Allow support for Private Endpoints

[mkosieradzki]

Users should be able to create service, e.g. database, storage account or key vault together with a private endpoint. Private DNS zone should be created, integrated with the private endpoint and associated with cluster vnet.

This CRD extension should expose an annotation that will trigger creation of a Network Policy rule allowing egress connectivity to this private endpoint IP addresses to all pods (or custom selector) in the namespace owning the resource.

[matthchr]

Redis should be included in the above list as well

[cpflaume]

I think this is a security feature which can be a blocker to use azure-service-operator for redis. Same for postgresql, the only difference is that it is possible to configure a vnet for postgresql.

[matthchr]

This seems very similar to #2159. We think this needs to be done for ASOv2. We will not be doing this for ASOv1 as it is in maintenance mode.

[theunrepentantgeek]

This should be unblocked now that #2323 has been merged; I'll self assign with an aim of doing this post beta.4.

[super-harsh]

closed by #2733