k8s authentication & authorization webhooks

configs.txt

clusters:
  - name: tbxaccounts
    cluster:
      server: https://some.auth.service/webhook-authn?cluster=kube-prod

users:
  - name: apiserver

current-context: webhook
contexts:
- context:
    cluster: tbxaccounts
    user: apiserver
  name: webhook

k8s.flags.txt

    --runtime-config=extensions/v1beta1=true,extensions/v1beta1/networkpolicies=true,batch/v2alpha1=true,authentication.k8s.io/v1beta1=true,authorization.k8s.io/v1beta1=true \
    --authentication-token-webhook-config-file=/etc/kubernetes/kubeconfig/webhook-authn \
    --authentication-token-webhook-cache-ttl=5m                             \
    --authorization-webhook-config-file=/etc/kubernetes/kubeconfig/webhook-authz  \
    --authorization-webhook-cache-unauthorized-ttl=5m                       \
    --authorization-webhook-cache-authorized-ttl=5m