Update k8s dependencies to v1.22.0-rc.0

vendor/k8s.io/api/flowcontrol/v1alpha1/generated.proto

@@ -411,16 +411,20 @@ message ServiceAccountSubject {
 // ways of matching an originator; by user, group, or service account.
 // +union
 message Subject {
+  // `kind` indicates which one of the other fields is non-empty.
   // Required
   // +unionDiscriminator
   optional string kind = 1;
 
+  // `user` matches based on username.
   // +optional
   optional UserSubject user = 2;
 
+  // `group` matches based on user group name.
   // +optional
   optional GroupSubject group = 3;
 
+  // `serviceAccount` matches ServiceAccounts.
   // +optional
   optional ServiceAccountSubject serviceAccount = 4;
 }

vendor/k8s.io/api/flowcontrol/v1alpha1/types.go

@@ -185,13 +185,17 @@ type PolicyRulesWithSubjects struct {
 // ways of matching an originator; by user, group, or service account.
 // +union
 type Subject struct {
+	// `kind` indicates which one of the other fields is non-empty.
 	// Required
 	// +unionDiscriminator
 	Kind SubjectKind `json:"kind" protobuf:"bytes,1,opt,name=kind"`
+	// `user` matches based on username.
 	// +optional
 	User *UserSubject `json:"user,omitempty" protobuf:"bytes,2,opt,name=user"`
+	// `group` matches based on user group name.
 	// +optional
 	Group *GroupSubject `json:"group,omitempty" protobuf:"bytes,3,opt,name=group"`
+	// `serviceAccount` matches ServiceAccounts.
 	// +optional
 	ServiceAccount *ServiceAccountSubject `json:"serviceAccount,omitempty" protobuf:"bytes,4,opt,name=serviceAccount"`
 }

vendor/k8s.io/api/flowcontrol/v1alpha1/types_swagger_doc_generated.go

@@ -238,8 +238,11 @@ func (ServiceAccountSubject) SwaggerDoc() map[string]string {
 }
 
 var map_Subject = map[string]string{
-	"":     "Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.",
-	"kind": "Required",
+	"":               "Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.",
+	"kind":           "`kind` indicates which one of the other fields is non-empty. Required",
+	"user":           "`user` matches based on username.",
+	"group":          "`group` matches based on user group name.",
+	"serviceAccount": "`serviceAccount` matches ServiceAccounts.",
 }
 
 func (Subject) SwaggerDoc() map[string]string {