Add PSA to block setting `.host` field from ProbeHandler and LifecycleHandler

[tssurya]

Enhancement Description

• One-line enhancement description (can be used as a release note): Add PSA to block setting .host field from ProbeHandler and LifecycleHandler
• Kubernetes Enhancement Proposal: https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/4940-psa-block-host-field-in-probes/README.md
• Discussion Link:
  • Pod probes lead to blind SSRF from the node kubernetes#99425
  • https://docs.google.com/document/d/1lpVI4OuxRf7-j2jcfHm48MdHyxMR5PlKyWzAO-NUYgU/edit?tab=t.0#heading=h.sk3qw3odtcg3
  • https://docs.google.com/document/d/1woLGRoONE3EBVx-wTb4pvp4CI7tmLZ6lS26VTbosLKM/edit?tab=t.0#bookmark=id.kn6d9d9e97kw
• Primary contact (assignee): @tssurya
• Responsible SIGs: sig-auth
• Enhancement target (which target equals to which milestone):
  • Alpha release target (x.y): 1.34
  • Beta release target (x.y): 1.34
  • Stable release target (x.y): 1.34
• Alpha
  • KEP (k/enhancements) update PR(s): Add PSA to block host field in probe/lifecycle handlers #4942 and Update the KEP with clarity around localhost probes #5444
  • Code (k/k) update PR(s): Add PSA for blocking .host on pod probes kubernetes#125271
  • Docs (k/website) update PR(s): PSA host field docs website#51498

Please keep this description up to date. This will help the Enhancement Team to track the evolution of the enhancement efficiently.

/sig auth

[tssurya]

/assign @tssurya

[tssurya]

/sig auth