Authenticate Requests from ApiServerSources

[Leo6Leo]

Fixes #7321

Proposed Changes

Prerequisite: When OIDC mode is enabled and sink has audience

• All the outgoing event request will be appended with JWT Authorization header
• Automatically create role and rolebinding for the source's serviceaccount so that they have permission to create the JWT token for it's OIDC service account and the audience
• Added the tests for role and rolebinding creation

Pre-review Checklist

• At least 80% unit test coverage
• E2E tests for any new behavior
• Docs PR for any user-facing impact
• Spec PR for any new API feature
• Conformance test for any change to the spec

Release Note

Under OIDC mode, all the outgoing event request will be appended with JWT Authorization header

Docs

[knative-prow]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[codecov]

Codecov Report

Attention: 143 lines in your changes are missing coverage. Please review.

Comparison is base (5d7e104) 76.19% compared to head (a73a26b) 75.53%.
Report is 1 commits behind head on main.

❗ Current head a73a26b differs from pull request most recent head 8890c5d. Consider uploading reports for the commit 8890c5d to get more accurate results

Files	Patch %	Lines
...iler/apiserversource/resources/oidc_rolebinding.go	0.00%	69 Missing ⚠️
pkg/reconciler/apiserversource/apiserversource.go	55.12%	27 Missing and 8 partials ⚠️
pkg/adapter/v2/cloudevents.go	38.23%	19 Missing and 2 partials ⚠️
...ciler/apiserversource/resources/receive_adapter.go	14.28%	10 Missing and 2 partials ⚠️
pkg/adapter/v2/config.go	40.00%	5 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #7452      +/-   ##
==========================================
- Coverage   76.19%   75.53%   -0.66%     
==========================================
  Files         260      261       +1     
  Lines       14447    14667     +220     
==========================================
+ Hits        11008    11079      +71     
- Misses       2873     3008     +135     
- Partials      566      580      +14     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[creydr]

Left some comments on the role & rolebinding event handler filters.

You also need to adjust the tests too (added labels and later with the new owner reference)

[creydr]

Thanks a lot @Leo6Leo for your hard work and patience on all the review cycles on this!

/lgtm

🎉🎉🎉

[knative-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: creydr, Leo6Leo

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [creydr]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment