Currently, the External Secrets Operator manages environment variables for all components (ExternalSecretsCoreController, Webhook, CertController, BitwardenSDKServer) globally. There's no mechanism for users to add or override environment variables on a per-component basis for specific use cases like: Custom logging configurations ,Feature flags for specific components.
Acceptance criteria:
- Add OverrideEnv []corev1.EnvVar field to ComponentConfig API with validation to reject reserved prefixes (HOSTNAME, KUBERNETES_, EXTERNAL_SECRETS)
- Implement environment variable merge logic that applies user-defined env vars from overrideEnv to matching component deployments, with user values taking precedence over operator defaults.
- Add unit tests and E2E tests.