[koptan]: add cert-manager and webhook resources to Helm chart

[Copilot]

The koptan controller introduced validating/mutating webhooks, but the Helm chart lacked the corresponding Kubernetes resources to deploy them.

Changes

New values (values.yaml)

• webhook.enabled (default: false) — gates all webhook-related resources
• certManager.enabled (default: false) — gates cert-manager Certificate/Issuer and injects cert-manager.io/inject-ca-from annotations onto webhook configs

New templates

• webhooks.yaml — MutatingWebhookConfiguration + ValidatingWebhookConfiguration covering GoApp, JavaApp, Slipway, Voyage
• webhook-service.yaml — Service routing port 443 → 9443 for the webhook server
• certmanager.yaml — self-signed Issuer + Certificate (webhook-server-cert) for TLS termination

Updated deployment.yaml

• Adds containerPort: 9443 (webhook-server) when webhook.enabled=true
• Mounts webhook-server-cert Secret at /tmp/k8s-webhook-server/serving-certs

Example minimal values to enable webhooks with cert-manager:

webhook:
  enabled: true
certManager:
  enabled: true

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[koptan]: add cert-manager resources in helmChart</issue_title>
<issue_description>As title says. As you made the validations and webhooks, that logic introduced new resources, that must be added to the helm chart.

Acceptance Criteria:

1. Validating/Mutating resources
2. Cert manager resources</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes [koptan]: add cert-manager resources in helmChart #8

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.