Move dex clientSecret into Kubernetes secret (#982)

Author: Nuckal777

charts/kubernikus/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 description: A Helm chart for Kubernetes
 name: kubernikus
 type: application
-version: 0.3.19
+version: 0.3.20
 dependencies:
   - name: k8sniff
     repository: file://../k8sniff

charts/kubernikus/templates/dex-config.yaml

@@ -64,7 +64,7 @@ data:
       - https://{{ .Values.domain }}/auth/callback # for dashboard access
       - http://localhost:33768/auth/callback
       name: kubernikus
-      secret: {{ required "missing dex.clientSecret" .Values.dex.clientSecret | quote }}
+      secret: $DEX_CLIENT_SECRET
 ---
 apiVersion: v1
 kind: Secret
@@ -74,4 +74,5 @@ metadata:
 type: Opaque
 data:
   bindPW: {{ required ".Values.dex.ldap.config.bindPW undefined" .Values.dex.ldap.config.bindPW | b64enc | quote}}
+  clientSecret: {{ required "missing dex.clientSecret" .Values.dex.clientSecret | b64enc | quote }}
 {{ end }}

charts/kubernikus/templates/dex.yaml

@@ -6,6 +6,8 @@ metadata:
   labels:
     chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
     release: {{ .Release.Name }}
+  annotations:
+    secret.reloader.stakater.com/reload: "kubernikus-api-dex"
   name: kubernikus-api-dex
 spec:
   replicas: 1
@@ -35,6 +37,11 @@ spec:
             secretKeyRef:
               name: kubernikus-api-dex
               key: bindPW
+        - name: DEX_CLIENT_SECRET
+          valueFrom:
+            secretKeyRef:
+              name: kubernikus-api-dex
+              key: clientSecret
         - name: KUBERNETES_POD_NAMESPACE
           valueFrom:
            fieldRef: