chore: Switch secret-operator volume to ephemeral (#692)

Author: sbernauer

examples/superset-with-ldap.yaml

@@ -64,11 +64,19 @@ spec:
               mountPath: /tls
       volumes:
         - name: tls
-          csi:
-            driver: secrets.stackable.tech
-            volumeAttributes:
-              secrets.stackable.tech/class: openldap-tls
-              secrets.stackable.tech/scope: pod
+          ephemeral:
+            volumeClaimTemplate:
+              metadata:
+                annotations:
+                  secrets.stackable.tech/class: openldap-tls
+                  secrets.stackable.tech/scope: pod
+              spec:
+                storageClassName: secrets.stackable.tech
+                accessModes:
+                  - ReadWriteOnce
+                resources:
+                  requests:
+                    storage: "1"
 ---
 apiVersion: v1
 kind: Service

tests/templates/kuttl/ldap/20-install-openldap.yaml.j2

@@ -76,11 +76,19 @@ commands:
                     port: 1389
             volumes:
               - name: tls
-                csi:
-                  driver: secrets.stackable.tech
-                  volumeAttributes:
-                    secrets.stackable.tech/class: openldap-tls-$NAMESPACE
-                    secrets.stackable.tech/scope: pod
+                ephemeral:
+                  volumeClaimTemplate:
+                    metadata:
+                      annotations:
+                        secrets.stackable.tech/class: openldap-tls-$NAMESPACE
+                        secrets.stackable.tech/scope: pod
+                    spec:
+                      storageClassName: secrets.stackable.tech
+                      accessModes:
+                        - ReadWriteOnce
+                      resources:
+                        requests:
+                          storage: "1"
       ---
       apiVersion: v1
       kind: Service

tests/templates/kuttl/oidc/30_install-keycloak.yaml.j2

@@ -101,11 +101,19 @@ spec:
           configMap:
             name: $INSTANCE_NAME-realms
         - name: tls
-          csi:
-            driver: secrets.stackable.tech
-            volumeAttributes:
-              secrets.stackable.tech/class: tls
-              secrets.stackable.tech/scope: service=$INSTANCE_NAME
+          ephemeral:
+            volumeClaimTemplate:
+              metadata:
+                annotations:
+                  secrets.stackable.tech/class: tls
+                  secrets.stackable.tech/scope: service=$INSTANCE_NAME
+              spec:
+                storageClassName: secrets.stackable.tech
+                accessModes:
+                  - ReadWriteOnce
+                resources:
+                  requests:
+                    storage: "1"
 ---
 apiVersion: v1
 kind: Service

tests/templates/kuttl/oidc/50-install-test-container.yaml.j2

@@ -73,8 +73,16 @@ spec:
               value: /stackable/tls/ca.crt
       volumes:
         - name: tls
-          csi:
-            driver: secrets.stackable.tech
-            volumeAttributes:
-              secrets.stackable.tech/class: tls
-              secrets.stackable.tech/scope: pod
+          ephemeral:
+            volumeClaimTemplate:
+              metadata:
+                annotations:
+                  secrets.stackable.tech/class: tls
+                  secrets.stackable.tech/scope: pod
+              spec:
+                storageClassName: secrets.stackable.tech
+                accessModes:
+                  - ReadWriteOnce
+                resources:
+                  requests:
+                    storage: "1"

tests/templates/kuttl/opa/51-install-test-container.yaml.j2

@@ -76,12 +76,20 @@ spec:
             - name: SUPERSET_BASE_URL
               value: superset-node.$NAMESPACE.svc.cluster.local:8088
       volumes:
-        - name: tls
-          csi:
-            driver: secrets.stackable.tech
-            volumeAttributes:
-              secrets.stackable.tech/class: tls
-              secrets.stackable.tech/scope: pod
         - name: get-user-roles-script
           configMap:
             name: get-user-roles-script
+        - name: tls
+          ephemeral:
+            volumeClaimTemplate:
+              metadata:
+                annotations:
+                  secrets.stackable.tech/class: tls
+                  secrets.stackable.tech/scope: pod
+              spec:
+                storageClassName: secrets.stackable.tech
+                accessModes:
+                  - ReadWriteOnce
+                resources:
+                  requests:
+                    storage: "1"