Opensearch access via LoginPassword or Certificate

[bertrandrigaud]

Propose a way to manage both login/password and certificate for Opensearch DBs access :

The main idea is to have a default configuration used by DBs. Each DB is able to overide default values and to choose between login/pwd or certificate access (userCRT). By default useCRT is set to false.

Here are the different cases covered:

osDbs:
    default:
      host: default.tada.fr:9200
      user: dirac
      password: dirac
      rootUser: dirac
      rootPassword: dirac
      indexPrefix: diracx-testbed01
      ca.crt: |
        -----BEGIN CERTIFICATE-----
        -----END CERTIFICATE-----
      tls.crt: |
        -----BEGIN CERTIFICATE-----
        -----END CERTIFICATE-----
      tls.key: |
        -----BEGIN PRIVATE KEY-----
        -----END PRIVATE KEY-----
    dbs:
      tutuDB:
        user: dirac
        password: dirac
        rootUser: dirac
        rootPassword: dirac
      titiDB:
        host: titi.tada.fr:9200
        ca.crt: |
          -----BEGIN CERTIFICATE-----
          -----END CERTIFICATE-----
        tls.crt: |
          -----BEGIN CERTIFICATE-----
          -----END CERTIFICATE-----
        tls.key: |
          -----BEGIN PRIVATE KEY-----
          -----END PRIVATE KEY-----
        useCRT: true
      tataDB:
        useCRT: true
      totoDB:
      noobDB:
        host: noob.tada.fr:9200
        ca.crt: |
          -----BEGIN CERTIFICATE-----
          -----END CERTIFICATE-----
        tls.crt: |
          -----BEGIN CERTIFICATE-----
          -----END CERTIFICATE-----
        tls.key: |
          -----BEGIN PRIVATE KEY-----
          -----END PRIVATE KEY-----
      
Certs are detected for default and titiDB (secrets and mounts will be created for both) :   
  => oscert-default secret => /os-certs/default  
  => oscert-titiDB secret => /os-certs/titiDB  
  
tutuDB:   
  => tutuDB password will be used  
titiDB:   
  => titiDB cert will be used  
tataDB:  
  => default cert will be used  
totoDB:  
  => default password will be used  
noobDB:  
  => useCRT is NOT set, then default password will be used (not cert)  

Related to #252

[chaen]

The use cases you show make sense to me, however can you:

• please rebase
• add documentation for that in the values.yaml ? We will probably need to add an extra part of the doc for this sort of configuration, but probably not for you right now :-)
• you have an indexPrefix in the config. This is coming, but not in this PR :-)

[aldbr]

ddev: indexPrefix should be removed, will be added as a second step