fix: comment for identity existing secret (#4275)

Co-authored-by: distro-ci[bot] <122795778+distro-ci[bot]@users.noreply.github.com>

Author: hamza-m-masood

charts/camunda-platform-8.8/README.md

@@ -485,7 +485,7 @@ Please see the corresponding [release guide](../../docs/release.md) to find out
 | `global.identity.auth.identity.existingSecretKey`                        | (DEPRECATED - use global.identity.auth.identity.secret instead) defines the key within the existing secret object.                                                                                                                                                                                       | `identity-oidc-client-token`                                       |
 | `global.identity.auth.identity.secret`                                   | configuration to provide the identity client secret.                                                                                                                                                                                                                                                     |                                                                    |
 | `global.identity.auth.identity.secret.inlineSecret`                      | can be used to provide the client secret as a plain-text value for non-production usage.                                                                                                                                                                                                                 | `""`                                                               |
-| `global.identity.auth.identity.secret.existingSecret`                    | can be used to reference an existing Kubernetes Secret containing the client secret.                                                                                                                                                                                                                     | `""`                                                               |
+| `global.identity.auth.identity.secret.existingSecret`                    | can be used to reference an existing Kubernetes Secret containing the client secret. This should ONLY be used for an external OIDC provider. If not set, a random secret is generated.                                                                                                                   | `""`                                                               |
 | `global.identity.auth.identity.secret.existingSecretKey`                 | defines the key within the existing secret object.                                                                                                                                                                                                                                                       | `""`                                                               |
 | `global.identity.auth.identity.redirectUrl`                              | defines the redirect URL, which is used by the auth platform to access Management Identity.                                                                                                                                                                                                              | `http://localhost:8085`                                            |
 | `global.identity.auth.identity.initialClaimName`                         | defines the initial claim name, which is used by Management Identity to configure initial mapping rules,                                                                                                                                                                                                 | `oid`                                                              |

charts/camunda-platform-8.8/values.schema.json

@@ -620,7 +620,7 @@
                                                 },
                                                 "existingSecret": {
                                                     "type": "string",
-                                                    "description": "can be used to reference an existing Kubernetes Secret containing the client secret.",
+                                                    "description": "can be used to reference an existing Kubernetes Secret containing the client secret. This should ONLY be used for an external OIDC provider. If not set, a random secret is generated.",
                                                     "default": ""
                                                 },
                                                 "existingSecretKey": {

charts/camunda-platform-8.8/values.yaml

@@ -363,7 +363,7 @@ global:
         secret:
           ## @param global.identity.auth.identity.secret.inlineSecret can be used to provide the client secret as a plain-text value for non-production usage.
           inlineSecret: ""
-          ## @param global.identity.auth.identity.secret.existingSecret can be used to reference an existing Kubernetes Secret containing the client secret.
+          ## @param global.identity.auth.identity.secret.existingSecret can be used to reference an existing Kubernetes Secret containing the client secret. This should ONLY be used for an external OIDC provider. If not set, a random secret is generated.
           existingSecret: ""
           ## @param global.identity.auth.identity.secret.existingSecretKey defines the key within the existing secret object.
           existingSecretKey: ""