Adding support for Keycloak admin secret and endpoint-watcher image configuration

[cccs-eric]

What does this PR do?

Currently the only supported ways of configuring the admin user of Keycloak are:

1. Set its username and password via helm values
2. Leave the default admin:admin and mark them as to be changed at first login.

This PR is introducing a new way to inject the username and password using a Kubernetes secret, which make this more secure than passing values in the clear in helm values. It is adding this new way and keeping the other ones also. To create a secret recognized by the chart, you would do the following:

kubectl --namespace ${NAMESPACE} create secret generic keycloak-admin-secret \
    --from-literal=user=admin \
    --from-literal=password=XXXXXX

and then in your values.yaml:

che-keycloak:
  keycloakCredentialsSecret: "keycloak-admin-secret"
  #requireAdminPasswordChange: true
  #keycloakAdminUserName: admin
  #keycloakAdminUserPassword: admin

The PR also adds a new global value to configure quay.io/eclipse/che-endpoint-watcher:nightly image to something else, which is useful if you are using Che's helm charts from the repository and not from chectl. Otherwise, you cannot change the image and you are stuck with the nighlty build.

How to test this PR?

In order to test this, you can create a Che deployment using its helm chart. You could also modify chectl to create a Kubernetes secret with the random password it generates and then --set che-keycloak.keycloakCredentialsSecret=keycloak-admin-secret. In my opinion, modifying chectl in this regard would be a good idea.

PR Checklist

As the author of this Pull Request I made sure that:

• The Eclipse Contributor Agreement is valid
• Code produced is complete
• Code builds without errors
• Tests are covering the bugfix
• The repository devfile is up to date and works
• Sections What issues does this PR fix or reference and How to test this PR completed
• Relevant user documentation updated
• Relevant contributing documentation updated
• CI/CD changes implemented, documented and communicated

Reviewers

Reviewers, please comment how you tested the PR when approving it.

[che-bot]

Can one of the admins verify this patch?

[che-bot]

Can one of the admins verify this patch?

[tolusha]

Thank you for contribution.
I've changed some names to be consistent with --installer operator approach.

[cccs-eric]

Thank you for contribution.
I've changed some names to be consistent with --installer operator approach.

That's perfect and a good idea. I am not really familiar with the operator, so yes feel free to show the way 👍

[tolusha]

One small remark.