migrate CRD generation to controller-gen and automate Helm RBAC sync

[kahirokunn]

Changes

• Migrate hand-maintained CRD YAMLs to controller-gen auto-generation from Go types
• Generate CRD YAMLs via controller-gen into config/crd/bases/
• Add hack/sync-helm-crds.sh to auto-sync Helm chart CRDs from controller-gen output
  (split out from operator.yaml)
• Add hack/sync-helm-rbac.sh to auto-sync Helm chart RBAC ClusterRoles from
  config/rbac/role.yaml into separate per-operator files
  (rbac/serving-operator-role.yaml, rbac/eventing-operator-role.yaml)
• Integrate controller-gen execution, Helm CRD sync, and Helm RBAC sync into
  hack/update-codegen.sh and hack/verify-codegen.sh

Why

The old hand-maintained CRDs had diverged from Go type definitions:

• Istio TLS fields were defined in camelCase (credentialName) but Go struct JSON tags use
  snake_case (credential_name); values were silently ignored on deserialization
• workloads[].version, workloads[].volumeMounts existed in CRD but had no backing Go
  struct fields. Setting them had no effect.
• tls.mode was string in CRD but int32 in Go

Similarly, the Helm chart's operator.yaml contained hand-maintained ClusterRole definitions
that could diverge from config/rbac/role.yaml.

Generating from Go types with controller-gen and syncing from a single source of truth
eliminates these inconsistencies and prevents future drift.

Release Note

Migrate CRD generation from hand-maintained YAML to controller-gen, and automate
Helm chart CRD/RBAC sync from generated sources.

[knative-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: kahirokunn
Once this PR has been reviewed and has the lgtm label, please assign houshengbo for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[knative-prow]

@kahirokunn: 0 warnings.

Details

In response to this:

Fixes #

Proposed Changes

Release Note

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 63.97%. Comparing base (2226b21) to head (786194b).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2269   +/-   ##
=======================================
  Coverage   63.97%   63.97%           
=======================================
  Files          51       51           
  Lines        1960     1960           
=======================================
  Hits         1254     1254           
  Misses        605      605           
  Partials      101      101           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.