[release-3.6] Reject the client request if the client certificate has been revoked

[ahrtr]

Backport #22007 and #22023 to 3.6

[ahrtr]

cc @fuweid @ivanvc @serathius

[ahrtr]

/test pull-etcd-integration-1-cpu-arm64

[codecov]

Codecov Report

❌ Patch coverage is 0% with 2 lines in your changes missing coverage. Please review.
✅ Project coverage is 68.75%. Comparing base (1663b36) to head (8221ae8).

Files with missing lines	Patch %	Lines
server/embed/serve.go	0.00%	1 Missing and 1 partial ⚠️

Additional details and impacted files

Files with missing lines	Coverage Δ
server/embed/serve.go	58.98% <0.00%> (-0.41%)	⬇️

... and 31 files with indirect coverage changes

@@               Coverage Diff               @@
##           release-3.6   #22025      +/-   ##
===============================================
- Coverage        68.87%   68.75%   -0.13%     
===============================================
  Files              420      418       -2     
  Lines            35873    35826      -47     
===============================================
- Hits             24708    24632      -76     
- Misses            9715     9758      +43     
+ Partials          1450     1436      -14     

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 1663b36...8221ae8. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[kubernetes-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ahrtr, fuweid

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [ahrtr]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment