KEP-6060: Implement webhook authentication token issuance and validation
- Add webhook configs as valid types - Begin wiring up authz for the tests - Wire up private claims and webhook configuration bound objects - Add authz checks - Wire up bound object name/uid to tokenreview - Protobuf generation for v1 type - Plumb attestations through to UserInfo.Extra - Add integration tests - Add attestation validations - Add audience logic and tests - Add wh check - Add unit tests - Remove attestations from SAR UserInfo - Check for kube-apiserver audiences and deny if there - Add unit tests for TokenREST.Create - Check webhook configuration deletion timestamp - Enforce ten minute limit on admission review webhook token requests Signed-off-by: Peter Engelbert <pmengelbert@gmail.com>
P
Peter Engelbert committed
40041209ad20049091e76a01758c0e285f8df6d8
Parent: 304d943