chore: add deprecation notices (#2089)

* fix: revert pv labeling to dircet api reads

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* fix: revert pv labeling to dircet api reads

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* feat: add deprecation warnings

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* chore: implement playground

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

* chore: implement playground

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

---------

Signed-off-by: Oliver Baehler <oliver@sudo-i.net>

playground/scripts/capsule-post-renderer.sh

@@ -0,0 +1,37 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+for required_variable in PLAYGROUND_CA_BUNDLE CAPSULE_TLS_CERT_BUNDLE CAPSULE_TLS_KEY_BUNDLE; do
+  if [[ -z "${!required_variable:-}" ]]; then
+    echo "Missing required environment variable: ${required_variable}" >&2
+    exit 1
+  fi
+done
+
+render_dir="$(mktemp -d)"
+trap 'rm -rf "${render_dir}"' EXIT
+
+tee "${render_dir}/rendered.yaml" >/dev/null
+
+{
+  printf '%s\n' \
+    'apiVersion: kustomize.config.k8s.io/v1beta1' \
+    'kind: Kustomization' \
+    'resources:' \
+    '  - rendered.yaml' \
+    'patches:' \
+    '  - target:' \
+    '      version: v1' \
+    '      kind: Secret' \
+    '      name: capsule-tls' \
+    '    patch: |' \
+    '      - op: add' \
+    '        path: /data' \
+    '        value:'
+  printf '          ca.crt: %s\n' "${PLAYGROUND_CA_BUNDLE}"
+  printf '          tls.crt: %s\n' "${CAPSULE_TLS_CERT_BUNDLE}"
+  printf '          tls.key: %s\n' "${CAPSULE_TLS_KEY_BUNDLE}"
+} > "${render_dir}/kustomization.yaml"
+
+kubectl kustomize "${render_dir}"