- Use externalSecret.enabled instead of env - Add template to ExternalSecret with all OIDC fields
- Add OIDC configuration (clientID, issuerURL, scopes) - Add ExternalSecret for OIDC client secret from Vault - Remove Authelia middleware (using direct OIDC auth)
- Correct Headlamp Helm repository URL - Fix chart source configuration