[FEATURE REQUEST] onboard bucket via onyxia-operator

[fcomte]

OnyxiaAPI should allow a configuration where S3 bucket with quota is provided by onyxia-operator :
As a first step we can start with :

• add a regional option for that
• generate CRD in a new API endpoint

We should take care about security issues.
At the moment there is no admin account of the object storage in Onyxia but the operator will.
So we need to be sure that the created bucket belong to the user.

In a second step we could implement policy generation. This will be done in another FR.

[fcomte]

There is three options for onboarding :

• none , which means that the process of creation bucket is out of the scope of Onyxia
• user, which means that the STS account of the user create the bucket ( directly in the onyxia-web for minio or via onyxia-api for aws S3 because of cors )
• operator, which means that the new onyxia operator will create bucket and other S3 resources, based on CRD published by onyxia.