adds inlineOIDC config to CRDs

ct-install.yaml

@@ -2,7 +2,8 @@
 # See: https://github.com/helm/chart-testing
 
 chart-dirs:
-  - deploy/charts
+  - deploy/charts/operator-crds
+  - deploy/charts/operator
 validate-maintainers: false
 remote: origin
 target-branch: main

deploy/charts/operator-crds/Chart.yaml

@@ -2,5 +2,5 @@ apiVersion: v2
 name: toolhive-operator-crds
 description: A Helm chart for installing the ToolHive Operator CRDs into Kubernetes.
 type: application
-version: 0.0.43
+version: 0.0.44
 appVersion: "0.0.1"

deploy/charts/operator-crds/README.md

@@ -1,7 +1,7 @@
 
 # ToolHive Operator CRDs Helm Chart
 
-![Version: 0.0.43](https://img.shields.io/badge/Version-0.0.43-informational?style=flat-square)
+![Version: 0.0.44](https://img.shields.io/badge/Version-0.0.44-informational?style=flat-square)
 ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
 
 A Helm chart for installing the ToolHive Operator CRDs into Kubernetes.

deploy/charts/operator-crds/crds/toolhive.stacklok.dev_mcpremoteproxies.yaml

@@ -158,9 +158,25 @@ spec:
                         description: ClientID is the OIDC client ID
                         type: string
                       clientSecret:
-                        description: ClientSecret is the client secret for introspection
-                          (optional)
+                        description: |-
+                          ClientSecret is the client secret for introspection (optional)
+                          Deprecated: Use ClientSecretRef instead for better security
                         type: string
+                      clientSecretRef:
+                        description: |-
+                          ClientSecretRef is a reference to a Kubernetes Secret containing the client secret
+                          If both ClientSecret and ClientSecretRef are provided, ClientSecretRef takes precedence
+                        properties:
+                          key:
+                            description: Key is the key within the secret
+                            type: string
+                          name:
+                            description: Name is the name of the secret
+                            type: string
+                        required:
+                        - key
+                        - name
+                        type: object
                       insecureAllowHTTP:
                         default: false
                         description: |-

deploy/charts/operator-crds/crds/toolhive.stacklok.dev_mcpservers.yaml

@@ -182,9 +182,25 @@ spec:
                         description: ClientID is the OIDC client ID
                         type: string
                       clientSecret:
-                        description: ClientSecret is the client secret for introspection
-                          (optional)
+                        description: |-
+                          ClientSecret is the client secret for introspection (optional)
+                          Deprecated: Use ClientSecretRef instead for better security
                         type: string
+                      clientSecretRef:
+                        description: |-
+                          ClientSecretRef is a reference to a Kubernetes Secret containing the client secret
+                          If both ClientSecret and ClientSecretRef are provided, ClientSecretRef takes precedence
+                        properties:
+                          key:
+                            description: Key is the key within the secret
+                            type: string
+                          name:
+                            description: Name is the name of the secret
+                            type: string
+                        required:
+                        - key
+                        - name
+                        type: object
                       insecureAllowHTTP:
                         default: false
                         description: |-