- Add Vault OIDC client configuration - Add VAULT_CLIENT_SECRET to ExternalSecret - Mount VAULT_CLIENT_SECRET in pod