FEAT(zot): add Authelia OIDC authentication

- Add OpenID provider configuration for Authelia
- Create ExternalSecret for OIDC credentials
- Mount credentials file at /etc/zot/oidc-credentials.json

zot/manifests/secret.yaml

@@ -16,3 +16,34 @@ spec:
     remoteRef:
       key: zot
       property: HTPASSWD
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: zot-oidc-secret
+  namespace: zot
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault-backend
+  target:
+    name: zot-oidc-credentials
+    creationPolicy: Owner
+    template:
+      engineVersion: v2
+      data:
+        credentials.json: |
+          {
+            "clientid": "{{ .client_id }}",
+            "clientsecret": "{{ .client_secret }}"
+          }
+  data:
+  - secretKey: client_id
+    remoteRef:
+      key: zot
+      property: OIDC_CLIENT_ID
+  - secretKey: client_secret
+    remoteRef:
+      key: zot
+      property: OIDC_CLIENT_SECRET