What is proper design for authentication in kubernetes using nginx-ingress and keycloak

Question

Goal

I want to use keycloak as oauth/oidc provider for my minikube cluster.

Problem

I am confused with the available d