When doing an upgrade with helm, secrets are re-generated
Option 1: Job + Helm hook
Pre-install and pre-upgrade job checks if secrets exists.
If exists, do nothing if does not exists create it.
see gits and gitlab shared secret
Option 2: Manage secrets out of helm
Secrets could be managed out of helm, in an operator?
Option 3: Fixed secrets in helm values