Disallow disabling of peer TLS #1254
Description
How to categorize this issue?
/area high-availability security
/kind bug
What happened:
The Etcd CR allows for peer TLS configuration to be removed, suggesting that we support this transition, but in reality this is not supported.
What you expected to happen:
The transition should be disabled using CEL validations causing a validation error when a user tries to remove the TLS configuration.
Note:
Add appropriate test cases to e2e test suites like TestScaleOut and TestTLSAndLabelUpdates once disabling of peer TLS is supported.