add OIDC provider best practice

[csplinter]

Add a best practice for OIDC provider configuration

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

[eks-distro-bot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please ask for approval from csplinter. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• docs/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[codecov]

Codecov Report

Patch coverage has no change and project coverage change: +0.08% 🎉

Comparison is base (6749838) 75.54% compared to head (3e809e3) 75.62%.
Report is 32 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #6595      +/-   ##
==========================================
+ Coverage   75.54%   75.62%   +0.08%     
==========================================
  Files         459      473      +14     
  Lines       37709    38234     +525     
==========================================
+ Hits        28488    28916     +428     
- Misses       7651     7721      +70     
- Partials     1570     1597      +27     

see 31 files with indirect coverage changes

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[drewvanstone]

two small nits but looks good otherwise

[TerryHowe]

/lgtm

[chrisnegus]

/lgtm

[csplinter]

/cherry-pick release-0.17

[eks-distro-pr-bot]

@csplinter: new pull request created: #6710

In response to this:

/cherry-pick release-0.17

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.