NewClusterAuthenticationTrustController returns a controller that will maintain the kube-system configmap/extension-apiserver-authentication that holds information about how to aggregated apiservers are recommended (but not required) to configure themselves.

ClusterAuthenticationInfo holds the information that will included in public configmap.

Controller holds the running state for the controller.