KEP-3257: Cluster Trust Bundles

This KEP proposes a new ClusterTrustBundle object that signers can use to
distribute their X.509 trust anchors.

The following integrations are supported:

* Kubelet can mount the contents of a ClusterTrustBundle into a pod.

* Webhook and aggregated API server config objects can refer to a
  ClusterTrustBundle object rather than an inline list of trust anchors.

Author: ahmedtd

keps/prod-readiness/sig-auth/3257.yaml

@@ -0,0 +1,6 @@
+# The KEP must have an approver from the
+# "prod-readiness-approvers" group 
+# of http://git.k8s.io/enhancements/OWNERS_ALIASES
+kep-number: 3257
+alpha:
+  approver: "deads2k"