Add ingress support for OIDC discovery provider

This patch enables exposing the oidc server out with an ingress
along with tests to ensure it works.

Signed-off-by: Kevin Fox <[email protected]>

Co-authored-by: Marco Franssen <[email protected]>

.github/tests/spire-oidc-insecure/pre-install.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+helm install ingress-nginx ingress-nginx --version 4.5.2 --repo https://kubernetes.github.io/ingress-nginx -n "$VALUES" --set controller.extraArgs.enable-ssl-passthrough=
+kubectl wait --namespace ingress-nginx   --for=condition=ready pod   --selector=app.kubernetes.io/component=controller -n "$VALUES"

.github/tests/spire-oidc-insecure/values.yaml

@@ -6,7 +6,16 @@ spiffe-oidc-discovery-provider:
 
   config:
     domains:
-      - oidc-discovery.example.org
+      - ingress-nginx-controller
 
     acme:
       tosAccepted: false
+
+  ingress:
+    enabled: true
+    className: "nginx"
+    hosts:
+    - host: ingress-nginx-controller
+      paths:
+        - path: /
+          pathType: Prefix