add 'customSecrets' and 'customVolumes' values to Helm Chart to simplifies the creation of ressources for PoC

[sbilque]

SUMMARY

This PR allows deploying secrets and persistentvolumes resources required by AWX in the cluster when using the Helm Chart for PoC or testing.

Resources are defined in the customSecrets and customVolumes values.

Compared to the extraDeploy value, you don't need to know any special syntax to describe resources.

ISSUE TYPE

• New or Enhanced Feature

Example usage in a values.yml file

AWX:
  # enable use of awx-deploy template
  ...

  spec:
     projects_persistence: true

  # configurations for external postgres instance
  postgres:
    enabled: false
    ...

customSecrets:
  enabled: true
  admin:
    enabled: true
    password: mysuperlongpassword
  secretKey:
    enabled: true
    key: supersecuresecretkey
    secretName: my-awx-secret-key
  ingressTls:
    enabled: true
    selfSignedCert: false
    key: fakekey 
    certificate: fakecertificate
  bundleCacert:
    enabled: true
    crt: <contentofmybundlecacrt>
  cpPullCredentials:
    enabled: false
    dockerconfig:
      - registry: docker.io
        username: user
        password: pwd

customVolumes:
  postgres:
    enabled: true
    hostPath: /data/postgres-13
  projects:
   enabled: true
   hostPath: /data/projects

Example usage with kubernetes.core.helm Ansible module:

- name: Deploy the AWX instance
  kubernetes.core.helm:
    ...  
    values_files: 
      AWX:
        spec:
           projects_persistence: true
      customSecrets:
        enabled: true
        admin:
          enabled: true
          password: !vault |
            $ANSIBLE_VAULT;1.2;AES256
            346534353436643039616632653135656534
        secretKey:
          enabled: true
          password: !vault |
            $ANSIBLE_VAULT;1.2;AES256
            346534353436643039616632653135656534
          secretName: my-awx-secret-key
        ingressTls:
          enabled: true
          selfSignedCert: false
          key: fakekey 
          certificate: fakecertificate
        bundleCacert:
          enabled: true
          crt: "{{ lookup('ansible.builtin.file', 'ca-certs.crt') }}"
        ldapCacert:
          enabled: true
          crt: "{{ lookup('ansible.builtin.file', 'ldap-certs.crt') }}"
      customVolumes:
        postgres:
        enabled: true
          hostPath: /data/postgres-13
        projects:
          enabled: true
          hostPath: /data/projects

[rooftopcellist]

Looks like you need a space here.

Suggested change

	{{-/* Provide custom secrets configs if enabled */}}
	{{- /* Provide custom secrets configs if enabled */}}

[rooftopcellist]

@sbilque Looks like there is a failure in the helm linter:

Error:  templates/: parse error at (awx-operator/templates/awx-deploy.yaml:11): "-"

Could you take a look at that?

Otherwise, the PR looks good to me. cc @miles-w-3 if you have time to review this.

[sbilque]

@rooftopcellist
Thank you for your feedback. I have corrected my mistake. Helm lint now runs without error.

[miles-w-3]

@rooftopcellist Looks good to me, I remember @TheRealHaoLiu bringing up the dangers of passing in secrets this way when I first talked through the postgres secret, I figured it was worth a mention but i see the readme has a disclaimer