Merge pull request #124917 from vinayakankugoyal/kep4633

KEP-4633: Only allow anonymous auth for configured endpoints.

Kubernetes-commit: 522e2e50667f25b759a10183eec1bb7d4683ec27

go.mod

@@ -9,10 +9,10 @@ require (
 	github.com/spf13/cobra v1.8.1
 	github.com/spf13/pflag v1.0.5
 	github.com/stretchr/testify v1.8.4
-	k8s.io/api v0.0.0-20240627222204-78bd910e12df
+	k8s.io/api v0.0.0-20240628022219-236105ace257
 	k8s.io/apimachinery v0.0.0-20240627221929-1dfa5d9369be
-	k8s.io/apiserver v0.0.0-20240627224253-972f7a599e3a
-	k8s.io/client-go v0.0.0-20240627222547-ef4b2f63d9a3
+	k8s.io/apiserver v0.0.0-20240628064309-9f17e821d77b
+	k8s.io/client-go v0.0.0-20240628062600-4b5beb66d4f2
 	k8s.io/component-base v0.0.0-20240627223522-ecc7c8d3530d
 	k8s.io/component-helpers v0.0.0-20240627223645-b908cc822b7d
 	k8s.io/controller-manager v0.0.0-20240627230732-b02d2e21e37c

go.sum

@@ -287,14 +287,14 @@ gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
 gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-k8s.io/api v0.0.0-20240627222204-78bd910e12df h1:55SZ65gFiqDiq30aVvLKI1Y5c/gn8E+gB0EYTX7A+4U=
-k8s.io/api v0.0.0-20240627222204-78bd910e12df/go.mod h1:0QPJgYT0HHTfhG4vPXwmQWIQES72tLiJH7hqx0MwCZM=
+k8s.io/api v0.0.0-20240628022219-236105ace257 h1:puFOIBc02LWUR4zXQa/XlZbJuLoaN510JI7XeWaInXI=
+k8s.io/api v0.0.0-20240628022219-236105ace257/go.mod h1:0QPJgYT0HHTfhG4vPXwmQWIQES72tLiJH7hqx0MwCZM=
 k8s.io/apimachinery v0.0.0-20240627221929-1dfa5d9369be h1:fM+zMY8GgcjMRZ1dmOdvumAPteKwaMr9+5a5+22A5+c=
 k8s.io/apimachinery v0.0.0-20240627221929-1dfa5d9369be/go.mod h1:WQ51EHETbbJacI2EJKk06Vn3lV4xjNFuF7DlOAW8Bhg=
-k8s.io/apiserver v0.0.0-20240627224253-972f7a599e3a h1:PYj5JaCRLQNkmMW7KScvJK5FGSU6NzZIiM007ORvdyo=
-k8s.io/apiserver v0.0.0-20240627224253-972f7a599e3a/go.mod h1:SnzcbpHqzPG0sJU49kWXskr/KOlcTbsn63IXTlmmvvM=
-k8s.io/client-go v0.0.0-20240627222547-ef4b2f63d9a3 h1:8EG99vlmbINbtj3QIUzfHMqaXZQy/LDgYqOq+oU895M=
-k8s.io/client-go v0.0.0-20240627222547-ef4b2f63d9a3/go.mod h1:Uy0ACWDv+YARHji/bhJK709kwpdffKD1zzfHPi84NW4=
+k8s.io/apiserver v0.0.0-20240628064309-9f17e821d77b h1:WFp1DvNXaT8BItTW+sj1xANEvLgm2Z+/Jj96KRBY64M=
+k8s.io/apiserver v0.0.0-20240628064309-9f17e821d77b/go.mod h1:RTVYLYh9AybW4J6J0mfc8ltCKiNDRjRNCXzatCfklX4=
+k8s.io/client-go v0.0.0-20240628062600-4b5beb66d4f2 h1:kksavJORRRTH5/0Hq8ujDwTq+pq18s36mrhRNJpbAcI=
+k8s.io/client-go v0.0.0-20240628062600-4b5beb66d4f2/go.mod h1:pEDhxQlVEzpYBGBhtMftaH3fuAa5oupO4e7vVa6fCF4=
 k8s.io/component-base v0.0.0-20240627223522-ecc7c8d3530d h1:a0ws/jxnzIZZU0FWteWi7YMBsBqqm2FaO5FxdRVcsgQ=
 k8s.io/component-base v0.0.0-20240627223522-ecc7c8d3530d/go.mod h1:iGg1jgHMFsStIKdEQsftL7hs5cwMeY/lz0XgFMprxNo=
 k8s.io/component-helpers v0.0.0-20240627223645-b908cc822b7d h1:AQidcy+rxdZdR3fIzR86hU/8N0czxy//qO99kmC/Og8=

options/options_test.go

@@ -26,6 +26,7 @@ import (
 	"github.com/google/go-cmp/cmp"
 	"github.com/spf13/pflag"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	apiserverapis "k8s.io/apiserver/pkg/apis/apiserver"
 	apiserver "k8s.io/apiserver/pkg/server"
 	apiserveroptions "k8s.io/apiserver/pkg/server/options"
 	appconfig "k8s.io/cloud-provider/app/config"
@@ -136,6 +137,7 @@ func TestDefaultFlags(t *testing.T) {
 				ExtraHeaderPrefixes: []string{"x-remote-extra-"},
 			},
 			RemoteKubeConfigFileOptional: true,
+			Anonymous:                    &apiserverapis.AnonymousAuthConfig{Enabled: true},
 		},
 		Authorization: &apiserveroptions.DelegatingAuthorizationOptions{
 			AllowCacheTTL:                10 * time.Second,
@@ -295,6 +297,7 @@ func TestAddFlags(t *testing.T) {
 				ExtraHeaderPrefixes: []string{"x-remote-extra-"},
 			},
 			RemoteKubeConfigFileOptional: true,
+			Anonymous:                    &apiserverapis.AnonymousAuthConfig{Enabled: true},
 		},
 		Authorization: &apiserveroptions.DelegatingAuthorizationOptions{
 			AllowCacheTTL:                10 * time.Second,