Improve secret management

Takes the changes from #8 and #20, adapts them and unifies them. Thanks to @johanneskastl and @pitwegner for the PRs!

In the course of this process the following changes were made as well.

introduce an existingSecret option for S3 credentials (secret access key and access key id)
change s3.accessKeyId and s3.secretAccessKeyId to s3.auth.accessKeyId and s3.auth.secretAccessKey

Moreover, installations or upgrades will fail if no postgres password is provided.

Error: INSTALLATION FAILED: execution error at (openproject/templates/worker-deployment.yaml:80:14): Database password is required. Please set postgresql.auth.existingSecret (recommended) or postgresql.auth.password

Important

For this to work it needs the latest OpenProject 13.1 images (to be released tomorrow, 13th Dec 2023). For the released images to work correctly, the database.yml bug has to be fixed as well. Working on that. Until this is released the test will fail with the following.

connection to server at "10.96.170.25", port 5432 failed: fe_sendauth: no password supplied (ActiveRecord::ConnectionNotEstablished)

So this PR will only go green once 13.1 is released including that bug fix which is when this will be merged.

opf / helm-charts

Improve secret management #46

🦋 Changeset detected