cherry pick rock, workingdir fix to main (#133)

* explicitly set workingdir for workload in charm.py (#128)

* use rock for oidc-authservice on `main` for ckf-1.8 (#132)

Closes #131

metadata.yaml

@@ -22,7 +22,7 @@ resources:
     type: oci-image
     description: 'Backing OCI image'
     auto-fetch: true
-    upstream-source: docker.io/kubeflowmanifestswg/oidc-authservice:e236439
+    upstream-source: charmedkubeflow/oidc-authservice:ckf-1.8-58e8217
 peers:
   client-secret:
     interface: client-secret

src/charm.py

@@ -117,6 +117,9 @@ def _oidc_layer(self):
                     "command": "/home/authservice/oidc-authservice",
                     "environment": self.service_environment,
                     "startup": "enabled",
+                    # See https://github.com/canonical/oidc-gatekeeper-operator/pull/128
+                    # for context on why we need working-dir set here.
+                    "working-dir": "/home/authservice",
                 }
             },
         }