Change issuer identifier address for OIDC

[laushinka]

Description

Configure Gitpod Cloud to use services.gitpod.io instead of api.gitpod.io for IDP tokens.

We have communicated to users that this breaking change will take effect on 18 September 2023. We will need to make sure this is only rolled out on that day. cc @akosyakov @loujaybee

Summary generated by Copilot

🤖 Generated by Copilot at 0a6c4b8

Refactor public API server to use services subdomain. Update publicUrl variable in configmap.go to reflect this change.

Related Issue(s)

Relates #ENG-542

How to test

Documentation

Preview status

Gitpod was successfully deployed to your preview environment.

• 🏷️ Name - lm-oidc-change
• 🔗 URL - lm-oidc-change.preview.gitpod-dev.com/workspaces.
• 📚 Documentation - See our internal documentation for information on how to interact with your preview environment.
• 📦 Version - lm-oidc-change-gha.16745
• 🗒️ Logs - GCP Logs Explorer

Build Options

Build

• /werft with-werft
  Run the build with werft instead of GHA
• leeway-no-cache
• /werft no-test
  Run Leeway with --dont-test

Publish

• /werft publish-to-npm
• /werft publish-to-jb-marketplace

Installer

• analytics=segment
• with-dedicated-emulation
• workspace-feature-flags
  Add desired feature flags to the end of the line above, space separated

Preview Environment / Integration Tests

• /werft with-local-preview
  If enabled this will build install/preview
• /werft with-preview
• /werft with-large-vm
• /werft with-gce-vm
  If enabled this will create the environment on GCE infra
• with-integration-tests=all
  Valid options are all, workspace, webapp, ide, jetbrains, vscode, ssh. If enabled, with-preview and with-large-vm will be enabled.
• with-monitoring

/hold

[easyCZ]

Pushed a fix for unit tests

[easyCZ]

Can confirm the change works

[laushinka]

Can confirm the change works

Thank you!

Keeping this on hold until rollout for 18 September 2023.

[filiptronicek]

unblock from exp