feat!: Remove secret definitions through env vars

[Natoandro]

Remove the ability to define secrets in the env vars of the typegate.

Secrets can now only be defined in the metatype config file and the --secret CLI option.

Motivation and context

• MET-370
• Security
• Better DX

Migration notes

1. Metatype config file: On the node configuration, secrets are defined at secrets.<tg_name>.key:

# before
typegates:
  dev:
    env:
      TG_CONSOLE_POSTGRES_CONN: postgresql://postgres:password@localhost:5432/db?schema=console
      TG_CONSOLE_BASIC_ADMIN: password

#after
typegates:
  dev:
    secrets:
      console:
        POSTGRES_CONN: postgresql://postgres:password@localhost:5432/db?schema=console
        BASIC_ADMIN: password    

2. Secret override option on meta/cli

# before
meta deploy -f my-tg.py --secret TG_CONSOLE_POSTGRES_CONN=postgresql://postgres:password@localhost:5432/db?schema=console

# after
meta deploy -f my-tg.py --secret POSTGRES_CONN=postgresql://postgres:password@localhost:5432/db?schema=console
# or - with the typegraph name
meta deploy -f my-tg.py --secret console:POSTGRES_CONN=postgresql://postgres:password@localhost:5432/db?schema=console

Checklist

• The change come with new or modified tests
• Hard-to-understand functions have explanatory comments
• End-user documentation is updated to reflect the change

[linear]

MET-370 Easier way to pass secrets in `metatype.yaml` config file

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 73.91%. Comparing base (4dfeb55) to head (bd76fa7).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #666      +/-   ##
==========================================
- Coverage   73.94%   73.91%   -0.03%     
==========================================
  Files         114      114              
  Lines       12898    12880      -18     
  Branches     1356     1355       -1     
==========================================
- Hits         9537     9520      -17     
+ Misses       3340     3338       -2     
- Partials       21       22       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[Yohe-Am]

Good stuff