Certificates SANs FQDN

[gulecroc]

Fixes #712

Motivation

Currently certificates are generated with wildcard SANs.

This PR allow to generate SANs with either :

• wildcard (default)
• fqdn for stafesulsets
• none (use tls.<component>.dnsNames)

Modifications

Add tls.common.sanMode :

• wildcard mode :

  dnsNames:
    - "*.<fullname>-<component>-headless.<namespace>.svc.<cluster>" # only for broker and zookeeper
    - "<fullname>-<component>-headless.<namespace>.svc.<cluster>" # only for broker and zookeeper
    - "<fullname>-<component>.<namespace>.svc.<cluster>"
    - "<fullname>-<component>"

• fqdn mode :

  dnsNames:
    - "<fullname>-<component>-<replicas>.<fullname>-<component>-headless.<namespace>.svc.<cluster>" # headless statefulsets
    - "<fullname>-<component>-<replicas>.<fullname>-<component>.<namespace>.svc.<cluster>" # non headless statefulsets
    - "<fullname>-<component>-headless.<namespace>.svc.<cluster>" # only for broker and zookeeper
    - "<fullname>-<component>.<namespace>.svc.<cluster>"
    - "<fullname>-<component>"

• none mode :

  dnsNames:
    - "<fullname>-<component>.<namespace>.svc.<cluster>"
    - "<fullname>-<component>"

Verifying this change

• Make sure that the change passes the CI checks.