Store credentials into secrets instead of plain text of CheCluster CR fields

[sleshchenko]

Is your task related to a problem? Please describe.

In K8s world, it's a good practice storing credentials, especially password in secrets. It would be great if che-operator follow this approach.

Describe the solution you'd like

I believe we must store in plain-text only non-sensitive info, let's say users can share with others. Everything else must be stored in secrets.

instead we could have

spec:
  auth:
    identityProviderPassword:
      secretName: postgres
      key: keycloak-password
    identityProviderUsername:
      secretName: postgres
      key: keycloak-username
  database:
    password:
      secretName: postgres
      key: che-password
    chePostgresUsername:
      secretName: postgres
      key: che-username

[sleshchenko]

cc @tolusha @davidfestal

[davidfestal]

There's already an issue for that on the CRW side that has been discussed this morning at deploy team prio.

[davidfestal]

@tolusha Maybe you would like to link the CRW issue to this upstream one ?

[tolusha]

#16239

[tolusha]

https://issues.redhat.com/browse/CRW-372