[BUG] Our reconciliation logic is not handling a field removal from CR

[git-hyagi]

Our reconciliation logic is not handling a resource removal from CR, it is only checking if what is defined is deployed.

[git-hyagi]

After an internal discussion, we decided that, for now, if a field is removed we will use mutating webhooks to set it back to the same value as before.

This is to avoid issues like removing a PVC field and losing all the data (if no PVC is defined, the reconcile logic would define an emptyDir).

If we find that this is not the best approach, we will tweak the settings for each field of Pulp CR.

[git-hyagi]

We did some tests and could make the validation through the admission controller work, but decided to not enable it yet.

To enable the validation webhooks users would need to first configure a certificate that needs to be trusted by api pods. We checked some ways to achieve this:

• through service certificate in OCP environments
• by manually installing cert-manager
• by manually installing cert-manager-operator in OCP environments
• by manually creating and configuring the certificates and CA

Considering that any of the above alternatives would be another burden for the operator adoption, we decided to not merge #658 into main yet.