feat(geoipupdater) add a rollout restart and update only if necessary

[smerle33]

ref jenkins-infra/helpdesk#4441

following jenkins-infra/helpdesk#4278 and jenkins-infra/helpdesk#4240

we improved the helm chart with this PR jenkins-infra/helm-charts#1471
that use jenkins-infra/docker-geoipupdate#20

we had to improve the update process with only if needed pattern and a rollout restart included.

tested locally on my k3d, with the staging fileshare (storage_fileshare: "geoip-data")
and with a rollout on simulated deployements and namespaces:

rolloutrestart:
    enable: true
    restarts:
      - namespace: updates-jenkins-io
        deployments:
          - updates-jenkins-io-content-secured-mirrorbits
          - updates-jenkins-io-content-unsecured-mirrorbits
      - namespace: get-jenkins-io
        deployments:
          - get-jenkins-io-mirrorbits

the output is validating:

ROLLOUT RESTART
kubectl -n updates-jenkins-io rollout restart deployment updates-jenkins-io-content-secured-mirrorbits
deployment "updates-jenkins-io-content-secured-mirrorbits" successfully rolled out
deployment.apps/updates-jenkins-io-content-secured-mirrorbits restarted
Waiting for deployment "updates-jenkins-io-content-secured-mirrorbits" rollout to finish: 1 old replicas are pending termination...
Waiting for deployment "updates-jenkins-io-content-secured-mirrorbits" rollout to finish: 1 old replicas are pending termination...
deployment "updates-jenkins-io-content-secured-mirrorbits" successfully rolled out
kubectl -n updates-jenkins-io rollout restart deployment updates-jenkins-io-content-unsecured-mirrorbits
deployment "updates-jenkins-io-content-unsecured-mirrorbits" successfully rolled out
deployment.apps/updates-jenkins-io-content-unsecured-mirrorbits restarted
Waiting for deployment "updates-jenkins-io-content-unsecured-mirrorbits" rollout to finish: 1 old replicas are pending termination...
Waiting for deployment "updates-jenkins-io-content-unsecured-mirrorbits" rollout to finish: 1 old replicas are pending termination...
deployment "updates-jenkins-io-content-unsecured-mirrorbits" successfully rolled out
kubectl -n get-jenkins-io rollout restart deployment get-jenkins-io-mirrorbits
deployment "get-jenkins-io-mirrorbits" successfully rolled out
deployment.apps/get-jenkins-io-mirrorbits restarted
Waiting for deployment "get-jenkins-io-mirrorbits" rollout to finish: 1 old replicas are pending termination...
Waiting for deployment "get-jenkins-io-mirrorbits" rollout to finish: 1 old replicas are pending termination...
deployment "get-jenkins-io-mirrorbits" successfully rolled out
ROLLOUT RESTART DONE

[dduportal]

This change uses the image 0.3.3 while it seems 0.3.5 is required: https://github.com/jenkins-infra/docker-geoipupdate/releases/tag/0.3.5

done

[smerle33]

I corrected the secrets for the production fileshare here https://github.com/jenkins-infra/charts-secrets/commit/86439c0050f23fc1c3cd9eef3e4ac14b842dd29a

and added a staging secrets file, that we will remove, with the terraform for staging when everything will be ok
TODO: cleanup
https://github.com/jenkins-infra/azure/blob/0dd69e354c3d764d72763ae3f4b23ec29b67cf69/publick8s.tf#L371-L388

[dduportal]

• We are watching 2 pages on both get.jenkins.io and mirrors.updates.jenkins.io (with the ?mirrorlist query string)
• We are also watching pods on the 3 namespaces

Let's roll!