fix: Adding support for the default namespace service account to access AWS Secret Manager

[vilakshan2996]

What does this PR do?

we could modify the namespace of the oidc_providers service account to a custom namespace that the user can specify when using external_secrets. This way, the SecretStore can utilize that service account to access AWS Secret Manager.

Motivation

• Resolves Adding support for the default namespace service account to access AWS Secret Manager in external-secrets. #337

More

• ✔️ ] Yes, I have tested the PR using my local account setup (Provide any test evidence report under Additional Notes)
• ✔️] Yes, I ran pre-commit run -a with this PR

For Moderators

• E2E Test successfully complete before merge?

[rodrigobersa]

Hi @vilakshan2996.

Sorry to be repetitive here, but still not clear what are you trying to achieve. What's the issue that you are facing and what is the goal?

• Use the external-secrets SA in another Pod.
• Have the application to access a secret-store in a different namespace.

The addon "package" is built like this for a reason and uncouple it's resources or dependencies may generate future issues, that's why the Chart structure deploys everything together.

[csantanapr]

By default values for the external-secret addon namespace is external-secrets and service account name external-secrets-sa if you want the addon to be deploy to a different namespace and/or service account name this is already supported with the variables:

var.external_secrets.service_account_name 
var.external_secrets.namespace 

[vilakshan2996]

@rodrigobersa , Yes, the second scenario. How can we accomplish this? The application, deployed in the default namespace, needs to access the secret store located in the external-secret namespace.

[bryantbiggs]

Please start with a reproduction - I still didn't see a response on whether or not this is what you are trying to achieve:

module "eks_blueprints_addons" {
 ...

  enable_external_secrets = true
  external_secrets = {
    create_namespace = false
    namespace        = "default"
  }
}