Fixes #7430 Introduce a set of resources which look similar to other API implementations: CA, certs, cert SANs, etc. Introduce a controller which manages the service based on resource state. Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>