Ensure kazoo clients are disconnect before secret rotation

This change ensures that zuul-executor don't get stuck as
we replace the zookeeper-client-tls secret.

Change-Id: I05727474602298f69532945b031131fa44aea955

Author: TristanCacqueray

controllers/secrets.go

@@ -110,6 +110,9 @@ func (r *SFKubeContext) DoRotateSecrets() error {
 	if err := r.rotateKeystorePassword(); err != nil {
 		return err
 	}
+	logging.LogI("Killing every kazoo client...")
+	r.nukeZKClients()
+
 	logging.LogI("Rotating Zuul Client Authenticator secret...")
 	if err := r.rotateZuulAuthenticatorSecret(); err != nil {
 		return err