How to configure api-server ValidatingAdmissionWebhook plugin without kubeConfigFile?

Question

Currently, I\'m working on deploying open-policy-agent(opa) to k8s cluster, which is powered by gardener.

I need to authenticate & authorize API-server to run opa sec