feat(shared): Add automatic Ingress patching to oauth2-proxy component

This patch adjusts the component for oauth2-proxy to also include a
patching mechism for all kustomize-defined Ingress objects to be
restricted.

shared/components/oauth2-proxy/ingress-patch.yaml

+- op: add
+  path: /metadata/annotations/nginx.ingress.kubernetes.io~1auth-response-headers
+  value: Authorization
+- op: add
+  path: /metadata/annotations/nginx.ingress.kubernetes.io~1auth-url
+  value: https://$host/oauth2/auth
+- op: add
+  path: /metadata/annotations/nginx.ingress.kubernetes.io~1auth-signin
+  value: https://$host/oauth2/start?rd=$escaped_request_uri
\ No newline at end of file

shared/components/oauth2-proxy/kustomization.yaml

@@ -6,4 +6,12 @@ resources:
   - secret.yaml
   - repository.yaml
   - release.yaml
-  - networkpolicy.yaml
+  - networkpolicy.yaml
\ No newline at end of file
+
+patches:
+  - path: ingress-patch.yaml
+    target:
+      group: networking.k8s.io
+      version: v1
+      kind: Ingress
+      annotationSelector: "oauth2-proxy.kustomize.si-infra.de/exclude-ingress!=true"
\ No newline at end of file