go.*: Update k8s packages

- update k8s client_go
 - update k8s apiextensions-apiserver
 - update k8s controller-tools

Signed-off-by: leonnicolas <leonloechner@gmx.de>

vendor/k8s.io/api/flowcontrol/v1alpha1/generated.proto

@@ -352,8 +352,10 @@ message QueuingConfiguration {
 // ResourcePolicyRule matches a resource request if and only if: (a)
 // at least one member of verbs matches the request, (b) at least one
 // member of apiGroups matches the request, (c) at least one member of
-// resources matches the request, and (d) least one member of
-// namespaces matches the request.
+// resources matches the request, and (d) either (d1) the request does
+// not specify a namespace (i.e., `Namespace==""`) and clusterScope is
+// true or (d2) the request specifies a namespace and least one member
+// of namespaces matches the request's namespace.
 message ResourcePolicyRule {
   // `verbs` is a list of matching verbs and may not be empty.
   // "*" matches all verbs and, if present, must be the only entry.
@@ -411,16 +413,20 @@ message ServiceAccountSubject {
 // ways of matching an originator; by user, group, or service account.
 // +union
 message Subject {
+  // `kind` indicates which one of the other fields is non-empty.
   // Required
   // +unionDiscriminator
   optional string kind = 1;
 
+  // `user` matches based on username.
   // +optional
   optional UserSubject user = 2;
 
+  // `group` matches based on user group name.
   // +optional
   optional GroupSubject group = 3;
 
+  // `serviceAccount` matches ServiceAccounts.
   // +optional
   optional ServiceAccountSubject serviceAccount = 4;
 }