feat(organizations): enable oauth2-proxy by default

[IvoGoman]

Description

organizations with a valid OIDC config will get the oauth2-proxy automatically configured

What type of PR is this? (check all applicable)

• 🍕 Feature
• 🐛 Bug Fix
• 📝 Documentation Update
• 🎨 Style
• 🧑‍💻 Code Refactor
• 🔥 Performance Improvements
• ✅ Test
• 🤖 Build
• 🔁 CI
• 📦 Chore (Release)
• ⏩ Revert

Related Tickets & Documents

Added tests?

• 👍 yes
• 🙅 no, because they aren't needed
• 🙋 no, because I need help
• Separate ticket for tests # (issue/pr)

Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce. Please also list any relevant details for your test configuration

Added to documentation?

• 📜 README.md
• 🤝 Documentation pages updated
• 🙅 no documentation needed
• (if applicable) generated OpenAPI docs for CRD changes

Checklist

• My code follows the style guidelines of this project
• I have performed a self-review of my code
• I have commented my code, particularly in hard-to-understand areas
• My changes generate no new warnings
• New and existing unit tests pass locally with my changes

[abhijith-darshan]

We hit some rate limits for kustomize download in actions.

We can remediate this by -

1. Getting the binary from sigs.k8s.io/kustomize $(call go-get-tool,$(KUSTOMIZE),sigs.k8s.io/kustomize/kustomize/v4@v5.4.3)
2. Use the kustomize binary already installed by kind setup action.

[IvoGoman]

We hit some rate limits for kustomize download in actions.

We can remediate this by -

1. Getting the binary from sigs.k8s.io/kustomize $(call go-get-tool,$(KUSTOMIZE),sigs.k8s.io/kustomize/kustomize/v4@v5.4.3)
2. Use the kustomize binary already installed by kind setup action.

The binary download already uses the token if supplied in the env. The download of the kustomize script fails, maybe we can just set the token in the request: https://github.com/cloudoperators/greenhouse/actions/runs/16447817630/job/46514490522#step:2:305

[abhijith-darshan]

I would avoid doing this as it needs changes in Makefile or setting up git config. Simplest thing is to get it from sigs