Change:
<ins> rules: - selectorRegexp: k8s[.]io/kubernetes allowedPrefixes: - k8s.io/kubernetes/cmd/cloud-controller-manager/app - k8s.io/kubernetes/cmd/cloud-controller-manager/app/apis/config - k8s.io/kubernetes/cmd/cloud-controller-manager/app/apis/config/scheme - k8s.io/kubernetes/cmd/cloud-controller-manager/app/apis/config/v1alpha1 - k8s.io/kubernetes/cmd/cloud-controller-manager/app/config - k8s.io/kubernetes/cmd/cloud-controller-manager/app/options - k8s.io/kubernetes/cmd/controller-manager/app - k8s.io/kubernetes/cmd/controller-manager/app/options - k8s.io/kubernetes/pkg/api/legacyscheme - k8s.io/kubernetes/pkg/api/service - k8s.io/kubernetes/pkg/api/v1/pod - k8s.io/kubernetes/pkg/apis/apps - k8s.io/kubernetes/pkg/apis/autoscaling - k8s.io/kubernetes/pkg/apis/core - k8s.io/kubernetes/pkg/apis/core/helper - k8s.io/kubernetes/pkg/apis/core/install - k8s.io/kubernetes/pkg/apis/core/pods - k8s.io/kubernetes/pkg/apis/core/v1 - k8s.io/kubernetes/pkg/apis/core/v1/helper - k8s.io/kubernetes/pkg/apis/core/validation - k8s.io/kubernetes/pkg/apis/scheduling - k8s.io/kubernetes/pkg/capabilities - k8s.io/kubernetes/pkg/client/leaderelectionconfig - k8s.io/kubernetes/pkg/cloudprovider/providers - k8s.io/kubernetes/pkg/controller - k8s.io/kubernetes/pkg/controller/apis/config - k8s.io/kubernetes/pkg/controller/apis/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/certificates/signer/config - k8s.io/kubernetes/pkg/controller/certificates/signer/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/cloud - k8s.io/kubernetes/pkg/controller/daemon/config - k8s.io/kubernetes/pkg/controller/daemon/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/deployment/config - k8s.io/kubernetes/pkg/controller/deployment/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/endpoint/config - k8s.io/kubernetes/pkg/controller/endpoint/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/endpointslice/config - k8s.io/kubernetes/pkg/controller/endpointslice/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/garbagecollector/config - k8s.io/kubernetes/pkg/controller/garbagecollector/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/job/config - k8s.io/kubernetes/pkg/controller/job/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/namespace/config - k8s.io/kubernetes/pkg/controller/namespace/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/nodeipam/config - k8s.io/kubernetes/pkg/controller/nodeipam/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/nodelifecycle/config - k8s.io/kubernetes/pkg/controller/nodelifecycle/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/podautoscaler/config - k8s.io/kubernetes/pkg/controller/podautoscaler/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/podgc/config - k8s.io/kubernetes/pkg/controller/podgc/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/replicaset/config - k8s.io/kubernetes/pkg/controller/replicaset/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/replication/config - k8s.io/kubernetes/pkg/controller/replication/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/resourcequota/config - k8s.io/kubernetes/pkg/controller/resourcequota/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/route - k8s.io/kubernetes/pkg/controller/service - k8s.io/kubernetes/pkg/controller/service/config - k8s.io/kubernetes/pkg/controller/service/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/serviceaccount/config - k8s.io/kubernetes/pkg/controller/serviceaccount/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/statefulset/config - k8s.io/kubernetes/pkg/controller/statefulset/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/testutil - k8s.io/kubernetes/pkg/controller/ttlafterfinished/config - k8s.io/kubernetes/pkg/controller/ttlafterfinished/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/volume/attachdetach/config - k8s.io/kubernetes/pkg/controller/volume/attachdetach/config/v1alpha1 - k8s.io/kubernetes/pkg/controller/volume/persistentvolume/config - k8s.io/kubernetes/pkg/controller/volume/persistentvolume/config/v1alpha1 - k8s.io/kubernetes/pkg/features - k8s.io/kubernetes/pkg/fieldpath - k8s.io/kubernetes/pkg/kubelet/types - k8s.io/kubernetes/pkg/master/ports - k8s.io/kubernetes/pkg/security/apparmor - k8s.io/kubernetes/pkg/securitycontext - k8s.io/kubernetes/pkg/serviceaccount - k8s.io/kubernetes/pkg/util/configz - k8s.io/kubernetes/pkg/util/hash - k8s.io/kubernetes/pkg/util/node - k8s.io/kubernetes/pkg/util/parsers - k8s.io/kubernetes/pkg/util/taints </ins>

Discussion:
What would you like to be : Add a .import-restrictions file to cmd/cloud-controller-manager to prevent new imports to Why is this needed: As part of and the effort to remove cloud providers, we are moving cmd/cloud-controller-manager to staging (under ) so that external cloud providers don't have to vendor One of the perquisites to move cmd/cloud-controller-manager to staging is that it should not import anything else from An import-restrictions file would help ensure no new imports to are .
/sig cloud-provider
cc
/assign