Migrate away from initContainers for CA Bundle operations (#177)

To provide better support for disconnected environments, the operator's
initContainers are being removed.

This PR removes the initContainer that performs CA Bundle concatenation,
and now processes cert data from ConfigMaps directly before mounting the
final result into the llama-stack container.

Validation steps are performed to ensure that only legitimate
certificate data is being passed to the llama-stack process in the
container. Other basic size /number validation is done to ensure the
operator stays within its resource limits.

Startup script additions were avoided this time, so that intentions like
RHAIENG-1438 can be carried out without additional logic overhead.


Supersedes #174
Closes RHAIENG-1383

---------

Signed-off-by: Doug Edgar <dedgar@redhat.com>

Author: rhdedgar

config/samples/example-with-ca-bundle.yaml

@@ -61,8 +61,6 @@ spec:
         value: "meta-llama/Llama-3.2-1B-Instruct"
       - name: VLLM_URL
         value: "https://vllm-server.vllm-dist.svc.cluster.local:8000/v1"
-      - name: VLLM_TLS_VERIFY
-        value: "/etc/ssl/certs/ca-bundle.crt"
     userConfig:
       configMapName: llama-stack-config
       # configMapNamespace: ""  # Optional - defaults to the same namespace as the CR
@@ -71,6 +69,12 @@ spec:
         configMapName: custom-ca-bundle
         # configMapNamespace: ""  # Optional - defaults to the same namespace as the CR
         # configMapKeys not specified - defaults to ["ca-bundle.crt"]
-        # configMapKeys: # Specify multiple keys to concatenate into ca-bundle.crt
+        # configMapKeys: # Specify multiple keys to concatenate into a single CA bundle
         #   - ca-bundle1.crt
         #   - ca-bundle2.crt
+        # Note: The operator will automatically:
+        #   1. Validate and extract valid certificates from all specified ConfigMap keys
+        #   2. Concatenate them into a single PEM file
+        #   3. Create a managed ConfigMap named {instance-name}-ca-bundle
+        #   4. Mount the bundle at /etc/ssl/certs/ca-bundle/ca-bundle.crt
+        #   5. Set SSL_CERT_FILE environment variable automatically