chore(penpot): Added OIDC configuration for SSO

manifests/artemis/penpot/values.yaml

@@ -43,7 +43,7 @@ config:
   publicUri: "http://penpot.dgse.cloud"
   # -- The feature flags to enable. Check [the official docs](https://help.penpot.app/technical-guide/configuration/) for more info.
   # @section -- Configuration parameters
-  flags: "enable-registration enable-login-with-password disable-email-verification enable-smtp"
+  flags: "enable-login-with-password disable-email-verification enable-smtp"
   # -- A random secret key needed for persistent user sessions. Generate with `python3 -c "import secrets; print(secrets.token_urlsafe(64))"` for example.
   # @section -- Configuration parameters
   apiSecretKey: ""
@@ -232,16 +232,24 @@ config:
     oidc:
       # -- Whether to enable OIDC configuration. To enable OpenID Connect auth, also add `enable-login-with-oidc` to the flags.
       # @section -- Configuration parameters
-      enabled: false
+      enabled: true
       # -- The OpenID Connect base URI to use.
       # @section -- Configuration parameters
-      baseURI: ""
+      baseURI: "https://auth.dgse.cloud"
       # -- The OpenID Connect client ID to use.
       # @section -- Configuration parameters
-      clientID: ""
+      clientID:
+        valueFrom:
+          secretKeyRef:
+            name: oidc-client
+            key: CLIENT_ID
       # -- The OpenID Connect client secret to use.
       # @section -- Configuration parameters
-      clientSecret: ""
+      clientSecret:
+        valueFrom:
+          secretKeyRef:
+            name: oidc-client
+            key: CLIENT_SECRET
       # -- Optional OpenID Connect auth URI to use. Auto discovered if not provided.
       # @section -- Configuration parameters
       authURI: ""
@@ -253,13 +261,13 @@ config:
       userURI: ""
       # -- Optional OpenID Connect roles to use. If no role is provided, role checking is  disabled (default role values are set below, to disable role verification, send an empty string).
       # @section -- Configuration parameters
-      roles: "designer developer"
+      roles: ""
       # -- Optional OpenID Connect roles attribute to use. If not provided, the role checking will be disabled.
       # @section -- Configuration parameters
       rolesAttribute: ""
       # -- Optional OpenID Connect scopes to use. These settings allow overwriting the required scopes, use with caution because penpot requires at least `name` and `email` attrs found on the user info. Optional, defaults to `openid profile`.
       # @section -- Configuration parameters
-      scopes: "scope1 scope2"
+      scopes: ""
       # -- Optional OpenID Connect name attribute to use. If not provided, the `name` prop will be used.
       # @section -- Configuration parameters
       nameAttribute: ""