kubevirt-manager cannot be deployed in workload clusters (regression)
see !3791 (comment 2332398701)
deployment of kubevirt-manager in workload cluster breaks on the following:
╰┄╴Ready False ReconciliationFailed
ExternalSecret/kubevirt-manager/eso-sylva-ca dry-run failed:
no matches for kind "ExternalSecret" in version "external-secrets.io/v1beta1"( https://gitlab.com/sylva-projects/sylva-core/-/jobs/9047655373#L1868 )
This is due to !3683 (merged) which added support for TLS certs for kubevirt-manager, without realizing that this would break in workload clusters (because our CI does not test it, because kubevirt-manager was thought to be automatically enabled when kubevirt is, while it is in fact not the case -- see #2066 (closed) )