Facilitate teams with ExternalSecrets and Vault

[j-zimnowoda]

**Is your feature request related to a problem?
Teams can define ExternalSecrets CR that fetches values from Vault service.
The ExternalSecrets are cluster wise.

Describe the solution you'd like
See discussion: https://github.com/redkubes/otomi-core/discussions/279

Describe alternatives you've considered
See discussion: https://github.com/redkubes/otomi-core/discussions/279

[j-zimnowoda]

Outcomes from demo:

1. teams should only be able to deploy ExternalSecrets that points to a specific vault path
2. the dataFrom property is not needed right now

Ad1) check possible solutions: ExternalSecrets Scoping accessvsOPA policies`

[0-sv]

We updated the story template: https://github.com/redkubes/unassigned-issues/blob/master/.github/ISSUE_TEMPLATE/user-story.md.

I don't know if it is beneficial, it should be helpful for a developer. If it's not, I'm eager to hear your feedback.

I'm a bit confused, because this looks like a feature request, but it's a story apparently.

[Morriz]

Yeah, can you fix that @j-zimnowoda ? Please use the story template and use it correctly, as it holds process checkpoints.

[j-zimnowoda]

Please, do it if you have time for that

[j-zimnowoda]

We updated the story template: https://github.com/redkubes/unassigned-issues/blob/master/.github/ISSUE_TEMPLATE/user-story.md.

I don't know if it is beneficial, it should be helpful for a developer. If it's not, I'm eager to hear your feedback.

I'm a bit confused, because this looks like a feature request, but it's a story apparently.

You are confused by format but do you understand the content ?

[0-sv]

You are confused by format but do you understand the content ?

That's correct. But the idea of the template is also to gain insight into whether the work to be done is sufficiently defined to reduce scope (personally, I need it to avoid going back and forth with the PO role). And also whether the work done has all the contextual conditions (tests written, documentation updated, etc.) as a sanity-check.

Using the feature request template reduces the consistency of the product backlog.

[Morriz]

Yeah, we don't ask just because...it really holds an entire checklist that needs to be ticked off

[Morriz]

It is still not clear why this issue exists @j-zimnowoda ? What should be the outcome of this?

[j-zimnowoda]

The story defines the outcome