### CVE-2021-25735: Validating Admission Webhook does not observe some previous fields

A security issue was discovered in kube-apiserver that could allow node
updates to bypass a Validating Admission Webhook. You are only affected
by this vulnerability if you run a Validating Admission Webhook for Nodes
that denies admission based at least partially on the old state of the
Node object.

FIPS 140-3 module versions. This file contains only tests that // need access to the unexported symbol testingOnlyRejection. func TestACVPRejectionKAT(t *testing.T) { testCases := []struct { name string seed string // input to ML-DSA.KeyGen_internal keyHash string // SHA2-256(pk || sk) msg string // M' input to ML-DSA.Sign_internal sigHash string // SHA2-256(sig) newPrivateKey func([]byte) (*PrivateKey, error) newPublicKey func([]byte) (*PublicKey, error) }{ // https://pages.nist.gov/ACVP/draft-celi...