only skip tls verify if not behind the aggregator (#1101)

- if not the in-cluster-config grabs a TLS cert from a config map and
   complains that it was told to ignore it.
 - thanks to [email protected] for testing

Example error log output:
E0804 19:23:14.731483       1 controller_manager.go:259] Failed to get api versions from server: specifying a root certificates file with the insecure flag is not allowed

Author: MHBauer

charts/catalog/templates/controller-manager-deployment.yaml

@@ -55,7 +55,7 @@ spec:
         - --service-catalog-api-server-url
         - https://{{ template "fullname" . }}-apiserver
         {{- end }}
-        {{ if .Values.controllerManager.apiserverSkipVerify -}}
+        {{ if and (.Values.controllerManager.apiserverSkipVerify) (not .Values.useAggregator) -}}
         - "--service-catalog-insecure-skip-verify=true"
         {{- end }}
         - -v