Resolve "Integrate Keycloak package with BigBang"

Summary

This is the initial release of Keycloak with BigBang.
IMPORTANT NOTE: Keycolak is only intended to be deployed by itself with only the core apps. When keycloak is enabled the core apps conditionally deploy with a separate *.admin.* domain like this *.admin.bigbang.dev. Also, when Keycloak is enabled an additional server with tls.mode PASSTHROUGH is conditionally added to the istio ingressgateway.

Zach Williamson and Cameron Banowsky from the CNAP team have been actively testing this branch with their new P1 SSO deployments. All known issues have been resolved.

Closes #291 (closed)

chart/templates/gitlab/namespace.yaml

@@ -51,7 +51,7 @@ stringData:
         "client_options": {
           "identifier": "{{ .Values.addons.gitlab.sso.client_id | default .Values.sso.client_id }}",
           "secret": "{{ .Values.addons.gitlab.sso.client_secret | default .Values.sso.client_secret }}",
-          "redirect_uri": "https://{{ .Values.addons.gitlab.hostnames.gitlab }}/users/auth/openid_connect/callback",
+          "redirect_uri": "https://{{ .Values.addons.gitlab.hostnames.gitlab }}.{{ .Values.hostname }}/users/auth/openid_connect/callback",
           "end_session_endpoint": "https://{{ .Values.sso.oidc.host }}/auth/realms/{{ .Values.sso.oidc.realm }}/protocol/openid-connect/logout"
         }
       }