RetrieveValidatedClusterInfo connects to the API Server and tries to fetch the cluster-info ConfigMap It then makes sure it can trust the API Server by looking at the JWS-signed tokens and (if rootCAPubKeys is not empty) validating the cluster CA against a set of pinned public keys.