Add secret to preview environments

[andrew-farries]

Description

Following on from https://github.com/gitpod-io/ops/pull/2696 in which a secret was added to the Werft cluster for core-dev, this PR copies the secret from Werft into the k3s cluster for preview environments during deployment of each preview env.

This process ensures that we get a secret containing Stripe API keys into preview environments, without the secret touching source control.

Related Issue(s)

Part of #9036

How to test

Manually trigger a werft job for this branch (Notion doc).

Within the cluster for the preview environment, verify that there is now a secret called stripe-api-keys:

kubectl get secret stripe-api-keys

NAME              TYPE     DATA   AGE
stripe-api-keys   Opaque   1      5m53s

You may have to create

Release Notes

NONE

Documentation

[jankeromnes]

Many thanks @andrew-farries! 🙏

I got a bit confused due to the two merged PRs, but I tested everything again and it still seems to work. 🎉 (Maybe this could have been a single PR, so that I could have reviewed/tested it only once? 🤔)

[andrew-farries]

I got a bit confused due to the two merged PRs, but I tested everything again and it still seems to work. 🎉 (Maybe this could have been a single PR, so that I could have reviewed/tested it only once? 🤔)

Yeah, sorry. I was hoping that this one would get merged quickly first. They ended up getting done in the wrong order 😄