Automatically reload secret

[jessebot]

We have rearranged things a bit to suit a more updateable approach. We've added the kiwigrid/k8s-sidecar docker image as a sidecar to update the Secret every 10 seconds by default.

Adds a new method to the docker container main.py called reload_secret_vars to reload the secret every time someone requests parameters. You can now also configure what file the docker container checks for changes with the SECRET_VARS_FILE env var.

New Helm Parameters

secretVars:
  # -- name of an existing secret to use for the secret keys to provide to
  # applicationSets via the plugin generator
  existingSecret: "my-secret"
  # key in existingSecret to use as the file name for the
  # appset-env-generator-plugin container to load
  secretKey: secret_vars.yaml

# configReloader sidecar that automatically loads in changes to your Secret
configReloader:
  image:
    # -- registry and repo for the configreloader image
    repository: quay.io/kiwigrid/k8s-sidecar
    # -- tag to point at for k8s-sidecar
    tag: 1.30.3
    # -- image pullPolicy for the main container
    pullPolicy: IfNotPresent

  # -- the label to check for on the Secret (secretVars.existingSecret)
  label: "argocd-appset-secret-plugin"
  # -- the label value to check for on the Secret (secretVars.existingSecret)
  labelValue: "1"
  # -- interval to wait before retrying a check for changes (in seconds)
  interval: 10
  # -- full path on container to put secret file
  folder: "/var/run/secret-plugin"

Updated example Secret

apiVersion: v1
kind: Secret
metadata:
  # configurable with secretVars.existingSecret helm parameter
  name: argocd-secret-vars
  # this needs to be where-ever argocd is running
  namespace: argocd
  labels:
    app.kubernetes.io/part-of: argocd
    # can be configured to use a different label and value with by setting
    # configReloader.label and configReloader.labelValue helm parameters
    argocd-appset-secret-plugin: 1
type: stringData
data:
  # configurable with secretVars.secretKey helm parameter
  secret_vars.yaml: |
    app_name: "beepboop"