we want to have the DbRootPassword field in osp-secret be legacy.  however if you remove this field right now from the secret, the galera-operator errors out if the Galera->Spec->Secret still points to osp-secret.    You instead need to erase Galera->Spec->secret entirely.  however, we can't do that right now because openstack-operator is alwys going to populate Secret with "osp-secret", confirmed if you set it to "" it gets reset.   this for now prevents us from doing root pw rotation with a randomly generated password.   need a way to tell galera operator "there's no preset-password".   so need to remove all the "validate DbRootPassword" logic and change to "if DbRootPassword is not in the secret, then we can use a generated password"