Add Ability to Write/Use st2.secrets.conf from K8s Secret by eric-al · Pull Request #289 · StackStorm/stackstorm-k8s

This PR adds the capability to define '/etc/st2/st2.secret.conf' in a Kubernetes secret. No longer will users need things like helm-secrets to safely store secret values that ultimately wind up in /etc/st2/*.conf.

If this is defined, the contents of key 'st2.secret.conf' within the defined secret name will be written to '/etc/st2/st2.secret.conf' on all pods. In addition, '--config-file=/etc/st2/st2.secrets.conf' will be added to the end of the command line arguments for all pods, superseding all other configuration values.

This addresses the Comment-Based-TODO here: https://github.com/alertlogic/stackstorm-ha/blob/master/templates/configmaps_st2-conf.yaml#L16