spec.httpSecret is marked as optional in our API. But it's essential to generate it and use the same value for all replicas if we have more than one replica.
Today the operator generates this secret only when it bootstraps the config object.
As we can't change API and remove `optional`, we should generate a new secret if the config is provided with an empty httpSecret.
Low priority, won't be fixed this sprint.
Verified on 4.6.0-0.nightly-2020-09-12-230035: spec.httpSecret can be auto-created.