Describe the feature

Currently we support different approaches to creating tls certificates:

• certManager certificates
• Self-signed + CA-Controller

What would the new user story look like?

We should only support cert-manager certificates. Offloading the complexity off rotating certificates to cert-manager as well as the CA injection. This changed would make cert-manager a requirement for capsule to be run.

But since there a lot of projects with a requirement to cert-manager, I think this would not be too wild of an ask for our users.