the generic sidecar injector #405 - a helm chart exists for the generic sidecar injector
• Parent of sidecar injector is incorporated into kubernetes-conjur-demo conjurdemos/kubernetes-conjur-demo#29 - sidecar injector is incorporated into kubernetes-conjur-demo
• Parent of documentation exists for the generic sidecar injector #402 - documentation exists for the generic sidecar injector (as part of the README)
• Parent of sidecar injector allows mounting a volume with statically compiled summon #403 - sidecar injector allows mounting a volume with statically compiled summon (and common providers)
• Parent of a test suite exists for the generic sidecar injector #404 - a test suite exists for the generic sidecar injector
• Parent of the generic sidecar injector is split out into its own repository #406 - the generic sidecar injector is split out into its own repository