ConvertListOptions converts an internal ListOptions to one used by client-go.

ConvertToTable helps implement [rest.Lister] and [rest.TableConvertor].

ConvertToTableDefault helps implement [rest.Lister] and [rest.TableConvertor].

CreateOrUpdate helps implement [rest.Updater] by handling most of the logic.

NewDefaultAuthenticator creates a DefaultAuthenticator.

NewUnionAuthenticator creates a [UnionAuthenticator].

DefaultAuthenticator is an [authenticator.Request] that authenticates a user by: - making sure the client uses a certificate signed by the CA defined in the `extension-apiserver-authentication` configmap in the `kube-system` namespace and - making sure the CN of the cert is part of the allow list, also defined in the same configmap This authentication is better explained in https://kubernetes.io/docs/tasks/extend-kubernetes/configure-aggregation-layer/ This authenticator is a [dynamiccertificates.ControllerRunner] which means it will run in the background to dynamically watch the content of the configmap.

ExtensionAPIServer wraps a [genericapiserver.GenericAPIServer] to implement a Kubernetes extension API server.

UnionAuthenticator chains authenticators together to allow many ways of authenticating requests for the extension API server.

ConvertFunc will convert an object to a list of cell in a metav1.Table (think kubectl get table output).