Please move pkg/credentialprovider out of tree

[jonjohnsonjr]

What would you like to be added:

I would like to be able to import pkg/credentialprovider.

Why is this needed:

google/go-containerregistry#496

[jonjohnsonjr]

/sig auth
/sig release
/sig cloud-provider

cc @fejta @imjasonh @bobcatfish

[liggitt]

See also #74379

/area code-organization

[BenTheElder]

cc

[andrewsykim]

cc @mcrute @nckturner @M00nF1sh

[andrewsykim]

So @mcrute is doing some work on external credential providers kubernetes/enhancements#1284 -- but I wonder if it's worthwhile to stage pkg/credentalprovider in the meantime anyways? Are there enough external consumers of pkg/credentialprovider to justify this?

[jonjohnsonjr]

I wonder if it's worthwhile to stage pkg/credentalprovider in the meantime anyways?

I think it would be nice from an open source stewardship perspective. There's been a mechanism in go since 1.4 for making packages private that kubernetes doesn't use. Instead, kubernetes just intentionally breaks anyone who took a dependency on the "wrong" packages, which, IMHO, is pretty rude 😄

Are there enough external consumers of pkg/credentialprovider to justify this?

I get harassed about this pretty frequently, so I'd certainly appreciate it 😄 How many people would have to be affected by this to make it worth doing?

[andrewsykim]

/assign