☂️ [GEP-24] Shoot OIDC issuer

[dimityrmirchev]

How to categorize this issue?

/area security usability
/kind enhancement

This issue is to track the implementation of GEP-24

Tasks:

• Gardener
  • Expose feature through shoot annotation & gardenlet should adjust kube-apiserver flags [GEP-24] Configure KAPI managed issuer & JWKS URL #9196
  • Create the gardener-system-shoot-issuer namespace [GEP-24] Configure KAPI managed issuer & JWKS URL #9196
  • Sync metadata of shoot into the Garden cluster & extend seed authorizer [GEP-24] Sync service account public keys to Garden cluster #9354
  • Introduce ShootManagedIssuer feature gate [GEP-24] Introduce ShootManagedIssuer feature gate #9489
  • Add documentation [GEP-24] Manage Gardener Discovery Server via Gardener Operator #9746
  • Promote ShootManagedIssuer feature gate
• Discovery Server
  • Implement gardener-discovery-server in a new repository
    • Bootstrap initial project structure gardener-discovery-server#1
    • OpenID metadata store implementation gardener-discovery-server#3
    • Implement metadata reconciler gardener-discovery-server#4
    • Add common scripts to repository gardener-discovery-server#5
    • Metadata http handlers gardener-discovery-server#6
    • Add gardener-discovery-server repo to prow configs ci-infra#1561
    • Build gardener-discovery-server image post submit ci-infra#1564
    • Implement helm chart and skaffold setup gardener-discovery-server#19
    • Implement e2e test gardener-discovery-server#21
    • Add catch all handler to server gardener-discovery-server#22
    • Add e2e test jobs for gardener-discovery-server ci-infra#1711
• Gardener Operator
  • Install gardener-discovery-server via gardener-operator [GEP-24] Manage Gardener Discovery Server via Gardener Operator #9746

[dimityrmirchev]

/assign @dimityrmirchev