feat(sso): add client cert and root CA options. Fixes #13545. Fixes #7198.

[Simple-Analysis]

Fixes #13545 and fixes #7198.

Motivation

To enable SSO features by ensuring that communication can occur with SSO provider's endpoint that enforces client certificate authentication.

Modifications

• Added client certificate options for httpClient used in SSO provider communications
• Added custom root CA option for httpClient used in SSO provider communications

Verification

Unit tests to ensure certificates are consumed properly.

[Simple-Analysis]

This pull request addresses a specific issue that is currently preventing us from using Argo Workflows across multiple teams, and I’d be happy to make any necessary changes or provide additional context if required.

If you have any feedback or guidance on how I can help move this forward, I’d be more than happy to assist. Thanks so much for your time and consideration!

@agilgur5 and @Joibel I noticed this PR was moved between a few milestones, so I was curious how the milestone assignment works with regard to which PRs make the cut?

[Joibel]

@agilgur5 and @Joibel I noticed this PR was moved between a few milestones, so I was curious how the milestone assignment works with regard to which PRs make the cut?

The releases are nominally done on a schedule. 3.6 took much longer. PRs make the cut if they are merged by the time the next release is due. Ideally everything would have been reviewed and merged - but the milestone is a kind of desired checklist. Unless an item is a regression it won't usually hold up the release.