plugin/

serviceaccount enforces all pods having an associated serviceaccount, and all containers mounting the API token for that serviceaccount at a known location

Package auth contains implementations for interfaces in the pkg/auth package

Package bootstrap provides a token authenticator for TLS bootstrap secrets.

Package authorizer contains implementations for pkg/auth/authorizer interfaces

Package rbac implements the authorizer.Authorizer interface using roles base access control.