feat: add tasklist and operate importer as a separate deployment

[hamza-m-masood]

Which problem does the PR fix?

related: https://github.com/camunda/team-distribution/issues/415

Decisions I have made for the separate improter deployment:

• The importer is disabled by default
• The importer does not have a kubernetes service
• I added a section in the values.yaml for the importer with values I find relevant for the customer to modify the import deployment
• The importer deployment is using the same service account as the orchestration cluster
• Removed all ports
• Removed priorityClassName
• Removed sidecars
• The security context of the orchestration cluster is the same as the importer deployment
• The node selector and affinity of the orchestration cluster is the same as the importer deployment

The separate importer deployment can simply be tested by deploying the 8.8 helm chart with either keycloak or basic auth enabled and setting the following value to true in the values.yaml:

orchestration
  importer
    enabled: true

What's in this PR?

Checklist

Please make sure to follow our Contributing Guide.

Before opening the PR:

• In the repo's root dir, run make go.update-golden-only.
• There is no other open pull request for the same update/change.
• Tests for charts are added (if needed).
• In-repo documentation are updated (if needed).

After opening the PR:

• Did you sign our CLA (Contributor License Agreement)? It will show once you open the PR.
• Did all checks/tests pass in the PR?

[aabouzaid]

Do we have any case where we need to enable one of the importers but not the other 🤔 (Operate only or Tasklist only)

What happens if a user deploys 8.7 with one of the apps only (Operate or Tasklist)? Will the importer handle this?

[hamza-m-masood]

Do we have any case where we need to enable one of the importers but not the other 🤔 (Operate only or Tasklist only)

To be honest, I don't have enough customer setup knowledge to answer that question. @theburi what do you think?

[hamza-m-masood]

What happens if a user deploys 8.7 with one of the apps only (Operate or Tasklist)? Will the importer handle this?

It would not matter too much what they did on 8.7 I think. What we really want to test here is if the operate/tasklist importer deployment works when either the operate or tasklist profile is enabled in the 8.8 orchestration cluster.

I can test this.

[hamza-m-masood]

Here are the steps I did:

• Fresh install of 8.8 SNAPSHOT making sure the the orchestration cluster did not have the tasklist profile
• deployed the external importer deployment with the following profiles: tasklist,operate,consolidated-auth
• Once all pods were healthy I deployed 2 models to the orchestration cluster

I can see the 2 models on the operate UI.

[hamza-m-masood]

@jessesimpson36 thanks for the approval. After pairing with Ahmed, we decided to remove the podLabels,podAnnotations,dnsConfig,dnsPolicy from the importer in the values.yaml