SIGN IN SIGN UP

KEP-6060: Implement webhook authentication token issuance and validation

- Add webhook configs as valid types
- Begin wiring up authz for the tests
- Wire up private claims and webhook configuration bound objects
- Add authz checks
- Wire up bound object name/uid to tokenreview
- Protobuf generation for v1 type
- Plumb attestations through to UserInfo.Extra
- Add integration tests
- Add attestation validations
- Add audience logic and tests
- Add wh check
- Add unit tests
- Remove attestations from SAR UserInfo
- Check for kube-apiserver audiences and deny if there
- Add unit tests for TokenREST.Create
- Check webhook configuration deletion timestamp
- Enforce ten minute limit on admission review webhook token requests

Signed-off-by: Peter Engelbert <pmengelbert@gmail.com>
P
Peter Engelbert committed
40041209ad20049091e76a01758c0e285f8df6d8
Parent: 304d943