welcome: init group memberships for first create (#115)

* rename createAdminAccount to createAccount

* welcome: call memberships init on first user

* auth: add http endpoints to allowed return addresses

* memberships: make init user member of groups as well

---------

Co-authored-by: Giorgi Lekveishvili <lekva@gl-mbp-m1-max.local>
diff --git a/charts/welcome/templates/install.yaml b/charts/welcome/templates/install.yaml
index e828527..dfbac29 100644
--- a/charts/welcome/templates/install.yaml
+++ b/charts/welcome/templates/install.yaml
@@ -111,6 +111,7 @@
         - --port=8080
         - --create-account-addr={{ .Values.createAccountAddr }}
         - --login-addr={{ .Values.loginAddr }}
+        - --memberships-init-addr={{ .Values.membershipsInitAddr }}
         volumeMounts:
         - name: ssh-key
           readOnly: true
diff --git a/charts/welcome/values.yaml b/charts/welcome/values.yaml
index 3aac390..95ac8ec 100644
--- a/charts/welcome/values.yaml
+++ b/charts/welcome/values.yaml
@@ -6,6 +6,7 @@
 sshPrivateKey: key
 createAccountAddr: http://api.core-auth.svc.cluster.local/identities
 loginAddr: https://accounts-ui.example.com
+membershipsInitAddr: http://memberships.example.svc.cluster.local/api/ini
 ingress:
   className: pcloud-ingress-public
   domain: welcome.example.com