add RBR from CRDs

[deads2k]

/assign @sallyom

[deads2k]

This will currently fail on

                restrictusers_test.go:95: unexpected error: RoleBindingRestriction.authorization.openshift.io "match-users-alice" is invalid: []: Invalid value: map[string]interface {}{"metadata":map[string]interface {}{"name":"match-users-alice", "namespace":"namespace", "creationTimestamp":"2019-05-03T15:00:12Z", "generation":1, "uid":"26c40c78-6db4-11e9-926e-54e1ad486dd3"}, "spec":map[string]interface {}{"userrestriction":map[string]interface {}{"labels":interface {}(nil), "users":[]interface {}{"alice"}, "groups":interface {}(nil)}, "grouprestriction":interface {}(nil), "serviceaccountrestriction":interface {}(nil)}, "kind":"RoleBindingRestriction", "apiVersion":"authorization.openshift.io/v1"}: validation failure list:
                    spec.userrestriction.groups in body must be of type array: "null"
                    spec.userrestriction.labels in body must be of type array: "null"

[sallyom]

I'll clean this up, my bad, can be done in follow-up if necessary

[sallyom]

/lgtm

[openshift-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: deads2k, sallyom

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• hack/OWNERS [deads2k]
• pkg/OWNERS [deads2k]
• test/integration/OWNERS [deads2k]
• test/util/OWNERS [deads2k]
• vendor/k8s.io/kubernetes/staging/src/k8s.io/kube-aggregator/OWNERS [deads2k]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[deads2k]

/retest

[deads2k]

/test all

[deads2k]

/retest

[deads2k]

/retest