feat: support CA bundle and identity cert/key authentication

[Teng-Jiao-Chen]

Description of your changes

Provide an solution for community to support CA auth

I have:

• Run make reviewable to ensure this PR is ready for review.

How has this code been tested

• Kind Cluster e2e workflow on README is verified working, no existing workflow get affected.
• Integ test is performed in LinkedIn environment
• Helm yaml generation is verified

The default behavior has no changes.

For the yamls with CA info enabled
==================================================

helm template member-agent ./charts/member-agent/ \
--set useCAAuth=true \
--set config.identityKey="identity-key-path" \
--set config.identityCert="identity-cert-path" \
--set config.CABundle="ca-bundle-path" \
--set config.hubURL=hub-cluster-api-url \
--set image.repository=member-agent-image-url \
--set image.tag=0.0.1 \
--set refreshtoken.repository=refresh-token-url \
--set refreshtoken.tag=0.0.1 \
--set image.pullPolicy=IfNotPresent --set refreshtoken.pullPolicy=IfNotPresent \
--set config.memberClusterName="member-cluster-name" \
--set logVerbosity=5 \
--set namespace=fleet-system \
| awk -vout=/tmp/member-agent-with-ca -F": " '$0~/^# Source: /{file=out"/"$2; print "Creating "file; system ("mkdir -p $(dirname "file"); echo "" > "file)} $0!~/^#/ && $0!="---"{print $0 >> file}'

deployment.yaml is verified with the right arguments and there is no refresh token generated
==================================================
...
          args:
            - --leader-elect=true
            - --use-ca-auth=true
            - --v=5
            - -add_dir_header
          env:
...
          - name: IDENTITY_KEY
            value:  "identity-key-path"
          - name: IDENTITY_CERT
            value:  "identity-cert-path"
          - name: CA_BUNDLE
            value:  "ca-bundle-path"
...

[Teng-Jiao-Chen]

@microsoft-github-policy-service agree [company="LinkedIn"]

[Teng-Jiao-Chen]

@microsoft-github-policy-service agree company="LinkedIn"

[michaelawyu]

LGTM.

[zhiying-lin]

one minor comment, others LGTM

Can you change the PR title to "feat: support CA bundle and identity cert/key authentication"? i remember we have the pr title lint check and not sure why the current one did not fail.

Thank you so much!

[Ealianis]

one minor comment, others LGTM

Can you change the PR title to "feat: support CA bundle and identity cert/key authentication"? i remember we have the pr title lint check and not sure why the current one did not fail.

Thank you so much!

That is odd, I triggered it manually.