Feature Description

Currently the secret value is added as a string in the custom resources, which isn't considered safe. It's recommended to use secretRef instead to pass credentials.

Proposed Solution

For now, both implementations can exist to avoid breaking changes.

  auth:
    oidc:
      clientID: xyz
      clientSecret: abc
      secretRef:
        name: oidc-client-secret
        namespace: kcp-operator

Alternative Solutions

Nothing at the moment.

Want to contribute?

• I would like to work on this issue.

Additional Context

No response