feat(ql3): add opt-in security administration job

deploy/kubernetes/ql3-cluster/operations/security-administration/credential-delivery/component/job-patch.yaml

@@ -0,0 +1,22 @@
+- op: add
+  path: /spec/template/spec/initContainers/0/args/-
+  value: --delivery-directory=/var/lib/qinglong3/security-administration-delivery/private
+- op: add
+  path: /spec/template/spec/initContainers/0/volumeMounts/-
+  value:
+    name: credential-delivery
+    mountPath: /var/lib/qinglong3/security-administration-delivery
+- op: add
+  path: /spec/template/spec/containers/0/args/-
+  value: --delivery=/var/lib/qinglong3/security-administration-delivery/private/replace-with-unique-delivery.json
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: credential-delivery
+    mountPath: /var/lib/qinglong3/security-administration-delivery
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: credential-delivery
+    persistentVolumeClaim:
+      claimName: ql3-security-administration-delivery

deploy/kubernetes/ql3-cluster/operations/security-administration/credential-delivery/component/kustomization.yaml

@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - path: job-patch.yaml
+    target:
+      group: batch
+      version: v1
+      kind: Job
+      name: ql3-security-administration

deploy/kubernetes/ql3-cluster/operations/security-administration/credential-delivery/kustomization.yaml

@@ -0,0 +1,13 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - ../base
+
+components:
+  - component
+
+images:
+  - name: qinglong3-cluster-admin
+    newName: registry.example.com/qinglong/qinglong3-cluster-admin
+    digest: sha256:0000000000000000000000000000000000000000000000000000000000000000