Move Notify Admin to Helmfile/AWS Secrets Manager for DEV env

[P0NDER0SA]

Description

As a developer of notify, I would like all of our kubernetes deployments to be managed by Helmfile so that all of our kubernetes code is in one location. I would also like to have all secrets automated from a single source of truth (1pass -> AWS Secrets) and remove our dependency on encrypted .env files

WHY are we building?

• Provides the ability to deploy dynamic environments
• Provides the ability to run "diff" commands against environments
• Reduces the amount of code that Notify has to manage
• Keeps code DRY

WHAT are we building?

• [ ] Add Admin entry to the helmfile
• [ ] source secrets for helmfile from AWS Secrets Manager
• [ ] source configuration values from helmfile overrides where necessary
• [ ] adjust GitHub actions to work with these changes
• [ ] This work is scoped to the DEV environment.

VALUE created by our solution

• Increased reliability via reduced chance of accidental changes during releases
• Increased velocity due to reduction in maintenance
• better secrets management that falls in line with our OKRs

Acceptance Criteria

• [x] Notify Admin are deployed and managed with helmfile
• [x] All secrets required by Admin are sourced from 1pass -> terraform -> aws secrets manager and accessed using a kubernetes secret
• [x] A github workflow managing Notify Admin Modules have been created
• [x] Notify Admin (k8s) still works

Not in scope

• [ ] Deployment in staging and production: we should only deploy to dev until we figure out the deployment steps.

QA Steps

• [x] Admin is still online
• [x] Smoke test Admin

[P0NDER0SA]

https://github.com/cds-snc/notification-manifests/pull/3074

[P0NDER0SA]

hopefully will get this deployed on Dev Today

[P0NDER0SA]

Ran into a gauntleet of issues yesterday with Dev and my laptop dev environment -- will attempt to deploy this and debug today

[ben851]

Pond left some PRs to review today.

[ben851]

Pond to redeploy to Dev today

[P0NDER0SA]

I guess this is moved back to review for another pass from @ben851 which would be good

[sastels]

Ben QA'd but will leave this here till he's back to verify.