annotation for mount secret volume with custom CA certificate

[kobzonega]

trafficstars

I hereby agree to the terms of the CLA available at: https://yandex.ru/legal/cla/?lang=en

Pull request type

Please check the type of change your PR introduces:

• [ ] Bugfix
• [x] Feature
• [ ] Code style update (formatting, renaming)
• [ ] Refactoring (no functional changes, no api changes)
• [ ] Build related changes
• [ ] Documentation content changes
• [ ] Other (please describe):

What is the current behavior?

No way to mount custom ca-certificates bundle in container without usage of initContainer

Issue Number: YDBOPS-8714

What is the new behavior?

• annotation ydb.tech/ca-bundle-secret with value as secretName which mount into container systemCertsDir /etc/ssl/certs

Other information

Example usage with trust-manager bundle(https://cert-manager.io/docs/tutorials/getting-started-with-trust-manager/#mount-trust-bundle-to-application-with-automatic-use))