[installer] enable protected_secrets by default

Author: kylos101

Diff for: install/installer/cmd/testdata/render/aws-setup/config.yaml

@@ -28,3 +28,6 @@ objectStorage:
     credentials:
       kind: secret
       name: aws-storage
+experimental:
+  workspace:
+    enableProtectedSecrets: true

Diff for: install/installer/cmd/testdata/render/aws-setup/output.golden

@@ -24,3 +24,6 @@ objectStorage:
     credentials:
       kind: secret
       name: azure-storage
+experimental:
+  workspace:
+    enableProtectedSecrets: true

Diff for: install/installer/cmd/testdata/render/azure-setup/config.yaml

@@ -26,3 +26,6 @@ objectStorage:
     serviceAccount:
       kind: secret
       name: gcp-storage
+experimental:
+  workspace:
+    enableProtectedSecrets: true

Diff for: install/installer/cmd/testdata/render/azure-setup/output.golden

@@ -14,3 +14,6 @@ objectStorage:
     credentials:
       kind: secret
       name: s3-storage
+experimental:
+  workspace:
+    enableProtectedSecrets: true

Diff for: install/installer/cmd/testdata/render/gcp-setup/config.yaml

@@ -165,7 +165,9 @@ func configmap(ctx *common.RenderContext) ([]runtime.Object, error) {
 
 	defaultFeatureFlags := []NamedWorkspaceFeatureFlag{}
 	_ = ctx.WithExperimental(func(cfg *experimental.Config) error {
-		if cfg.Workspace != nil && cfg.Workspace.EnableProtectedSecrets {
+		if cfg == nil || cfg.Workspace == nil {
+			defaultFeatureFlags = append(defaultFeatureFlags, NamedWorkspaceFeatureProtectedSecrets)
+		} else if cfg.Workspace != nil && cfg.Workspace.EnableProtectedSecrets {
 			defaultFeatureFlags = append(defaultFeatureFlags, NamedWorkspaceFeatureProtectedSecrets)
 		}
 		return nil