fix: Prevent Pod 0 restart by utilizing mutating webhook (#387)

* fix: Prevent Pod 0 restart by utilizing mutating webhook

* Actually enrich StatefulSets in mutating webhooks

Many parts copied from https://github.com/stackabletech/commons-operator/tree/spike/sts-restarter-webhook

Co-authored-by: Natalie Klestrup Röijezon <nat@nullable.se>

* Add CLI flag to disable mutating webhook

* Rename function

* clippy lints

* cargo fmt

* Make YAML nicer

* Pull in new op-rs version

* Update op-rs

* Update op-rs

* Fix Nix

* Update to op-rs 0.101.1

* regenerate nix and charts

* changelog

* Add kuttl test

* Improve changelog

* changelog

* Stupid YAML linter

* Update rust/operator-binary/src/webhook/restarter_mutate_sts.rs

Co-authored-by: Lukas Krug <lukas.krug@stackable.tech>

---------

Co-authored-by: Natalie Klestrup Röijezon <nat@nullable.se>
Co-authored-by: Lukas Krug <lukas.krug@stackable.tech>

Author: 3 people

CHANGELOG.md

@@ -4,6 +4,16 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+### Fixed
+
+- BREAKING: Prevent Pod 0 restart by utilizing a mutating webhook.
+  The commons-operator now needs the RBAC permission to `create` and `patch`
+  `mutatingwebhookconfigurations`. The webhook can be disabled using
+  `--disable-restarter-mutating-webhook` or by setting the `DISABLE_RESTARTER_MUTATING_WEBHOOK`
+  env variable ([#387]).
+
+[#387]: https://github.com/stackabletech/commons-operator/pull/387
+
 ## [25.11.0] - 2025-11-07
 
 ## [25.11.0-rc1] - 2025-11-06