🌱 pkg/authorization/maxpermpolicy: add delegation reason

[s-urbaniak]

Summary

This adds a delegation reason for the maximal permission policy authorizer. Currently a not very meaningful message is added in the audit logs in case no relevant API bindings have been found:

$ cat audit.log | jq .
{
    "kind": "Event",
...
    "annotations": {
...
        "request.auth.kcp.io/04-maxpermissionpolicy-decision": "Allowed",
        "request.auth.kcp.io/04-maxpermissionpolicy-reason": "05-bootstrap: access granted",
...
    }
}

This changes the above message to:

        "request.auth.kcp.io/04-maxpermissionpolicy-reason": "delegating due to no relevant binding found",

Related issue(s)

N/A

/cc @hardys @sttts

[hardys]

/lgtm

[stevekuznetsov]

/approve

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: stevekuznetsov

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• pkg/authorization/OWNERS [stevekuznetsov]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment