feat: Remove OIDC and SSO support

Existing SSO accounts have no local password, so the migration
deactivates them before dropping is_sso_user and the
identity_provider_user table.

charts/planka/templates/deployment.yaml

@@ -173,33 +173,6 @@ spec:
             - name: {{ $k | quote }}
               value: {{ $v | quote }}
           {{- end }}
-          {{- if .Values.oidc.enabled }}
-          {{- $secretName := default (printf "%s-oidc" (include "planka.fullname" .)) .Values.oidc.existingSecret }}
-            - name: OIDC_CLIENT_ID
-              valueFrom:
-                secretKeyRef:
-                  key:  clientId
-                  name: {{ $secretName }}
-            - name: OIDC_CLIENT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  key:  clientSecret
-                  name: {{ $secretName }}
-            - name: OIDC_ISSUER
-              value: {{ required "issuerUrl is required when configuring OIDC" .Values.oidc.issuerUrl | quote }}
-            - name: OIDC_SCOPES
-              value: {{ join " " .Values.oidc.scopes | default "openid profile email" | quote }}
-          {{- if .Values.oidc.admin.roles }}
-            - name: OIDC_ADMIN_ROLES
-              value: {{ join "," .Values.oidc.admin.roles | quote }}
-          {{- end }}
-            - name: OIDC_ROLES_ATTRIBUTE
-              value: {{ .Values.oidc.admin.rolesAttribute | default "groups" | quote }}
-          {{- if .Values.oidc.admin.ignoreRoles }}
-            - name: OIDC_IGNORE_ROLES
-              value: {{ .Values.oidc.admin.ignoreRoles | quote }}
-          {{- end }}
-          {{- end }}
         {{- if .Values.extraContainers -}}
           {{ toYaml .Values.extraContainers | nindent 8 }}
         {{- end }}

charts/planka/templates/secret-oidc.yaml

@@ -1,17 +0,0 @@
-{{- if .Values.oidc.enabled }}
-{{- if eq (and (not (empty .Values.oidc.clientId)) (not (empty .Values.oidc.clientSecret))) (not (empty .Values.oidc.existingSecret)) -}}
-  {{- fail "Either specify inline `clientId` and `clientSecret` or refer to them via `existingSecret`" -}}
-{{- end }}
-{{- if (and (and (not (empty .Values.oidc.clientId)) (not (empty .Values.oidc.clientSecret))) (empty .Values.oidc.existingSecret)) -}}
-apiVersion: v1
-kind: Secret
-metadata:
-  name: {{ include "planka.fullname" . }}-oidc
-  labels:
-    {{- include "planka.labels" . | nindent 4 }}
-type: Opaque
-data:
-  clientId: {{ .Values.oidc.clientId | b64enc | quote }}
-  clientSecret: {{ .Values.oidc.clientSecret | b64enc | quote }}
-{{- end }}
-{{- end }}