[v0.7] Align fleetworkspace webhook handling with controller flow (#1594)

* Align fleetworkspace webhook handling with controller flow

The FleetWorkspace mutating admission handler is removed from the
webhook server registration, and the associated mutator implementation
is deleted. This keeps webhook mutation behavior focused on request
shaping and avoids creating workspace side-effect resources in the
webhook process.

Webhook configuration reconciliation continues to rebuild the mutating
webhook list from registered handlers at startup. A regression test is
added to verify configuration updates replace webhook entries rather
than accumulating stale entries.

* Update FleetWorkspace generated docs

Document that FleetWorkspace webhook mutation side effects were
removed and resources are reconciled by controllers.
Run go generate to refresh generated docs per branch.

Author: thardeck

docs.md

@@ -229,12 +229,9 @@ A `FleetWorkspace` cannot be created if a namespace with the same name already e
 
 ### Mutation Checks
 
-#### On create
-
-When a `FleetWorkspace` is created, it will create the following resources:
-1. `Namespace`. It will have the same name as the `FleetWorkspace`.
-2. `ClusterRole`. It will create the cluster role that has * permission only to the current workspace.
-3. Two `RoleBindings` to bind the current user to fleet-admin roles and `FleetWorkspace` roles.
+The `FleetWorkspace` mutating webhook no longer creates resources on create.
+Namespace and RBAC objects are reconciled by the Rancher controller after
+workspace creation.
 
 ## GlobalRole
 

pkg/resources/management.cattle.io/v3/fleetworkspace/FleetWorkspace.md

@@ -4,9 +4,6 @@ A `FleetWorkspace` cannot be created if a namespace with the same name already e
 
 ## Mutation Checks
 
-### On create
-
-When a `FleetWorkspace` is created, it will create the following resources:
-1. `Namespace`. It will have the same name as the `FleetWorkspace`.
-2. `ClusterRole`. It will create the cluster role that has * permission only to the current workspace.
-3. Two `RoleBindings` to bind the current user to fleet-admin roles and `FleetWorkspace` roles.
+The `FleetWorkspace` mutating webhook no longer creates resources on create.
+Namespace and RBAC objects are reconciled by the Rancher controller after
+workspace creation.