Manual deployment method fails to explain how to create the ou-tls-certificate and unison-tls secrets

I tried to follow the manual deployment steps, but the kube-oidc-proxy-orchestra pod cannot be created, as the secrets `ou-tls-certificate` and `unison-tls` are missing.

The docs mention that one can get something out of the `ou-tls-certificate`, but not how to create them.

Or, when they will be required, aka which options in the `values.yaml` require those secrets.

Could this be added?