code: func NewDefaultAuthenticationInfoResolverWrapper(
  	proxyTransport *http.Transport,
  	kubeapiserverClientConfig *rest.Config) AuthenticationInfoResolverWrapper {
  
  	webhookAuthResolverWrapper := func(delegate AuthenticationInfoResolver) AuthenticationInfoResolver {
  		return &AuthenticationInfoResolverDelegator{
  			ClientConfigForFunc: func(server string) (*rest.Config, error) {
  				if server == "kubernetes.default.svc" {
  					return kubeapiserverClientConfig, nil
  				}
  				return delegate.ClientConfigFor(server)
  			},
  			ClientConfigForServiceFunc: func(serviceName, serviceNamespace string) (*rest.Config, error) {
  				if serviceName == "kubernetes" && serviceNamespace == corev1.NamespaceDefault {
  					return kubeapiserverClientConfig, nil
  				}
  				ret, err := delegate.ClientConfigForService(serviceName, serviceNamespace)
  				if err != nil {
  					return nil, err
  				}
  				if proxyTransport != nil && proxyTransport.DialContext != nil {
  					ret.Dial = proxyTransport.DialContext
  				}
  				return ret, err
  			},
  		}
  	}
  	return webhookAuthResolverWrapper
  }
docs: // NewDefaultAuthenticationInfoResolverWrapper builds a default authn resolver wrapper