[Improvement] separate the webhook into an independent container #9990
Description
Is your improvement request related to a problem? Please describe.
The conversion webhook is useful for handling multiple CR versions in cloud environments. However, cause the webhook is currently integrated within the KubeBlocks container, enabling it introduces significant risk.
Consider the scenario, when a CR is changed, KubeBlocks may crash. If a rollback is attempted after the CR change, the Kubernetes API server may fail to process the reverted CR, because the webhook is registered for KubeBlocks CRDs and the CR changes require valid webhook certificates.
Describe the solution you'd like
Separate the webhook into an independent container, and deploy it only when the webhook feature is enabled via Helm.