Add OIDC configuration support

config/crd/bases/operator.kcp.io_frontproxies.yaml

@@ -98,8 +98,6 @@ spec:
                           Optionally provide the client secret for the OIDC client. This is not used by KCP itself, but is used to generate
                           a OIDC kubeconfig that can be shared with users to log in via the OIDC provider.
                         type: string
-                      enabled:
-                        type: boolean
                       groupsClaim:
                         description: 'Experimental: Optionally provides a custom claim
                           for fetching groups. The claim must be a string or an array
@@ -125,7 +123,6 @@ spec:
                         type: string
                     required:
                     - clientID
-                    - enabled
                     - issuerURL
                     type: object
                   passOnGroups:

go.mod

@@ -9,12 +9,12 @@ require (
 	github.com/go-logr/logr v1.4.2
 	github.com/go-logr/zapr v1.3.0
 	github.com/go-test/deep v1.1.0
-	github.com/google/go-cmp v0.6.0
 	github.com/kcp-dev/code-generator/v2 v2.3.1
 	github.com/kcp-dev/kcp-operator/sdk v0.0.0-00010101000000-000000000000
 	github.com/kcp-dev/kcp/sdk v0.27.1
 	github.com/onsi/ginkgo/v2 v2.20.0
 	github.com/onsi/gomega v1.34.1
+	github.com/stretchr/testify v1.9.0
 	go.uber.org/zap v1.27.0
 	k8c.io/reconciler v0.5.0
 	k8s.io/api v0.31.6
@@ -53,6 +53,7 @@ require (
 	github.com/golang/protobuf v1.5.4 // indirect
 	github.com/google/cel-go v0.20.1 // indirect
 	github.com/google/gnostic-models v0.6.8 // indirect
+	github.com/google/go-cmp v0.6.0 // indirect
 	github.com/google/gofuzz v1.2.1-0.20210504230335-f78f29fc09ea // indirect
 	github.com/google/pprof v0.0.0-20240727154555-813a5fbdbec8 // indirect
 	github.com/google/uuid v1.6.0 // indirect
@@ -70,6 +71,7 @@ require (
 	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
+	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/prometheus/client_golang v1.20.4 // indirect
 	github.com/prometheus/client_model v0.6.1 // indirect
 	github.com/prometheus/common v0.55.0 // indirect

internal/resources/frontproxy/deployment.go

@@ -236,6 +236,7 @@ func DeploymentReconciler(frontProxy *operatorv1alpha1.FrontProxy, rootShard *op
 			}
 
 			dep = utils.ApplyDeploymentTemplate(dep, frontProxy.Spec.DeploymentTemplate)
+			dep = utils.ApplyAuthConfiguration(dep, frontProxy.Spec.Auth)
 
 			return dep, nil
 		}