Secrets: garbage collection (#110247)

* clean up older secret versions

* start gargbage collection worker as background service

* make gen-go

* fix typo

* make update-workspace

* undo go mod changes

* undo go work sum changes

* Update pkg/registry/apis/secret/garbagecollectionworker/worker.go

Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com>

* Update pkg/registry/apis/secret/garbagecollectionworker/worker.go

Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com>

* default gc_worker_batch_size to 1 minute

* fix typo

* fix typo

* add test to ensure cleaning up secure values is idempotent

* make gen-go

* make update-workspace

* undo go.mod and .sum changes

* undo enterprise imports

---------

Co-authored-by: Matheus Macabu <macabu.matheus@gmail.com>
Co-authored-by: Matheus Macabu <macabu@users.noreply.github.com>

pkg/storage/secret/metadata/data/secure_value_delete.sql

@@ -0,0 +1,7 @@
+DELETE FROM 
+  {{ .Ident "secret_secure_value" }}
+WHERE 
+  {{ .Ident "namespace" }} = {{ .Arg .Namespace }} AND
+  {{ .Ident "name" }} = {{ .Arg .Name }} AND
+  {{ .Ident "version" }} = {{ .Arg .Version }}
+;

pkg/storage/secret/metadata/data/secure_value_lease_inactive.sql

@@ -0,0 +1,14 @@
+UPDATE
+  {{ .Ident "secret_secure_value" }}
+SET
+  {{ .Ident "lease_token" }} = {{ .Arg .LeaseToken }},
+  {{ .Ident "lease_created" }} = {{ .Arg .Now }}
+WHERE 
+  {{ .Ident "guid" }} IN (SELECT {{ .Ident "guid"}} 
+                          FROM {{ .Ident "secret_secure_value" }} 
+                          WHERE 
+                            {{ .Ident "active" }} = FALSE AND
+                            {{ .Arg .Now }} - {{ .Ident "created" }} > {{ .Arg .MinAge }} AND
+                            {{ .Arg .Now }} - {{ .Ident "lease_created" }} > {{ .Arg .LeaseTTL }}
+                          LIMIT {{ .Arg .MaxBatchSize }})
+;

pkg/storage/secret/metadata/data/secure_value_list_by_lease_token.sql

@@ -0,0 +1,26 @@
+SELECT
+  {{ .Ident "guid" }},
+  {{ .Ident "name" }},
+  {{ .Ident "namespace" }},
+  {{ .Ident "annotations" }},
+  {{ .Ident "labels" }},
+  {{ .Ident "created" }},
+  {{ .Ident "created_by" }},
+  {{ .Ident "updated" }},
+  {{ .Ident "updated_by" }},
+  {{ .Ident "description" }},
+  {{ .Ident "keeper" }},
+  {{ .Ident "decrypters" }},
+  {{ .Ident "ref" }},
+  {{ .Ident "external_id" }},
+  {{ .Ident "version" }},
+  {{ .Ident "active" }},
+  {{ .Ident "owner_reference_api_group" }},
+  {{ .Ident "owner_reference_api_version" }},
+  {{ .Ident "owner_reference_kind" }},
+  {{ .Ident "owner_reference_name" }}
+FROM
+  {{ .Ident "secret_secure_value" }}
+WHERE 
+  {{ .Ident "lease_token" }} = {{ .Arg .LeaseToken }}
+;