fix: fix #1930 for AWS KMS formats

[vaikas]

Signed-off-by: Ville Aikas vaikas@chainguard.dev

Summary

Fix #1930 by adding validation for the AWS KMS formats. Only support either the key ARN or an alias ARN.
Also validate the endpoint if given.

Ticket Link

Fixes #1930

Release Note

ClusterImagePolicy for AWS KMS only supports key ARN or alias ARN

[codecov-commenter]

Codecov Report

Merging #1946 (efc6da1) into main (ae90c74) will increase coverage by 0.70%.
The diff coverage is 89.47%.

@@            Coverage Diff             @@
##             main    #1946      +/-   ##
==========================================
+ Coverage   34.00%   34.71%   +0.70%     
==========================================
  Files         153      153              
  Lines        9981    10037      +56     
==========================================
+ Hits         3394     3484      +90     
+ Misses       6208     6166      -42     
- Partials      379      387       +8     

Impacted Files	Coverage Δ
...g/apis/policy/v1alpha1/clusterimagepolicy_types.go	0.00% <ø> (ø)
...kg/apis/policy/v1beta1/clusterimagepolicy_types.go	0.00% <ø> (ø)
...is/policy/v1beta1/clusterimagepolicy_validation.go	93.06% <89.28%> (-0.78%)	⬇️
...s/policy/v1alpha1/clusterimagepolicy_validation.go	93.06% <89.65%> (-0.69%)	⬇️
pkg/apis/policy/v1beta1/zz_generated.deepcopy.go	8.36% <0.00%> (+8.36%)	⬆️
pkg/apis/policy/v1alpha1/zz_generated.deepcopy.go	8.36% <0.00%> (+8.36%)	⬆️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ae90c74...efc6da1. Read the comment docs.