This is another "Optional" task, so I've set the "Priority" field as such.

Changing to Ingress brings us closer to being able to publish to the operator hub.

It will mean that a field is needed on the CR to specify the host or whatever, since that must be specified on Ingress.

The investigation part here will really be around getting the oauth-proxy to work with Ingress. I think this might be possible using a redirect-uri annotation in the ServiceAccount, rather than a redirect-reference (the latter only works with Routes).