feat: Enable opa authorization

[maltesander]

Description

depends on stackabletech/docker-images#1340

• Add operator-rs OpaConfig to CRD
• Add opa tests to smoke test
  • rego rules allow CREATEs and SELECTS for the existing smoke test
  • added python script to test deny case (database not allowed)
• Add support for TLS implementation
• Add new hive - opa example

part of #388

Definition of Done Checklist

• Not all of these items are applicable to all PRs, the author should update this template to only leave the boxes in that are relevant
• Please make sure all these things are done and tick the boxes

Author

• Changes are OpenShift compatible
• CRD changes approved
• CRD documentation for all fields, following the style guide.
• Helm chart can be installed and deployed operator works
• Integration tests passed (for non trivial changes)
• Changes need to be "offline" compatible
• Links to generated (nightly) docs added
• Release note snippet added

Reviewer

• Code contains useful comments
• Code contains useful logging statements
• (Integration-)Test cases added
• Documentation added or updated. Follows the style guide.
• Changelog updated
• Cargo.toml only contains references to git tags (not specific commits or branches)

Acceptance

• Feature Tracker has been updated
• Proper release label has been added
• Links to generated (nightly) docs added
• Release note snippet added
• Add type/deprecation label & add to the deprecation schedule
• Add type/experimental label & add to the experimental features tracker

[maltesander]

test: https://testing.stackable.tech/view/02%20Operator%20Tests%20(custom)/job/hive-operator-it-custom/42/

[lfrancke]

I only looked at the one commit that came in after the approval from Lukas and that looks good to me.

[lfrancke]

minor suggestion

[lfrancke]

Suggested change

	# This property *is* required. It changed for derby in version 4.2.0
	# which we check in code and add in the ConfigMap builder instead of
	# the compute_files() method in crd.rs.
	# This property *is* required even though it is set to `false` here.
	# The required value changed in Derby in version 4.2.0.
	# We now set this value depending on the Hive version (and its corresponding Derby version) and add it to the ConfigMap programatically.

[lfrancke]

Suggested change

	# This property *is* required. It changed for derby in version 4.2.0
	# which we check in code and add in the ConfigMap builder instead of
	# the compute_files() method in crd.rs.
	# This property *is* required even though it is set to `false` here.
	# The required value changed in Derby in version 4.2.0.
	# We now set this value depending on the Hive version (and its corresponding Derby version) and add it to the ConfigMap programatically.```