Added secrets

- A main admin password
- A random password for each SA per tenant

charts/tenant/templates/secret-s3.yaml

@@ -0,0 +1,15 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: s3-credentials
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/tenant: 'tenant-{{ .Values.name }}'
+type: Opaque
+stringData:
+  AWS_ACCESS_KEY_ID: 'tenant-{{ .Values.name }}-user'
+  # If the secret exist, keep. Otherwise create a new random one. (To prevent a new password at each sync).
+  AWS_SECRET_ACCESS_KEY: {{ if and $existingSecret $existingSecret.data (hasKey $existingSecret.data "AWS_SECRET_ACCESS_KEY") }}{{ index $existingSecret.data "AWS_SECRET_ACCESS_KEY" | b64dec }}{{ else }}{{ randAlphaNum 24 }}{{ end }}
+  S3_ENDPOINT: "http://minio.minio.svc.cluster.local:9000"
+  BUCKET_REF: "ref-tenant-{{ .Values.name }}"
+  BUCKET_WORK: "work-tenant-{{ .Values.name }}"