GetClientAuth determines the policy the http server will follow for TLS Client Authentication.

MutateHandler handles AdmissionReview requests and sends responses back to the K8s API server.

NewClientCertPool will load a single client CA.

NewTlsKeypairReloader reload tlsKeypairReloader struct.

SetNetAttachDefCache sets up the net attach def cache service.

SetupInClusterClient setups K8s client to communicate with the API server.