Requirements according to slack:
- Updates to the operator to install a CR for the console plugin
- Updates to the operator to install declarative config, m2m machine auth config, or something else (TBD?) in order to allow seamless authentication
- A plan to handle CA Certificate rotation in the CR so that the console can access ACS APIs
- A plan to handle the console's need to bootstrap the plugin from a service with a service serving certificate