The OIDC Secret can only be provided in clear text in the values.yaml:
auth:
sessionLengthHours: 720
oidc:
clientId: ""
secret: "" <<=======
authMethod: ""
issuer: ""
It should be possible to provide it via a Kubernetes secret - similar to MySQL, License, etc:
values:
global:
[...]
licenseSecret:
name: customer-wandb-license
key: CUSTOMER_WANDB_LICENSE
[...]