[ISSUE] Identity not disabled with OIDC enabled for version 8.4+gen15

[Szik]

Describe the issue:

Identity not disabled when testing with EntraID (OIDC)

Actual behavior:

Identity pod unhealthy and should not be there as OIDC with 8.4 is not supporting Identity UI

Expected behavior:

Identity is disabled when OIDC is enabled.

How to reproduce:
Enable OIDC when installing via helm.

Logs:
Identity

2024-10-09T13:24:03.710Z ERROR 1 --- [           main] o.s.b.d.LoggingFailureAnalysisReporter   : 

***************************
APPLICATION FAILED TO START
***************************

Description:

Parameter 1 of constructor in io.camunda.identity.controller.PublicAuthorizationController required a bean of type 'io.camunda.identity.service.AuthorizationService' that could not be found.


Action:

Consider defining a bean of type 'io.camunda.identity.service.AuthorizationService' in your configuration.

Environment:

Please note: Without the following info, it's hard to resolve the issue and probably it will be closed.

• Platform: GCP, local
• Helm CLI version: v3.13.1
• Chart version: snapshot-8.4
• Values file:

global:
  identity:
    auth:
      enabled: true
      {{- if .Values.OIDC }}
      issuer: "https://login.microsoftonline.com/****/v2.0"
      issuerBackendUrl: "https://login.microsoftonline.com/****/v2.0"
      tokenUrl: "https://login.microsoftonline.com/****/oauth2/v2.0/token"
      jwksUrl: "https://login.microsoftonline.com/****/discovery/v2.0/keys"
      type: "MICROSOFT"
      publicIssuerUrl: "https://login.microsoftonline.com/****/v2.0"
      {{- if or (eq .Values.version "alpha") (semverCompare ">=8.5.0" .Values.version) }}
      identity:
        clientId: "****"
        existingSecret: "****"
        audience: "****"
        initialClaimValue: "****"
        redirectUrl: "https://{{ .Values.HOST_PREFIX }}.{{ .Values.host }}/identity"
      {{- end }}
      operate:
        clientId: "****"
        audience: "****"
        existingSecret: "****"
        redirectUrl: "https://{{ .Values.HOST_PREFIX }}.{{ .Values.host }}/operate"
      console:
        clientId: "****"
        audience: "****"
        redirectUrl: "https://{{ .Values.HOST_PREFIX }}.{{ .Values.host }}"
        tokenScope: ""
      connectors:
        clientId: "****"
        audience: "****"
        existingSecret: "****"
      optimize:
        clientId: "****"
        audience: "****"
        existingSecret: "****"
        redirectUrl: "https://{{ .Values.HOST_PREFIX }}.{{ .Values.host }}/optimize"
      tasklist:
        clientId: "****"
        audience: "****"
        existingSecret: "****"
        redirectUrl: "https://{{ .Values.HOST_PREFIX }}.{{ .Values.host }}/tasklist"
      webModeler:
        clientId: "****"
        clientApiAudience: "****"
        publicApiAudience: "****"
        redirectUrl: "https://{{ .Values.HOST_PREFIX }}.{{ .Values.host }}/modeler"
      zeebe:
        clientId: "****"
        audience: "****"
        existingSecret: "****"
        tokenScope: "****/.default"
        redirectUrl: "https://{{ .Values.HOST_PREFIX }}.{{ .Values.host }}/optimize"
      {{- else }}
      publicIssuerUrl: "https://{{ .Values.HOST_PREFIX }}.{{ .Values.host }}/auth/realms/camunda-platform"
      operate:
        redirectUrl: "https://{{ .Values.HOST_PREFIX }}.{{ .Values.host }}/operate"
      tasklist:
        redirectUrl: "https://{{ .Values.HOST_PREFIX }}.{{ .Values.host }}/tasklist"
      optimize:
        redirectUrl: "https://{{ .Values.HOST_PREFIX }}.{{ .Values.host }}/optimize"
      console:
        redirectUrl: "https://{{ .Values.HOST_PREFIX }}.{{ .Values.host }}"
      webModeler:
        redirectUrl: "https://{{ .Values.HOST_PREFIX }}.{{ .Values.host }}/modeler"
      {{- end }}
  multitenancy:
    enabled: {{ .Values.MT }}
  ingress:
    enabled: true
    className: nginx
    host: "{{ .Values.HOST_PREFIX }}.{{ .Values.host }}"
    tls:
      enabled: true
      secretName: camunda-platform
    annotations:
      external-dns.alpha.kubernetes.io/hostname: "{{ .Values.HOST_PREFIX }}.{{ .Values.host }}"
      external-dns.alpha.kubernetes.io/ttl: "60"
      ```

[jessesimpson36]

I'm going to close this as wontfix since it's likely that the problem was already fixed a year ago and we simply forgot to close this ticket.