feat: add installation improvements (#55)

* fix(values): correct installation values

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

* feat: migrate admission policies

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

* fix(docs): installation corrections

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

---------

Signed-off-by: Oliver Bähler <oliverbaehler@hotmail.com>

Author: oliverbaehler

content/en/docs/operating/setup/admission-policies.md

@@ -140,7 +140,7 @@ spec:
   - name: alice
     kind: User
   nodeSelector:
-    customer: public-services{{< /tab >}}
+    node-role.kubernetes.io/worker: ''{{< /tab >}}
   {{< tab header="VAP" >}}
 ---
 apiVersion: admissionregistration.k8s.io/v1

content/en/docs/operating/setup/installation.md

@@ -138,13 +138,18 @@ There are no specific requirements for using Capsule with GitOps tools like Argo
 
 Manifests to get you started with ArgoCD. For ArgoCD you might need to skip the validation of the `CapsuleConfiguration` resources, otherwise there might be errors on the first install:
 
+{{% alert title="Information" color="warning" %}}
+The `Validate=false` option is required for the CapsuleConfiguration resource, because ArgoCD tries to validate the resource before the Capsule CRDs are installed via our CRD Lifecycle hook. [Upstream Issue](https://github.com/argoproj/argo-cd/issues/16144). This has mainly been observed in ArgoCD Applications using Service-Side Diff/Apply.
+{{% /alert %}}
+
 ```yaml
 manager:
   options:
     annotations:
-      argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+      argocd.argoproj.io/sync-options: "Validate=false,SkipDryRunOnMissingResource=true"
 ```
 
+
 ```yaml
 ---
 apiVersion: argoproj.io/v1alpha1
@@ -161,7 +166,6 @@ spec:
     targetRevision: 0.11.0
     chart: capsule
     helm:
-      skipCrds: true
       valuesObject:
         crds:
           install: true
@@ -173,7 +177,7 @@ spec:
         manager:
           options:
             annotations:
-              argocd.argoproj.io/sync-options: SkipDryRunOnMissingResource=true
+              argocd.argoproj.io/sync-options: "Validate=false,SkipDryRunOnMissingResource=true"
             capsuleConfiguration: default
             ignoreUserGroups:
               - oidc:administators