Repository: kubernetes-sigs/cloud-provider-azure
Pull request #4180 (2023-06-27 14:05:58)

track2 sdk: add config loader
<!--  Thanks for sending a pull request!  Here are some tips for you:

1. If this is your first time, please read our contributor guidelines: https://git.k8s.io/community/contributors/guide/first-contribution.md#your-first-contribution and developer guide https://git.k8s.io/community/contributors/devel/development.md#development-guide
2. Please label this pull request according to what type of issue you are addressing, especially if this is a release targeted pull request. For reference on required PR/issue labels, read here:
https://git.k8s.io/community/contributors/devel/sig-release/release.md#issuepr-kind-label
3. Ensure you have added or ran the appropriate tests for your PR: https://git.k8s.io/community/contributors/devel/sig-testing/testing.md
4. If you want *faster* PR reviews, read how: https://git.k8s.io/community/contributors/guide/pull-requests.md#best-practices-for-faster-reviews
5. If the PR is unfinished, see how to mark it: https://git.k8s.io/community/contributors/guide/pull-requests.md#marking-unfinished-pull-requests
-->

#### What type of PR is this?
/kind feature

<!--
Add one of the following kinds:
/kind bug
/kind cleanup
/kind documentation
/kind feature
/kind design

Optionally add one or more of the following kinds if applicable:
/kind api-change
/kind deprecation
/kind failing-test
/kind flake
/kind regression
-->

#### What this PR does / why we need it:
add config loader for client factory

the config is loaded from file/k8s secret

#### Which issue(s) this PR fixes:
<!--
*Automatically closes linked issue when PR is merged.
Usage: `Fixes #<issue number>`, or `Fixes (paste link of issue)`.
_If PR is about `failing-tests or flakes`, please post the related issues/tests in a comment and do not use `Fixes`_*
-->
Fixes #

#### Special notes for your reviewer:
secret data is base64 decoded which is different from the impl in cloud provider


#### Does this PR introduce a user-facing change?
<!--
If no, just write "NONE" in the release-note block below.
If yes, a release note is required:
Enter your extended release note in the block below. If the PR requires additional action from users switching to the new release, include the string "action required".

For more information on release notes see: https://git.k8s.io/community/contributors/guide/release-notes.md
-->
```release-note
NONE
```

#### Additional documentation e.g., KEPs (Kubernetes Enhancement Proposals), usage docs, etc.:

<!--
This section can be blank if this pull request does not require a release note.

When adding links which point to resources within git repositories, like
KEPs or supporting documentation, please reference a specific commit and avoid
linking directly to the master branch. This ensures that links reference a
specific point in time, rather than a document that may change over time.

See here for guidance on getting permanent links to files: https://help.github.com/en/articles/getting-permanent-links-to-files

Please use the following format for linking documentation:
- [KEP]: <link>
- [Usage]: <link>
- [Other doc]: <link>
-->
```docs

```


k8s-ci-robot: [APPROVALNOTIFIER] This PR is **APPROVED**

This pull-request has been approved by: *<a href="https://github.com/kubernetes-sigs/cloud-provider-azure/pull/4180#" title="Author self-approved">MartinForReal</a>*

The full list of commands accepted by this bot can be found [here](https://go.k8s.io/bot-commands?repo=kubernetes-sigs%2Fcloud-provider-azure).

The pull request process is described [here](https://git.k8s.io/community/contributors/guide/owners.md#the-code-review-process)

<details >
Needs approval from an approver in each of these files:

- ~~[OWNERS](https://github.com/kubernetes-sigs/cloud-provider-azure/blob/master/OWNERS)~~ [MartinForReal]

Approvers can indicate their approval by writing `/approve` in a comment
Approvers can cancel approval by writing `/approve cancel` in a comment
</details>
<!-- META={"approvers":[]} -->
k8s-ci-robot: @MartinForReal: The following test **failed**, say `/retest` to rerun all failed tests or `/retest-required` to rerun all mandatory failed tests:

Test name | Commit | Details | Required | Rerun command
--- | --- | --- | --- | ---
pull-cloud-provider-azure-check | 8f43593ac8665d0f6d575ce03339e46d6ff21c57 | [link](https://prow.k8s.io/view/gs/kubernetes-jenkins/pr-logs/pull/kubernetes-sigs_cloud-provider-azure/4180/pull-cloud-provider-azure-check/1673694183879086080) | true | `/test pull-cloud-provider-azure-check`

[Full PR test history](https://prow.k8s.io/pr-history?org=kubernetes-sigs&repo=cloud-provider-azure&pr=4180). [Your PR dashboard](https://prow.k8s.io/pr?query=is%3Apr%20state%3Aopen%20author%3AMartinForReal). Please help us cut down on flakes by [linking to](https://git.k8s.io/community/contributors/devel/sig-testing/flaky-tests.md#filing-issues-for-flaky-tests) an [open issue](https://github.com/kubernetes-sigs/cloud-provider-azure/issues?q=is:issue+is:open) when you hit one in your PR.

<details>

Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md).  If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository. I understand the commands that are listed [here](https://go.k8s.io/bot-commands).
</details>
<!-- test report -->
coveralls: 
[![Coverage Status](https://coveralls.io/builds/60990741/badge)](https://coveralls.io/builds/60990741)

coverage: 79.929%. remained the same when pulling **4af868ac35e3b9e6c15d92c68af202dd30be8060 on MartinForReal:shafan/azclientsecret** into **a2175a4e02f9cfc141cec6984fe818751c220f57 on kubernetes-sigs:master**.

k8s-ci-robot: @MartinForReal: The following test **failed**, say `/retest` to rerun all failed tests or `/retest-required` to rerun all mandatory failed tests:

Test name | Commit | Details | Required | Rerun command
--- | --- | --- | --- | ---
pull-cloud-provider-azure-check | 3d0c5d84d25f4724311e38aee5c1dc9ffe4b495c | [link](https://prow.k8s.io/view/gs/kubernetes-jenkins/pr-logs/pull/kubernetes-sigs_cloud-provider-azure/4180/pull-cloud-provider-azure-check/1673991305757200384) | true | `/test pull-cloud-provider-azure-check`

[Full PR test history](https://prow.k8s.io/pr-history?org=kubernetes-sigs&repo=cloud-provider-azure&pr=4180). [Your PR dashboard](https://prow.k8s.io/pr?query=is%3Apr%20state%3Aopen%20author%3AMartinForReal). Please help us cut down on flakes by [linking to](https://git.k8s.io/community/contributors/devel/sig-testing/flaky-tests.md#filing-issues-for-flaky-tests) an [open issue](https://github.com/kubernetes-sigs/cloud-provider-azure/issues?q=is:issue+is:open) when you hit one in your PR.

<details>

Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md).  If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository. I understand the commands that are listed [here](https://go.k8s.io/bot-commands).
</details>
<!-- test report -->
k8s-ci-robot: @MartinForReal: The following test **failed**, say `/retest` to rerun all failed tests or `/retest-required` to rerun all mandatory failed tests:

Test name | Commit | Details | Required | Rerun command
--- | --- | --- | --- | ---
pull-cloud-provider-azure-check | 90d77dfb5eef38365a774f33d81f49fa21bc11d7 | [link](https://prow.k8s.io/view/gs/kubernetes-jenkins/pr-logs/pull/kubernetes-sigs_cloud-provider-azure/4180/pull-cloud-provider-azure-check/1673991871916937216) | true | `/test pull-cloud-provider-azure-check`

[Full PR test history](https://prow.k8s.io/pr-history?org=kubernetes-sigs&repo=cloud-provider-azure&pr=4180). [Your PR dashboard](https://prow.k8s.io/pr?query=is%3Apr%20state%3Aopen%20author%3AMartinForReal). Please help us cut down on flakes by [linking to](https://git.k8s.io/community/contributors/devel/sig-testing/flaky-tests.md#filing-issues-for-flaky-tests) an [open issue](https://github.com/kubernetes-sigs/cloud-provider-azure/issues?q=is:issue+is:open) when you hit one in your PR.

<details>

Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md).  If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository. I understand the commands that are listed [here](https://go.k8s.io/bot-commands).
</details>
<!-- test report -->
k8s-ci-robot: @MartinForReal: The following test **failed**, say `/retest` to rerun all failed tests or `/retest-required` to rerun all mandatory failed tests:

Test name | Commit | Details | Required | Rerun command
--- | --- | --- | --- | ---
pull-cloud-provider-azure-check | 5c1e1e9a348e67977ea8b40f106c9ca3e11204e1 | [link](https://prow.k8s.io/view/gs/kubernetes-jenkins/pr-logs/pull/kubernetes-sigs_cloud-provider-azure/4180/pull-cloud-provider-azure-check/1674020829635022848) | true | `/test pull-cloud-provider-azure-check`

[Full PR test history](https://prow.k8s.io/pr-history?org=kubernetes-sigs&repo=cloud-provider-azure&pr=4180). [Your PR dashboard](https://prow.k8s.io/pr?query=is%3Apr%20state%3Aopen%20author%3AMartinForReal). Please help us cut down on flakes by [linking to](https://git.k8s.io/community/contributors/devel/sig-testing/flaky-tests.md#filing-issues-for-flaky-tests) an [open issue](https://github.com/kubernetes-sigs/cloud-provider-azure/issues?q=is:issue+is:open) when you hit one in your PR.

<details>

Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md).  If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes/test-infra](https://github.com/kubernetes/test-infra/issues/new?title=Prow%20issue:) repository. I understand the commands that are listed [here](https://go.k8s.io/bot-commands).
</details>
<!-- test report -->

Patch:
diff --git a/go.mod b/go.mod
index 19caa180a..c26635920 100644
--- a/go.mod
+++ b/go.mod
@@ -14,7 +14,7 @@ require (
 	github.com/fsnotify/fsnotify v1.6.0
 	github.com/go-logr/logr v1.2.4
 	github.com/golang/mock v1.6.0
-	github.com/onsi/ginkgo/v2 v2.11.0
+	github.com/onsi/ginkgo/v2 v2.10.0
 	github.com/onsi/gomega v1.27.8
 	github.com/spf13/cobra v1.7.0
 	github.com/spf13/pflag v1.0.5
diff --git a/go.sum b/go.sum
index 70317a3d6..2bb35b680 100644
--- a/go.sum
+++ b/go.sum
@@ -336,8 +336,8 @@ github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8m
 github.com/mwitkow/go-conntrack v0.0.0-20161129095857-cc309e4a2223/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
 github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f/go.mod h1:qRWi+5nqEBWmkhHvq77mSJWrCKwh8bxhgT7d/eI7P4U=
 github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f/go.mod h1:ZdcZmHo+o7JKHSa8/e818NopupXU1YMK5fe1lsApnBw=
-github.com/onsi/ginkgo/v2 v2.11.0 h1:WgqUCUt/lT6yXoQ8Wef0fsNn5cAuMK7+KT9UFRz2tcU=
-github.com/onsi/ginkgo/v2 v2.11.0/go.mod h1:ZhrRA5XmEE3x3rhlzamx/JJvujdZoJ2uvgI7kR0iZvM=
+github.com/onsi/ginkgo/v2 v2.10.0 h1:sfUl4qgLdvkChZrWCYndY2EAu9BRIw1YphNAzy1VNWs=
+github.com/onsi/ginkgo/v2 v2.10.0/go.mod h1:UDQOh5wbQUlMnkLfVaIUMtQ1Vus92oM+P2JX1aulgcE=
 github.com/onsi/gomega v1.27.8 h1:gegWiwZjBsf2DgiSbf5hpokZ98JVDMcWkUiigk6/KXc=
 github.com/onsi/gomega v1.27.8/go.mod h1:2J8vzI/s+2shY9XHRApDkdgPo1TKT7P2u6fXeJKFnNQ=
 github.com/peterbourgon/diskv v2.0.1+incompatible/go.mod h1:uqqh8zWWbv1HBMNONnaR/tNboyR3/BZd58JJSHlUSCU=
diff --git a/pkg/azclient/client-gen/generator/codegenerator.go b/pkg/azclient/client-gen/generator/codegenerator.go
index f3a467a43..902266bc6 100644
--- a/pkg/azclient/client-gen/generator/codegenerator.go
+++ b/pkg/azclient/client-gen/generator/codegenerator.go
@@ -117,7 +117,7 @@ func (g Generator) Generate(ctx *genall.GenerationContext) error {
 		})
 		if err != nil {
 			root.AddError(err)
-			break
+			return err
 		}
 	}
 
diff --git a/pkg/azclient/client-gen/generator/genclientfactory_action.go b/pkg/azclient/client-gen/generator/genclientfactory_action.go
index 1863b92ee..a36169836 100644
--- a/pkg/azclient/client-gen/generator/genclientfactory_action.go
+++ b/pkg/azclient/client-gen/generator/genclientfactory_action.go
@@ -144,7 +144,7 @@ type ClientFactoryImpl struct {
 	{{end -}}
 }
 
-func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential) (ClientFactory,error) {
+func NewClientFactory(config *ClientFactoryConfig, armConfig *ARMClientConfig, cred azcore.TokenCredential) (ClientFactory,error) {
 	if config == nil {
 		config = &ClientFactoryConfig{}
 	}
@@ -157,7 +157,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 
 	{{ $rateLimitPolicyNotDefined := true -}}
 	{{range $key, $client := . }}
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {{$client}}
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -176,7 +177,7 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 	if err != nil {
 		return nil, err
 	}
-	{{end -}}
+	{{end}}
 	return &ClientFactoryImpl{
 		ClientFactoryConfig: config,
 		cred:                cred,
diff --git a/pkg/azclient/readme.md b/pkg/azclient/client-gen/readme.md
similarity index 100%
rename from pkg/azclient/readme.md
rename to pkg/azclient/client-gen/readme.md
diff --git a/pkg/azclient/configloader/config_loader.go b/pkg/azclient/configloader/config_loader.go
new file mode 100644
index 000000000..75be4a7e0
--- /dev/null
+++ b/pkg/azclient/configloader/config_loader.go
@@ -0,0 +1,30 @@
+/*
+Copyright 2023 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package configloader
+
+import (
+	"context"
+
+	"sigs.k8s.io/cloud-provider-azure/pkg/azclient"
+)
+
+type ConfigLoader[Type any] interface {
+	Load(ctx context.Context) (*Type, error)
+}
+
+type FactoryConfigLoader ConfigLoader[azclient.ClientFactoryConfig]
+type AuthConfigLoader ConfigLoader[azclient.AzureAuthConfig]
diff --git a/pkg/azclient/configloader/go.mod b/pkg/azclient/configloader/go.mod
new file mode 100644
index 000000000..afdf37aad
--- /dev/null
+++ b/pkg/azclient/configloader/go.mod
@@ -0,0 +1,76 @@
+module sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader
+
+go 1.20
+
+require (
+	github.com/golang/mock v1.6.0
+	github.com/onsi/ginkgo/v2 v2.11.0
+	github.com/onsi/gomega v1.27.8
+	k8s.io/api v0.27.3
+	k8s.io/apimachinery v0.27.3
+	k8s.io/client-go v0.27.3
+	sigs.k8s.io/cloud-provider-azure/pkg/azclient v0.0.0
+	sigs.k8s.io/yaml v1.3.0
+)
+
+require (
+	github.com/Azure/azure-sdk-for-go/sdk/azcore v1.6.1 // indirect
+	github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.3.0 // indirect
+	github.com/Azure/azure-sdk-for-go/sdk/internal v1.3.0 // indirect
+	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.0.0 // indirect
+	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v4 v4.0.0 // indirect
+	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v3 v3.0.0 // indirect
+	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/privatedns/armprivatedns v1.1.0 // indirect
+	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.1.1 // indirect
+	github.com/Azure/go-armbalancer v0.0.2 // indirect
+	github.com/AzureAD/microsoft-authentication-library-for-go v1.0.0 // indirect
+	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/emicklei/go-restful/v3 v3.10.2 // indirect
+	github.com/evanphx/json-patch v4.12.0+incompatible // indirect
+	github.com/go-logr/logr v1.2.4 // indirect
+	github.com/go-logr/stdr v1.2.2 // indirect
+	github.com/go-openapi/jsonpointer v0.19.6 // indirect
+	github.com/go-openapi/jsonreference v0.20.2 // indirect
+	github.com/go-openapi/swag v0.22.4 // indirect
+	github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572 // indirect
+	github.com/gogo/protobuf v1.3.2 // indirect
+	github.com/golang-jwt/jwt/v4 v4.5.0 // indirect
+	github.com/golang/protobuf v1.5.3 // indirect
+	github.com/google/gnostic v0.6.9 // indirect
+	github.com/google/go-cmp v0.5.9 // indirect
+	github.com/google/gofuzz v1.2.0 // indirect
+	github.com/google/pprof v0.0.0-20230602010524-ada837c32108 // indirect
+	github.com/google/uuid v1.3.0 // indirect
+	github.com/josharian/intern v1.0.0 // indirect
+	github.com/json-iterator/go v1.1.12 // indirect
+	github.com/kylelemons/godebug v1.1.0 // indirect
+	github.com/mailru/easyjson v0.7.7 // indirect
+	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
+	github.com/modern-go/reflect2 v1.0.2 // indirect
+	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
+	github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 // indirect
+	github.com/pkg/errors v0.9.1 // indirect
+	go.opentelemetry.io/otel v1.16.0 // indirect
+	go.opentelemetry.io/otel/metric v1.16.0 // indirect
+	go.opentelemetry.io/otel/trace v1.16.0 // indirect
+	golang.org/x/crypto v0.10.0 // indirect
+	golang.org/x/net v0.11.0 // indirect
+	golang.org/x/oauth2 v0.9.0 // indirect
+	golang.org/x/sys v0.9.0 // indirect
+	golang.org/x/term v0.9.0 // indirect
+	golang.org/x/text v0.10.0 // indirect
+	golang.org/x/time v0.3.0 // indirect
+	golang.org/x/tools v0.9.3 // indirect
+	google.golang.org/appengine v1.6.7 // indirect
+	google.golang.org/protobuf v1.31.0 // indirect
+	gopkg.in/inf.v0 v0.9.1 // indirect
+	gopkg.in/yaml.v2 v2.4.0 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
+	k8s.io/klog/v2 v2.100.1 // indirect
+	k8s.io/kube-openapi v0.0.0-20230501164219-8b0f38b5fd1f // indirect
+	k8s.io/utils v0.0.0-20230505201702-9f6742963106 // indirect
+	sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
+	sigs.k8s.io/structured-merge-diff/v4 v4.2.3 // indirect
+)
+
+replace sigs.k8s.io/cloud-provider-azure/pkg/azclient => ../
diff --git a/pkg/azclient/configloader/go.sum b/pkg/azclient/configloader/go.sum
new file mode 100644
index 000000000..8751a5bd1
--- /dev/null
+++ b/pkg/azclient/configloader/go.sum
@@ -0,0 +1,317 @@
+cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
+cloud.google.com/go v0.34.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
+github.com/Azure/azure-sdk-for-go/sdk/azcore v1.6.1 h1:SEy2xmstIphdPwNBUi7uhvjyjhVKISfwjfOJmuy7kg4=
+github.com/Azure/azure-sdk-for-go/sdk/azcore v1.6.1/go.mod h1:bjGvMhVMb+EEm3VRNQawDMUyMMjo+S5ewNjflkep/0Q=
+github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.3.0 h1:vcYCAze6p19qBW7MhZybIsqD8sMV8js0NyQM8JDnVtg=
+github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.3.0/go.mod h1:OQeznEEkTZ9OrhHJoDD8ZDq51FHgXjqtP9z6bEwBq9U=
+github.com/Azure/azure-sdk-for-go/sdk/internal v1.3.0 h1:sXr+ck84g/ZlZUOZiNELInmMgOsuGwdjjVkEIde0OtY=
+github.com/Azure/azure-sdk-for-go/sdk/internal v1.3.0/go.mod h1:okt5dMMTOFjX/aovMlrjvvXoPMBVSPzk9185BT0+eZM=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.0.0 h1:zpMyM8MoI8ZR/KNcfTothBjV5oTm6QVpuPwz/9TXQ1Q=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.0.0/go.mod h1:mXdzU0jht34j8BVO6q+sns1M1CYmHdq1AA9mRHeFvv0=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v4 v4.0.0 h1:PcCx8mii9UPb0ztRpw8JF4/pKEfxXeXtL1GETENP4pU=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/containerservice/armcontainerservice/v4 v4.0.0/go.mod h1:FoPQz7wDNpmE619+efw24epeh69HYI6c3jbwz8jgPMw=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal v1.1.2 h1:mLY+pNLjCUeKhgnAJWAKhEUQM+RJQo2H1fuGSw1Ky1E=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/managementgroups/armmanagementgroups v1.0.0 h1:pPvTJ1dY0sA35JOeFq6TsY2xj6Z85Yo23Pj4wCCvu4o=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v3 v3.0.0 h1:C4GK2KFbzM07iThUKZccqt3kB6MpT9mHAw147uSlOYE=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v3 v3.0.0/go.mod h1:npZqEMqFcvlOus6RnbX4vH2Wr/noDYsp/oCdX/4bWso=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/privatedns/armprivatedns v1.1.0 h1:rR8ZW79lE/ppfXTfiYSnMFv5EzmVuY4pfZWIkscIJ64=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/privatedns/armprivatedns v1.1.0/go.mod h1:y2zXtLSMM/X5Mfawq0lOftpWn3f4V6OCsRdINsvWBPI=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.1.1 h1:7CBQ+Ei8SP2c6ydQTGCCrS35bDxgTMfoP2miAwK++OU=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.1.1/go.mod h1:c/wcGeGx5FUPbM/JltUYHZcKmigwyVLJlDq+4HdtXaw=
+github.com/Azure/go-armbalancer v0.0.2 h1:NVnxsTWHI5/fEzL6k6TjxPUfcB/3Si3+HFOZXOu0QtA=
+github.com/Azure/go-armbalancer v0.0.2/go.mod h1:yTg7MA/8YnfKQc9o97tzAJ7fbdVkod1xGsIvKmhYPRE=
+github.com/AzureAD/microsoft-authentication-library-for-go v1.0.0 h1:OBhqkivkhkMqLPymWEppkm7vgPQY2XsHoEkaMQ0AdZY=
+github.com/AzureAD/microsoft-authentication-library-for-go v1.0.0/go.mod h1:kgDmCTgBzIEPFElEF+FK0SdjAor06dRq2Go927dnQ6o=
+github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
+github.com/OneOfOne/xxhash v1.2.2/go.mod h1:HSdplMjZKSmBqAxg5vPj2TmRDmfkzw+cTzAElWljhcU=
+github.com/antihax/optional v1.0.0/go.mod h1:uupD/76wgC+ih3iEmQUL+0Ugr19nfwCT1kdvxnR2qWY=
+github.com/buger/jsonparser v1.1.1/go.mod h1:6RYKKt7H4d4+iWqouImQ9R2FZql3VbhNgx27UK13J/0=
+github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
+github.com/cespare/xxhash v1.1.0/go.mod h1:XrSqR1VqqWfGrhpAt58auRo0WTKS1nRRg3ghfAqPWnc=
+github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
+github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
+github.com/cncf/udpa/go v0.0.0-20201120205902-5459f2c99403/go.mod h1:WmhPx2Nbnhtbo57+VJT5O0JRkEi1Wbu0z5j0R8u5Hbk=
+github.com/cncf/xds/go v0.0.0-20210312221358-fbca930ec8ed/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs=
+github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/dnaeon/go-vcr v1.2.0 h1:zHCHvJYTMh1N7xnV7zf1m1GPBF9Ad0Jk/whtQ1663qI=
+github.com/docopt/docopt-go v0.0.0-20180111231733-ee0de3bc6815/go.mod h1:WwZ+bS3ebgob9U8Nd0kOddGdZWjyMGR8Wziv+TBNwSE=
+github.com/emicklei/go-restful/v3 v3.10.2 h1:hIovbnmBTLjHXkqEBUz3HGpXZdM7ZrE9fJIZIqlJLqE=
+github.com/emicklei/go-restful/v3 v3.10.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
+github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
+github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
+github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98=
+github.com/envoyproxy/go-control-plane v0.9.9-0.20201210154907-fd9021fe5dad/go.mod h1:cXg6YxExXjJnVBQHBLXeUAgxn2UodCpnH306RInaBQk=
+github.com/envoyproxy/go-control-plane v0.9.9-0.20210512163311-63b5d3c536b0/go.mod h1:hliV/p42l8fGbc6Y9bQ70uLwIvmJyVE5k4iMKlh8wCQ=
+github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
+github.com/evanphx/json-patch v4.12.0+incompatible h1:4onqiflcdA9EOZ4RxV643DvftH5pOlLGNtQ5lPWQu84=
+github.com/evanphx/json-patch v4.12.0+incompatible/go.mod h1:50XU6AFN0ol/bzJsmQLiYLvXMP4fmwYFNcr97nuDLSk=
+github.com/flowstack/go-jsonschema v0.1.1/go.mod h1:yL7fNggx1o8rm9RlgXv7hTBWxdBM0rVwpMwimd3F3N0=
+github.com/ghodss/yaml v1.0.0/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeMEF04=
+github.com/go-logr/logr v1.2.0/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
+github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
+github.com/go-logr/logr v1.2.4 h1:g01GSCwiDw2xSZfjJ2/T9M+S6pFdcNtFYsp+Y43HYDQ=
+github.com/go-logr/logr v1.2.4/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
+github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
+github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
+github.com/go-openapi/jsonpointer v0.19.6 h1:eCs3fxoIi3Wh6vtgmLTOjdhSpiqphQ+DaPn38N2ZdrE=
+github.com/go-openapi/jsonpointer v0.19.6/go.mod h1:osyAmYz/mB/C3I+WsTTSgw1ONzaLJoLCyoi6/zppojs=
+github.com/go-openapi/jsonreference v0.20.2 h1:3sVjiK66+uXK/6oQ8xgcRKcFgQ5KXa2KvnJRumpMGbE=
+github.com/go-openapi/jsonreference v0.20.2/go.mod h1:Bl1zwGIM8/wsvqjsOQLJ/SH+En5Ap4rVB5KVcIDZG2k=
+github.com/go-openapi/swag v0.22.3/go.mod h1:UzaqsxGiab7freDnrUUra0MwWfN/q7tE4j+VcZ0yl14=
+github.com/go-openapi/swag v0.22.4 h1:QLMzNJnMGPRNDCbySlcj1x01tzU8/9LTTL9hZZZogBU=
+github.com/go-openapi/swag v0.22.4/go.mod h1:UzaqsxGiab7freDnrUUra0MwWfN/q7tE4j+VcZ0yl14=
+github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572 h1:tfuBGBXKqDEevZMzYi5KSi8KkcZtzBcTgAUUtapy0OI=
+github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572/go.mod h1:9Pwr4B2jHnOSGXyyzV8ROjYa2ojvAY6HCGYYfMoC3Ls=
+github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
+github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
+github.com/golang-jwt/jwt/v4 v4.5.0 h1:7cYmW1XlMY7h7ii7UhUyChSgS5wUJEnm9uZVTGqOWzg=
+github.com/golang-jwt/jwt/v4 v4.5.0/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
+github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
+github.com/golang/mock v1.1.1/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
+github.com/golang/mock v1.6.0 h1:ErTB+efbowRARo13NNdxyJji2egdxLGQhRaY+DUumQc=
+github.com/golang/mock v1.6.0/go.mod h1:p6yTPP+5HYm5mzsMV8JkE6ZKdX+/wYM6Hr+LicevLPs=
+github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
+github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
+github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
+github.com/golang/protobuf v1.3.3/go.mod h1:vzj43D7+SQXF/4pzW/hwtAqwc6iTitCiVSaWz5lYuqw=
+github.com/golang/protobuf v1.4.0-rc.1/go.mod h1:ceaxUfeHdC40wWswd/P6IGgMaK3YpKi5j83Wpe3EHw8=
+github.com/golang/protobuf v1.4.0-rc.1.0.20200221234624-67d41d38c208/go.mod h1:xKAWHe0F5eneWXFV3EuXVDTCmh+JuBKY0li0aMyXATA=
+github.com/golang/protobuf v1.4.0-rc.2/go.mod h1:LlEzMj4AhA7rCAGe4KMBDvJI+AwstrUpVNzEA03Pprs=
+github.com/golang/protobuf v1.4.0-rc.4.0.20200313231945-b860323f09d0/go.mod h1:WU3c8KckQ9AFe+yFwt9sWVRKCVIyN9cPHBJSNnbL67w=
+github.com/golang/protobuf v1.4.0/go.mod h1:jodUvKwWbYaEsadDk5Fwe5c77LiNKVO9IDvqG2KuDX0=
+github.com/golang/protobuf v1.4.1/go.mod h1:U8fpvMrcmy5pZrNK1lt4xCsGvpyWQ/VVv6QDs8UjoX8=
+github.com/golang/protobuf v1.4.2/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI=
+github.com/golang/protobuf v1.4.3/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI=
+github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk=
+github.com/golang/protobuf v1.5.2/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
+github.com/golang/protobuf v1.5.3 h1:KhyjKVUg7Usr/dYsdSqoFveMYd5ko72D+zANwlG1mmg=
+github.com/golang/protobuf v1.5.3/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY=
+github.com/google/gnostic v0.6.9 h1:ZK/5VhkoX835RikCHpSUJV9a+S3e1zLh59YnyWeBW+0=
+github.com/google/gnostic v0.6.9/go.mod h1:Nm8234We1lq6iB9OmlgNv3nH91XLLVZHCDayfA3xq+E=
+github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
+github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
+github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
+github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.5.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.5.9 h1:O2Tfq5qg4qc4AmwVlvv0oLiVAGB7enBSJ2x2DqQFi38=
+github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
+github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/google/gofuzz v1.2.0 h1:xRy4A+RhZaiKjJ1bPfwQ8sedCA+YS2YcCHW6ec7JMi0=
+github.com/google/gofuzz v1.2.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/google/pprof v0.0.0-20230602010524-ada837c32108 h1:y+JfwMOPwQwIrnh3TUPwwtOAhONoppkHiSa4sQBoK2k=
+github.com/google/pprof v0.0.0-20230602010524-ada837c32108/go.mod h1:Jh3hGz2jkYak8qXPD19ryItVnUgpgeqzdkY/D0EaeuA=
+github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/google/uuid v1.3.0 h1:t6JiXgmwXMjEs8VusXIJk2BXHsn+wx8BZdTaoZ5fu7I=
+github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/grpc-ecosystem/grpc-gateway v1.16.0/go.mod h1:BDjrQk3hbvj6Nolgz8mAMFbcEtjT1g+wF4CSlocrBnw=
+github.com/josharian/intern v1.0.0 h1:vlS4z54oSdjm0bgjRigI+G1HpF+tI+9rE5LLzOg8HmY=
+github.com/josharian/intern v1.0.0/go.mod h1:5DoeVV0s6jJacbCEi61lwdGj/aVlrQvzHFFd8Hwg//Y=
+github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
+github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
+github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
+github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
+github.com/kr/pretty v0.2.0/go.mod h1:ipq/a2n7PKx3OHsz4KJII5eveXtPO4qwEXGdVfWzfnI=
+github.com/kr/pretty v0.2.1/go.mod h1:ipq/a2n7PKx3OHsz4KJII5eveXtPO4qwEXGdVfWzfnI=
+github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
+github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
+github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
+github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
+github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
+github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc=
+github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw=
+github.com/mailru/easyjson v0.7.7 h1:UGYAvKxe3sBsEDzO8ZeWOSlIQfWFlxbzLZe7hwFURr0=
+github.com/mailru/easyjson v0.7.7/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc=
+github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
+github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
+github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 h1:C3w9PqII01/Oq1c1nUAm88MOHcQC9l5mIlSMApZMrHA=
+github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822/go.mod h1:+n7T8mK8HuQTcFwEeznm/DIxMOiR9yIdICNftLE1DvQ=
+github.com/onsi/ginkgo/v2 v2.11.0 h1:WgqUCUt/lT6yXoQ8Wef0fsNn5cAuMK7+KT9UFRz2tcU=
+github.com/onsi/ginkgo/v2 v2.11.0/go.mod h1:ZhrRA5XmEE3x3rhlzamx/JJvujdZoJ2uvgI7kR0iZvM=
+github.com/onsi/gomega v1.27.8 h1:gegWiwZjBsf2DgiSbf5hpokZ98JVDMcWkUiigk6/KXc=
+github.com/onsi/gomega v1.27.8/go.mod h1:2J8vzI/s+2shY9XHRApDkdgPo1TKT7P2u6fXeJKFnNQ=
+github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 h1:KoWmjvw+nsYOo29YJK9vDA65RGE3NrOnUtO7a+RF9HU=
+github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8/go.mod h1:HKlIX3XHQyzLZPlr7++PzdhaXEj94dEiJgZDTsxEqUI=
+github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
+github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
+github.com/rogpeppe/fastuuid v1.2.0/go.mod h1:jVj6XXZzXRy/MSR5jhDC/2q6DgLz+nrA6LYCDYWNEvQ=
+github.com/rogpeppe/go-internal v1.10.0 h1:TMyTOH3F/DB16zRVcYyreMH6GnZZrwQVAoYjRBZyWFQ=
+github.com/spaolacci/murmur3 v0.0.0-20180118202830-f09979ecbc72/go.mod h1:JwIasOWyU6f++ZhiEuf87xNszmSA2myDM2Kzu9HwQUA=
+github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
+github.com/stoewer/go-strcase v1.2.0/go.mod h1:IBiWB2sKIp3wVVQ3Y035++gc+knqhUQag1KpM8ahLw8=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
+github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
+github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
+github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA=
+github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
+github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
+github.com/stretchr/testify v1.8.3 h1:RP3t2pwF7cMEbC1dqtB6poj3niw/9gnV4Cjg5oW5gtY=
+github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f/go.mod h1:N2zxlSyiKSe5eX1tZViRH5QA0qijqEDrYZiPEAiq3wU=
+github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415/go.mod h1:GwrjFmJcFw6At/Gs6z4yjiIwzuJ1/+UwLxMQDVQXShQ=
+github.com/xeipuuv/gojsonschema v1.2.0/go.mod h1:anYRn/JVcOK2ZgGU+IjEV4nwlhoK5sQluxsYJ78Id3Y=
+github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
+github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
+github.com/yuin/goldmark v1.3.5/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k=
+go.opentelemetry.io/otel v1.16.0 h1:Z7GVAX/UkAXPKsy94IU+i6thsQS4nb7LviLpnaNeW8s=
+go.opentelemetry.io/otel v1.16.0/go.mod h1:vl0h9NUa1D5s1nv3A5vZOYWn8av4K8Ml6JDeHrT/bx4=
+go.opentelemetry.io/otel/metric v1.16.0 h1:RbrpwVG1Hfv85LgnZ7+txXioPDoh6EdbZHo26Q3hqOo=
+go.opentelemetry.io/otel/metric v1.16.0/go.mod h1:QE47cpOmkwipPiefDwo2wDzwJrlfxxNYodqc4xnGCo4=
+go.opentelemetry.io/otel/trace v1.16.0 h1:8JRpaObFoW0pxuVPapkgH8UhHQj+bJW8jJsCZEu5MQs=
+go.opentelemetry.io/otel/trace v1.16.0/go.mod h1:Yt9vYq1SdNz3xdjZZK7wcXv1qv2pwLkqr2QVwea0ef0=
+go.opentelemetry.io/proto/otlp v0.7.0/go.mod h1:PqfVotwruBrMGOCsRd/89rSnXhoiJIqeYNgFYFoEGnI=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
+golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/crypto v0.10.0 h1:LKqV2xt9+kDzSTfOhx4FrkEBcMrAgHSYgzywV9zcGmM=
+golang.org/x/crypto v0.10.0/go.mod h1:o4eNf7Ede1fv+hwOwZsTHl9EsPFO6q6ZvYR8vYfY45I=
+golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
+golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
+golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU=
+golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
+golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/mod v0.10.0 h1:lFO9qtOdlre5W1jxS3r/4szv2/6iXxScdzjoBMXNhYk=
+golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20190108225652-1e06a53dbb7e/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
+golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20190603091049-60506f45cf65/go.mod h1:HSz+uSET+XFnRR8LxR5pz3Of3rY3CfYBVs4xY44aLks=
+golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200822124328-c89045814202/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
+golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4/go.mod h1:p54w0d4576C0XHj96bSt6lcn1PtDYWL6XObtHCRCNQM=
+golang.org/x/net v0.0.0-20210805182204-aaa1db679c0d/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
+golang.org/x/net v0.11.0 h1:Gi2tvZIJyBtO9SDr1q9h5hEQCp/4L2RQ+ar0qjx2oNU=
+golang.org/x/net v0.11.0/go.mod h1:2L/ixqYpgIVXmeoSA/4Lu7BzTG4KIyPIryS4IsOd1oQ=
+golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
+golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
+golang.org/x/oauth2 v0.9.0 h1:BPpt2kU7oMRq3kCHAA1tbSEshXRw1LpG2ztgDwrzuAs=
+golang.org/x/oauth2 v0.9.0/go.mod h1:qYgFZaFiu6Wg24azG8bdV52QJXJGbZzIIsRCdVKzbLw=
+golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210330210617-4fbd30eecc44/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210510120138-977fb7262007/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.0.0-20210616045830-e2b7044e8c71/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.9.0 h1:KS/R3tvhPqvJvwcKfnBHJwwthS11LRhmM5D59eEXa0s=
+golang.org/x/sys v0.9.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
+golang.org/x/term v0.9.0 h1:GRRCnKYhdQrD8kfRAdQ6Zcw1P0OcELxGLKJvtjVMZ28=
+golang.org/x/term v0.9.0/go.mod h1:M6DEAAIenWoTxdKrOltXcmDY3rSplQUkrvaDU5FcQyo=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
+golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/text v0.10.0 h1:UpjohKhiEgNc0CSauXmwYftY1+LlaC75SJwh0SgCX58=
+golang.org/x/text v0.10.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
+golang.org/x/time v0.3.0 h1:rg5rLMjNzMS1RkNLzCG38eapWhnYLFYXDXj2gOlr8j4=
+golang.org/x/time v0.3.0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
+golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/tools v0.0.0-20190226205152-f727befe758c/go.mod h1:9Yl7xja0Znq3iFh3HoIrodX9oNMXvdceNzlUR8zjMvY=
+golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
+golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q=
+golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
+golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
+golang.org/x/tools v0.1.1/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
+golang.org/x/tools v0.9.3 h1:Gn1I8+64MsuTb/HpH+LmQtNas23LhUVr3rYZ0eKuaMM=
+golang.org/x/tools v0.9.3/go.mod h1:owI94Op576fPu3cIGQeHs3joujW/2Oc6MtlxbF5dfNc=
+golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
+google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
+google.golang.org/appengine v1.6.7 h1:FZR1q0exgwxzPzp/aF+VccGrSfxfPpkBqjIIEq3ru6c=
+google.golang.org/appengine v1.6.7/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
+google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
+google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
+google.golang.org/genproto v0.0.0-20200513103714-09dca8ec2884/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
+google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013/go.mod h1:NbSheEEYHJ7i3ixzK3sjbqSGDJWnxyFXZblF3eUsNvo=
+google.golang.org/genproto v0.0.0-20220107163113-42d7afdf6368/go.mod h1:5CzLGKJ67TSI2B9POpiiyGha0AjJvZIUgRMt1dSmuhc=
+google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
+google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg=
+google.golang.org/grpc v1.25.1/go.mod h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY=
+google.golang.org/grpc v1.27.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk=
+google.golang.org/grpc v1.33.1/go.mod h1:fr5YgcSWrqhRRxogOsw7RzIpsmvOZ6IcH4kBYTpR3n0=
+google.golang.org/grpc v1.36.0/go.mod h1:qjiiYl8FncCW8feJPdyg3v6XW24KsRHe+dy9BAGRRjU=
+google.golang.org/grpc v1.40.0/go.mod h1:ogyxbiOoUXAkP+4+xa6PZSE9DZgIHtSpzjDTB9KAK34=
+google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
+google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
+google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM=
+google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miEFZTKqfCUM6K7xSMQL9OKL/b6hQv+e19PK+JZNE=
+google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo=
+google.golang.org/protobuf v1.22.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
+google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
+google.golang.org/protobuf v1.23.1-0.20200526195155-81db48ad09cc/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU=
+google.golang.org/protobuf v1.25.0/go.mod h1:9JNX74DMeImyA3h4bdi1ymwjUzf21/xIlbajtzgsN7c=
+google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw=
+google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
+google.golang.org/protobuf v1.27.1/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
+google.golang.org/protobuf v1.31.0 h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=
+google.golang.org/protobuf v1.31.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
+gopkg.in/dnaeon/go-vcr.v3 v3.1.2 h1:F1smfXBqQqwpVifDfUBQG6zzaGjzT+EnVZakrOdr5wA=
+gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
+gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
+gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.2.3/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
+gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.0-20200615113413-eeeca48fe776/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
+honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
+k8s.io/api v0.27.3 h1:yR6oQXXnUEBWEWcvPWS0jQL575KoAboQPfJAuKNrw5Y=
+k8s.io/api v0.27.3/go.mod h1:C4BNvZnQOF7JA/0Xed2S+aUyJSfTGkGFxLXz9MnpIpg=
+k8s.io/apimachinery v0.27.3 h1:Ubye8oBufD04l9QnNtW05idcOe9Z3GQN8+7PqmuVcUM=
+k8s.io/apimachinery v0.27.3/go.mod h1:XNfZ6xklnMCOGGFNqXG7bUrQCoR04dh/E7FprV6pb+E=
+k8s.io/client-go v0.27.3 h1:7dnEGHZEJld3lYwxvLl7WoehK6lAq7GvgjxpA3nv1E8=
+k8s.io/client-go v0.27.3/go.mod h1:2MBEKuTo6V1lbKy3z1euEGnhPfGZLKTS9tiJ2xodM48=
+k8s.io/klog/v2 v2.100.1 h1:7WCHKK6K8fNhTqfBhISHQ97KrnJNFZMcQvKp7gP/tmg=
+k8s.io/klog/v2 v2.100.1/go.mod h1:y1WjHnz7Dj687irZUWR/WLkLc5N1YHtjLdmgWjndZn0=
+k8s.io/kube-openapi v0.0.0-20230501164219-8b0f38b5fd1f h1:2kWPakN3i/k81b0gvD5C5FJ2kxm1WrQFanWchyKuqGg=
+k8s.io/kube-openapi v0.0.0-20230501164219-8b0f38b5fd1f/go.mod h1:byini6yhqGC14c3ebc/QwanvYwhuMWF6yz2F8uwW8eg=
+k8s.io/utils v0.0.0-20230505201702-9f6742963106 h1:EObNQ3TW2D+WptiYXlApGNLVy0zm/JIBVY9i+M4wpAU=
+k8s.io/utils v0.0.0-20230505201702-9f6742963106/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
+sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd h1:EDPBXCAspyGV4jQlpZSudPeMmr1bNJefnuqLsRAsHZo=
+sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd/go.mod h1:B8JuhiUyNFVKdsE8h686QcCxMaH6HrOAZj4vswFpcB0=
+sigs.k8s.io/structured-merge-diff/v4 v4.2.3 h1:PRbqxJClWWYMNV1dhaG4NsibJbArud9kFxnAMREiWFE=
+sigs.k8s.io/structured-merge-diff/v4 v4.2.3/go.mod h1:qjx8mGObPmV2aSZepjQjbmb2ihdVs8cGKBraizNC69E=
+sigs.k8s.io/yaml v1.3.0 h1:a2VclLzOGrwOHDiV8EfBGhvjHvP46CtW5j6POvhYGGo=
+sigs.k8s.io/yaml v1.3.0/go.mod h1:GeOyir5tyXNByN85N/dRIT9es5UQNerPYEKK56eTBm8=
diff --git a/pkg/azclient/configloader/load.go b/pkg/azclient/configloader/load.go
new file mode 100644
index 000000000..be30a4cc9
--- /dev/null
+++ b/pkg/azclient/configloader/load.go
@@ -0,0 +1,82 @@
+/*
+Copyright 2023 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package configloader
+
+import (
+	"context"
+	"fmt"
+	"strings"
+
+	clientset "k8s.io/client-go/kubernetes"
+)
+
+type decoderFactory[Type any] func(content []byte, loader ConfigLoader[Type]) ConfigLoader[Type]
+type K8sSecretLoaderConfig struct {
+	K8sSecretConfig
+	KubeClient clientset.Interface
+}
+
+type FileLoaderConfig struct {
+	FilePath string
+}
+
+// The config type for Azure cloud provider secret. Supported values are:
+// * file   : The values are read from local cloud-config file.
+// * secret : The values from secret would override all configures from local cloud-config file.
+// * merge  : The values from secret would override only configurations that are explicitly set in the secret. This is the default value.
+type cloudConfigType string
+
+const (
+	CloudConfigTypeFile   cloudConfigType = "file"
+	CloudConfigTypeSecret cloudConfigType = "secret"
+	CloudConfigTypeMerge  cloudConfigType = "merge"
+)
+
+type ConfigMergeConfig struct {
+	// The cloud configure type for Azure cloud provider. Supported values are file, secret and merge.
+	CloudConfigType cloudConfigType `json:"cloudConfigType,omitempty" yaml:"cloudConfigType,omitempty"`
+}
+
+func Load[Type any](ctx context.Context, secretLoaderConfig *K8sSecretLoaderConfig, fileLoaderConfig *FileLoaderConfig) (*Type, error) {
+
+	if fileLoaderConfig == nil {
+		return nil, fmt.Errorf("config file load config is nil")
+	}
+	//by default the config load type  is merge
+	loadConfigloader := NewEmptyLoader[ConfigMergeConfig](&ConfigMergeConfig{CloudConfigType: CloudConfigTypeMerge})
+	loadConfigloader = NewFileLoader(fileLoaderConfig.FilePath, loadConfigloader, NewYamlByteLoader[ConfigMergeConfig])
+	loadConfig, err := loadConfigloader.Load(ctx)
+	if err != nil {
+		return nil, err
+	}
+
+	configloader := NewFileLoader(fileLoaderConfig.FilePath, nil, NewYamlByteLoader[Type])
+	if strings.EqualFold(string(loadConfig.CloudConfigType), string(CloudConfigTypeFile)) {
+		return configloader.Load(ctx)
+	}
+
+	if secretLoaderConfig == nil {
+		return nil, fmt.Errorf("secret load config is nil")
+	}
+
+	if strings.EqualFold(string(loadConfig.CloudConfigType), string(CloudConfigTypeSecret)) {
+		configloader = NewK8sSecretLoader(&secretLoaderConfig.K8sSecretConfig, secretLoaderConfig.KubeClient, nil, NewYamlByteLoader[Type])
+		return configloader.Load(ctx)
+	}
+	configloader = NewK8sSecretLoader(&secretLoaderConfig.K8sSecretConfig, secretLoaderConfig.KubeClient, configloader, NewYamlByteLoader[Type])
+	return configloader.Load(ctx)
+}
diff --git a/pkg/azclient/configloader/loader_empty.go b/pkg/azclient/configloader/loader_empty.go
new file mode 100644
index 000000000..70b9ee0d5
--- /dev/null
+++ b/pkg/azclient/configloader/loader_empty.go
@@ -0,0 +1,38 @@
+/*
+Copyright 2023 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package configloader
+
+import (
+	"context"
+)
+
+type EmptyLoader[Type any] struct {
+	Data *Type
+}
+
+func (e *EmptyLoader[Type]) Load(ctx context.Context) (*Type, error) {
+	return e.Data, nil
+}
+
+func NewEmptyLoader[Type any](config *Type) ConfigLoader[Type] {
+	if config == nil {
+		config = new(Type)
+	}
+	return &EmptyLoader[Type]{
+		Data: config,
+	}
+}
diff --git a/pkg/azclient/configloader/loader_file.go b/pkg/azclient/configloader/loader_file.go
new file mode 100644
index 000000000..bc33b0f9d
--- /dev/null
+++ b/pkg/azclient/configloader/loader_file.go
@@ -0,0 +1,63 @@
+/*
+Copyright 2023 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package configloader
+
+import (
+	"context"
+	"io"
+	"os"
+)
+
+type FileLoader[Type any] struct {
+	filePath string
+	ConfigLoader[Type]
+	decoderFactory[Type]
+}
+
+func NewFileLoader[Type any](filePath string, loader ConfigLoader[Type], decoder decoderFactory[Type]) ConfigLoader[Type] {
+	return &FileLoader[Type]{
+		filePath:       filePath,
+		ConfigLoader:   loader,
+		decoderFactory: decoder,
+	}
+}
+
+func (f *FileLoader[Type]) Load(ctx context.Context) (*Type, error) {
+	if f.ConfigLoader == nil {
+		f.ConfigLoader = NewEmptyLoader[Type](nil)
+	}
+
+	var content []byte
+	if err := func() error {
+		file, err := os.Open(f.filePath)
+		if err != nil {
+			return err
+		}
+		defer file.Close()
+
+		content, err = io.ReadAll(file)
+		if err != nil {
+			return err
+		}
+		return nil
+	}(); err != nil {
+		return nil, err
+	}
+
+	loader := f.decoderFactory(content, f.ConfigLoader)
+	return loader.Load(ctx)
+}
diff --git a/pkg/azclient/configloader/loader_secret.go b/pkg/azclient/configloader/loader_secret.go
new file mode 100644
index 000000000..b8cf9e564
--- /dev/null
+++ b/pkg/azclient/configloader/loader_secret.go
@@ -0,0 +1,100 @@
+/*
+Copyright 2023 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package configloader
+
+import (
+	"context"
+	"errors"
+
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	"k8s.io/client-go/kubernetes"
+	clientset "k8s.io/client-go/kubernetes"
+)
+
+type K8sSecretLoader[Type any] struct {
+	KubeClient clientset.Interface
+	ConfigLoader[Type]
+	*K8sSecretConfig
+	decoderFactory[Type]
+}
+
+// cloud provider config secret
+const (
+	DefaultCloudProviderConfigSecName      = "azure-cloud-provider"
+	DefaultCloudProviderConfigSecNamespace = "kube-system"
+	DefaultCloudProviderConfigSecKey       = "cloud-config"
+)
+
+var (
+	ErrNoKubeClient = errors.New("no kube client provided")
+	ErrNoData       = errors.New("no data in secret")
+)
+
+type K8sSecretConfig struct {
+	SecretName      string `json:"secretName,omitempty" yaml:"secretName,omitempty"`
+	SecretNamespace string `json:"secretNamespace,omitempty" yaml:"secretNamespace,omitempty"`
+	CloudConfigKey  string `json:"cloudConfigKey,omitempty" yaml:"cloudConfigKey,omitempty"`
+}
+
+func NewK8sSecretLoader[Type any](config *K8sSecretConfig, KubeClient kubernetes.Interface, loader ConfigLoader[Type], decoder decoderFactory[Type]) ConfigLoader[Type] {
+	if KubeClient == nil {
+		return nil
+	}
+	if config == nil {
+		return nil
+	}
+	if config.SecretName == "" {
+		config.SecretName = DefaultCloudProviderConfigSecName
+	}
+	if config.SecretNamespace == "" {
+		config.SecretNamespace = DefaultCloudProviderConfigSecNamespace
+	}
+	if config.CloudConfigKey == "" {
+		config.CloudConfigKey = DefaultCloudProviderConfigSecKey
+	}
+	return &K8sSecretLoader[Type]{
+		ConfigLoader:    loader,
+		K8sSecretConfig: config,
+		decoderFactory:  decoder,
+		KubeClient:      KubeClient,
+	}
+}
+
+func (k *K8sSecretLoader[Type]) Load(ctx context.Context) (*Type, error) {
+	if k.ConfigLoader == nil {
+		k.ConfigLoader = NewEmptyLoader[Type](nil)
+	}
+
+	if k.KubeClient == nil {
+		return nil, ErrNoKubeClient
+	}
+
+	secret, err := k.KubeClient.CoreV1().Secrets(k.SecretNamespace).Get(ctx, k.SecretName, metav1.GetOptions{})
+	if err != nil {
+		return nil, err
+	}
+	if len(secret.Data) <= 0 {
+		return nil, ErrNoData
+	}
+	var ok bool
+	var content []byte
+	if content, ok = secret.Data[k.CloudConfigKey]; !ok {
+		return nil, ErrNoData
+	}
+	loader := k.decoderFactory([]byte(content), k.ConfigLoader)
+	return loader.Load(ctx)
+}
diff --git a/pkg/azclient/configloader/loader_yaml.go b/pkg/azclient/configloader/loader_yaml.go
new file mode 100644
index 000000000..5de8b4acc
--- /dev/null
+++ b/pkg/azclient/configloader/loader_yaml.go
@@ -0,0 +1,54 @@
+/*
+Copyright 2023 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package configloader
+
+import (
+	"bytes"
+	"context"
+
+	"sigs.k8s.io/yaml"
+)
+
+// YamlByteLoader is a FactoryConfigLoader that loads a YAML file from a byte array.
+type YamlByteLoader[Type any] struct {
+	content []byte
+	ConfigLoader[Type]
+}
+
+// Load loads the YAML file from the byte array and returns the client factory config.
+func (s *YamlByteLoader[Type]) Load(ctx context.Context) (*Type, error) {
+	if s.ConfigLoader == nil {
+		s.ConfigLoader = NewEmptyLoader[Type](nil)
+	}
+	config, err := s.ConfigLoader.Load(ctx)
+	if err != nil {
+		return nil, err
+	}
+	s.content = bytes.TrimSpace(s.content)
+	if err := yaml.Unmarshal(bytes.TrimSpace(s.content), config); err != nil {
+		return nil, err
+	}
+	return config, nil
+}
+
+// NewYamlByteLoader creates a YamlByteLoader with the specified content and loader.
+func NewYamlByteLoader[Type any](content []byte, loader ConfigLoader[Type]) ConfigLoader[Type] {
+	return &YamlByteLoader[Type]{
+		content:      content,
+		ConfigLoader: loader,
+	}
+}
diff --git a/pkg/azclient/configloader/mock_configloader/interface.go b/pkg/azclient/configloader/mock_configloader/interface.go
new file mode 100644
index 000000000..689b4b156
--- /dev/null
+++ b/pkg/azclient/configloader/mock_configloader/interface.go
@@ -0,0 +1,106 @@
+// /*
+// Copyright The Kubernetes Authors.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+// */
+
+// Code generated by MockGen. DO NOT EDIT.
+// Source: sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader (interfaces: FactoryConfigLoader,AuthConfigLoader)
+
+// Package mock_configloader is a generated GoMock package.
+package mock_configloader
+
+import (
+	context "context"
+	reflect "reflect"
+
+	gomock "github.com/golang/mock/gomock"
+
+	azclient "sigs.k8s.io/cloud-provider-azure/pkg/azclient"
+)
+
+// MockFactoryConfigLoader is a mock of FactoryConfigLoader interface.
+type MockFactoryConfigLoader struct {
+	ctrl     *gomock.Controller
+	recorder *MockFactoryConfigLoaderMockRecorder
+}
+
+// MockFactoryConfigLoaderMockRecorder is the mock recorder for MockFactoryConfigLoader.
+type MockFactoryConfigLoaderMockRecorder struct {
+	mock *MockFactoryConfigLoader
+}
+
+// NewMockFactoryConfigLoader creates a new mock instance.
+func NewMockFactoryConfigLoader(ctrl *gomock.Controller) *MockFactoryConfigLoader {
+	mock := &MockFactoryConfigLoader{ctrl: ctrl}
+	mock.recorder = &MockFactoryConfigLoaderMockRecorder{mock}
+	return mock
+}
+
+// EXPECT returns an object that allows the caller to indicate expected use.
+func (m *MockFactoryConfigLoader) EXPECT() *MockFactoryConfigLoaderMockRecorder {
+	return m.recorder
+}
+
+// Load mocks base method.
+func (m *MockFactoryConfigLoader) Load(arg0 context.Context) (*azclient.ClientFactoryConfig, error) {
+	m.ctrl.T.Helper()
+	ret := m.ctrl.Call(m, "Load", arg0)
+	ret0, _ := ret[0].(*azclient.ClientFactoryConfig)
+	ret1, _ := ret[1].(error)
+	return ret0, ret1
+}
+
+// Load indicates an expected call of Load.
+func (mr *MockFactoryConfigLoaderMockRecorder) Load(arg0 interface{}) *gomock.Call {
+	mr.mock.ctrl.T.Helper()
+	return mr.mock.ctrl.RecordCallWithMethodType(mr.mock, "Load", reflect.TypeOf((*MockFactoryConfigLoader)(nil).Load), arg0)
+}
+
+// MockAuthConfigLoader is a mock of AuthConfigLoader interface.
+type MockAuthConfigLoader struct {
+	ctrl     *gomock.Controller
+	recorder *MockAuthConfigLoaderMockRecorder
+}
+
+// MockAuthConfigLoaderMockRecorder is the mock recorder for MockAuthConfigLoader.
+type MockAuthConfigLoaderMockRecorder struct {
+	mock *MockAuthConfigLoader
+}
+
+// NewMockAuthConfigLoader creates a new mock instance.
+func NewMockAuthConfigLoader(ctrl *gomock.Controller) *MockAuthConfigLoader {
+	mock := &MockAuthConfigLoader{ctrl: ctrl}
+	mock.recorder = &MockAuthConfigLoaderMockRecorder{mock}
+	return mock
+}
+
+// EXPECT returns an object that allows the caller to indicate expected use.
+func (m *MockAuthConfigLoader) EXPECT() *MockAuthConfigLoaderMockRecorder {
+	return m.recorder
+}
+
+// Load mocks base method.
+func (m *MockAuthConfigLoader) Load(arg0 context.Context) (*azclient.AzureAuthConfig, error) {
+	m.ctrl.T.Helper()
+	ret := m.ctrl.Call(m, "Load", arg0)
+	ret0, _ := ret[0].(*azclient.AzureAuthConfig)
+	ret1, _ := ret[1].(error)
+	return ret0, ret1
+}
+
+// Load indicates an expected call of Load.
+func (mr *MockAuthConfigLoaderMockRecorder) Load(arg0 interface{}) *gomock.Call {
+	mr.mock.ctrl.T.Helper()
+	return mr.mock.ctrl.RecordCallWithMethodType(mr.mock, "Load", reflect.TypeOf((*MockAuthConfigLoader)(nil).Load), arg0)
+}
diff --git a/pkg/azclient/factory_conf.go b/pkg/azclient/factory_conf.go
index 9d74fd06b..883b19140 100644
--- a/pkg/azclient/factory_conf.go
+++ b/pkg/azclient/factory_conf.go
@@ -18,6 +18,7 @@ package azclient
 
 import (
 	"net/http"
+	"sync"
 
 	"github.com/Azure/azure-sdk-for-go/sdk/azcore/arm/policy"
 	"github.com/Azure/go-armbalancer"
@@ -26,9 +27,22 @@ import (
 	"sigs.k8s.io/cloud-provider-azure/pkg/azclient/utils"
 )
 
+var DefaultResourceClientTransport *http.Client
+var once sync.Once
+
+func init() {
+	once.Do(func() {
+		DefaultResourceClientTransport = &http.Client{
+			Transport: armbalancer.New(armbalancer.Options{
+				Transport: utils.DefaultTransport,
+				PoolSize:  100,
+			}),
+		}
+	})
+}
+
 type ClientFactoryConfig struct {
 	ratelimit.CloudProviderRateLimitConfig
-	*ARMClientConfig
 
 	// Enable exponential backoff to manage resource request retries
 	CloudProviderBackoff bool `json:"cloudProviderBackoff,omitempty" yaml:"cloudProviderBackoff,omitempty"`
@@ -37,27 +51,18 @@ type ClientFactoryConfig struct {
 	SubscriptionID string `json:"subscriptionId,omitempty" yaml:"subscriptionId,omitempty"`
 }
 
-func GetDefaultResourceClientOption(config *ClientFactoryConfig) (*policy.ClientOptions, error) {
-	var armConfig *ARMClientConfig
-	if config != nil {
-		armConfig = config.ARMClientConfig
-	}
+func GetDefaultResourceClientOption(armConfig *ARMClientConfig, factoryConfig *ClientFactoryConfig) (*policy.ClientOptions, error) {
 	//Get default settings
 	options, err := NewClientOptionFromARMClientConfig(armConfig)
 	if err != nil {
 		return nil, err
 	}
-	if config != nil {
-		// add retry policy
-		if !config.CloudProviderBackoff {
-			options.ClientOptions.Retry.MaxRetries = 1
+	if factoryConfig != nil {
+		//Set retry
+		if !factoryConfig.CloudProviderBackoff {
+			options.Retry.MaxRetries = 0
 		}
 	}
-	options.Transport = &http.Client{
-		Transport: armbalancer.New(armbalancer.Options{
-			Transport: utils.DefaultTransport,
-			PoolSize:  100,
-		}),
-	}
+	options.Transport = DefaultResourceClientTransport
 	return options, err
 }
diff --git a/pkg/azclient/factory_gen.go b/pkg/azclient/factory_gen.go
index a5c650f2e..74d8f1f28 100644
--- a/pkg/azclient/factory_gen.go
+++ b/pkg/azclient/factory_gen.go
@@ -67,7 +67,7 @@ type ClientFactoryImpl struct {
 	virtualmachinescalesetvmclientInterface virtualmachinescalesetvmclient.Interface
 }
 
-func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential) (ClientFactory, error) {
+func NewClientFactory(config *ClientFactoryConfig, armConfig *ARMClientConfig, cred azcore.TokenCredential) (ClientFactory, error) {
 	if config == nil {
 		config = &ClientFactoryConfig{}
 	}
@@ -78,7 +78,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 	var options *arm.ClientOptions
 	var err error
 
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {availabilitysetclient sigs.k8s.io/cloud-provider-azure/pkg/azclient/availabilitysetclient Interface availabilitySetRateLimit}
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -94,7 +95,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 		return nil, err
 	}
 
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {deploymentclient sigs.k8s.io/cloud-provider-azure/pkg/azclient/deploymentclient Interface deploymentRateLimit}
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -107,7 +109,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 		return nil, err
 	}
 
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {diskclient sigs.k8s.io/cloud-provider-azure/pkg/azclient/diskclient Interface diskRateLimit}
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -120,7 +123,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 		return nil, err
 	}
 
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {interfaceclient sigs.k8s.io/cloud-provider-azure/pkg/azclient/interfaceclient Interface interfaceRateLimit}
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -133,7 +137,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 		return nil, err
 	}
 
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {loadbalancerclient sigs.k8s.io/cloud-provider-azure/pkg/azclient/loadbalancerclient Interface loadBalancerRateLimit}
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -146,7 +151,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 		return nil, err
 	}
 
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {managedclusterclient sigs.k8s.io/cloud-provider-azure/pkg/azclient/managedclusterclient Interface containerServiceRateLimit}
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -159,7 +165,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 		return nil, err
 	}
 
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {privateendpointclient sigs.k8s.io/cloud-provider-azure/pkg/azclient/privateendpointclient Interface privateEndpointRateLimit}
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -172,7 +179,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 		return nil, err
 	}
 
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {privatelinkserviceclient sigs.k8s.io/cloud-provider-azure/pkg/azclient/privatelinkserviceclient Interface privateLinkServiceRateLimit}
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -185,7 +193,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 		return nil, err
 	}
 
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {privatezoneclient sigs.k8s.io/cloud-provider-azure/pkg/azclient/privatezoneclient Interface privateDNSRateLimit}
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -198,7 +207,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 		return nil, err
 	}
 
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {publicipaddressclient sigs.k8s.io/cloud-provider-azure/pkg/azclient/publicipaddressclient Interface publicIPAddressRateLimit}
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -211,7 +221,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 		return nil, err
 	}
 
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {publicipprefixclient sigs.k8s.io/cloud-provider-azure/pkg/azclient/publicipprefixclient Interface }
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -221,7 +232,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 		return nil, err
 	}
 
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {routetableclient sigs.k8s.io/cloud-provider-azure/pkg/azclient/routetableclient Interface routeTableRateLimit}
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -234,7 +246,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 		return nil, err
 	}
 
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {securitygroupclient sigs.k8s.io/cloud-provider-azure/pkg/azclient/securitygroupclient Interface securityGroupRateLimit}
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -247,7 +260,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 		return nil, err
 	}
 
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {snapshotclient sigs.k8s.io/cloud-provider-azure/pkg/azclient/snapshotclient Interface snapshotRateLimit}
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -260,7 +274,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 		return nil, err
 	}
 
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {subnetclient sigs.k8s.io/cloud-provider-azure/pkg/azclient/subnetclient Interface subnetsRateLimit}
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -273,7 +288,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 		return nil, err
 	}
 
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {virtualmachineclient sigs.k8s.io/cloud-provider-azure/pkg/azclient/virtualmachineclient Interface virtualMachineRateLimit}
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -286,7 +302,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 		return nil, err
 	}
 
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {virtualmachinescalesetclient sigs.k8s.io/cloud-provider-azure/pkg/azclient/virtualmachinescalesetclient Interface virtualMachineSizesRateLimit}
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -299,7 +316,8 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 		return nil, err
 	}
 
-	options, err = GetDefaultResourceClientOption(config)
+	//initialize {virtualmachinescalesetvmclient sigs.k8s.io/cloud-provider-azure/pkg/azclient/virtualmachinescalesetvmclient Interface }
+	options, err = GetDefaultResourceClientOption(armConfig, config)
 	if err != nil {
 		return nil, err
 	}
@@ -308,6 +326,7 @@ func NewClientFactory(config *ClientFactoryConfig, cred azcore.TokenCredential)
 	if err != nil {
 		return nil, err
 	}
+
 	return &ClientFactoryImpl{
 		ClientFactoryConfig: config,
 		cred:                cred, availabilitysetclientInterface: availabilitysetclientInterface,
diff --git a/pkg/azclient/go.mod b/pkg/azclient/go.mod
index e9f9578ed..1848a2019 100644
--- a/pkg/azclient/go.mod
+++ b/pkg/azclient/go.mod
@@ -15,8 +15,8 @@ require (
 	github.com/google/uuid v1.3.0
 	github.com/onsi/ginkgo/v2 v2.11.0
 	github.com/onsi/gomega v1.27.8
-	go.opentelemetry.io/otel v1.16.0
-	go.opentelemetry.io/otel/trace v1.16.0
+	go.opentelemetry.io/otel v1.10.0
+	go.opentelemetry.io/otel/trace v1.10.0
 	golang.org/x/crypto v0.10.0
 	golang.org/x/time v0.3.0
 	gopkg.in/dnaeon/go-vcr.v3 v3.1.2
@@ -36,7 +36,6 @@ require (
 	github.com/kylelemons/godebug v1.1.0 // indirect
 	github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 // indirect
 	github.com/rogpeppe/go-internal v1.10.0 // indirect
-	go.opentelemetry.io/otel/metric v1.16.0 // indirect
 	golang.org/x/net v0.10.0 // indirect
 	golang.org/x/sys v0.9.0 // indirect
 	golang.org/x/text v0.10.0 // indirect
diff --git a/pkg/azclient/go.sum b/pkg/azclient/go.sum
index dee118112..766b2204c 100644
--- a/pkg/azclient/go.sum
+++ b/pkg/azclient/go.sum
@@ -68,14 +68,12 @@ github.com/rogpeppe/go-internal v1.10.0 h1:TMyTOH3F/DB16zRVcYyreMH6GnZZrwQVAoYjR
 github.com/rogpeppe/go-internal v1.10.0/go.mod h1:UQnix2H7Ngw/k4C5ijL5+65zddjncjaFoBhdsK/akog=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
-github.com/stretchr/testify v1.8.3 h1:RP3t2pwF7cMEbC1dqtB6poj3niw/9gnV4Cjg5oW5gtY=
+github.com/stretchr/testify v1.8.2 h1:+h33VjcLVPDHtOdpUCuF+7gSuG3yGIftsP1YvFihtJ8=
 github.com/yuin/goldmark v1.3.5/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k=
-go.opentelemetry.io/otel v1.16.0 h1:Z7GVAX/UkAXPKsy94IU+i6thsQS4nb7LviLpnaNeW8s=
-go.opentelemetry.io/otel v1.16.0/go.mod h1:vl0h9NUa1D5s1nv3A5vZOYWn8av4K8Ml6JDeHrT/bx4=
-go.opentelemetry.io/otel/metric v1.16.0 h1:RbrpwVG1Hfv85LgnZ7+txXioPDoh6EdbZHo26Q3hqOo=
-go.opentelemetry.io/otel/metric v1.16.0/go.mod h1:QE47cpOmkwipPiefDwo2wDzwJrlfxxNYodqc4xnGCo4=
-go.opentelemetry.io/otel/trace v1.16.0 h1:8JRpaObFoW0pxuVPapkgH8UhHQj+bJW8jJsCZEu5MQs=
-go.opentelemetry.io/otel/trace v1.16.0/go.mod h1:Yt9vYq1SdNz3xdjZZK7wcXv1qv2pwLkqr2QVwea0ef0=
+go.opentelemetry.io/otel v1.10.0 h1:Y7DTJMR6zs1xkS/upamJYk0SxxN4C9AqRd77jmZnyY4=
+go.opentelemetry.io/otel v1.10.0/go.mod h1:NbvWjCthWHKBEUMpf0/v8ZRZlni86PpGFEMA9pnQSnQ=
+go.opentelemetry.io/otel/trace v1.10.0 h1:npQMbR8o7mum8uF95yFbOEJffhs1sbCOfDh8zAJiH5E=
+go.opentelemetry.io/otel/trace v1.10.0/go.mod h1:Sij3YYczqAdz+EhmGhE6TpTxUO5/F/AzrK+kxfGqySM=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.10.0 h1:LKqV2xt9+kDzSTfOhx4FrkEBcMrAgHSYgzywV9zcGmM=
diff --git a/pkg/cache/azure_cache.go b/pkg/cache/azure_cache.go
index c60eaa036..3e061ed32 100644
--- a/pkg/cache/azure_cache.go
+++ b/pkg/cache/azure_cache.go
@@ -62,56 +62,28 @@ func cacheKeyFunc(obj interface{}) (string, error) {
 	return obj.(*AzureCacheEntry).Key, nil
 }
 
-// Resource operations
-type Resource interface {
-	Get(key string, crt AzureCacheReadType) (interface{}, error)
-	GetWithDeepCopy(key string, crt AzureCacheReadType) (interface{}, error)
-	Delete(key string) error
-	Set(key string, data interface{})
-	Update(key string, data interface{})
-
-	GetStore() cache.Store
-	Lock()
-	Unlock()
-}
-
 // TimedCache is a cache with TTL.
 type TimedCache struct {
-	Store     cache.Store
-	MutexLock sync.RWMutex
-	TTL       time.Duration
-
-	resourceProvider Resource
-}
-
-type ResourceProvider struct {
+	Store  cache.Store
+	Lock   sync.Mutex
 	Getter GetFunc
+	TTL    time.Duration
 }
 
-// NewTimedCache creates a new azcache.Resource.
-func NewTimedCache(ttl time.Duration, getter GetFunc, disabled bool) (Resource, error) {
+// NewTimedcache creates a new TimedCache.
+func NewTimedcache(ttl time.Duration, getter GetFunc) (*TimedCache, error) {
 	if getter == nil {
 		return nil, fmt.Errorf("getter is not provided")
 	}
 
-	provider := &ResourceProvider{
+	return &TimedCache{
 		Getter: getter,
-	}
-
-	if disabled {
-		return provider, nil
-	}
-
-	timedCache := &TimedCache{
 		// switch to using NewStore instead of NewTTLStore so that we can
 		// reuse entries for calls that are fine with reading expired/stalled data.
 		// with NewTTLStore, entries are not returned if they have already expired.
-		Store:            cache.NewStore(cacheKeyFunc),
-		MutexLock:        sync.RWMutex{},
-		TTL:              ttl,
-		resourceProvider: provider,
-	}
-	return timedCache, nil
+		Store: cache.NewStore(cacheKeyFunc),
+		TTL:   ttl,
+	}, nil
 }
 
 // getInternal returns AzureCacheEntry by key. If the key is not cached yet,
@@ -128,8 +100,8 @@ func (t *TimedCache) getInternal(key string) (*AzureCacheEntry, error) {
 
 	// lock here to ensure if entry doesn't exist, we add a new entry
 	// avoiding overwrites
-	t.Lock()
-	defer t.Unlock()
+	t.Lock.Lock()
+	defer t.Lock.Unlock()
 
 	// Another goroutine might have written the same key.
 	entry, exists, err = t.Store.GetByKey(key)
@@ -155,10 +127,6 @@ func (t *TimedCache) Get(key string, crt AzureCacheReadType) (interface{}, error
 	return t.get(key, crt)
 }
 
-func (c *ResourceProvider) Get(key string, _ AzureCacheReadType) (interface{}, error) {
-	return c.Getter(key)
-}
-
 // Get returns the requested item by key with deep copy.
 func (t *TimedCache) GetWithDeepCopy(key string, crt AzureCacheReadType) (interface{}, error) {
 	data, err := t.get(key, crt)
@@ -166,10 +134,6 @@ func (t *TimedCache) GetWithDeepCopy(key string, crt AzureCacheReadType) (interf
 	return copied, err
 }
 
-func (c *ResourceProvider) GetWithDeepCopy(key string, _ AzureCacheReadType) (interface{}, error) {
-	return c.Getter(key)
-}
-
 func (t *TimedCache) get(key string, crt AzureCacheReadType) (interface{}, error) {
 	entry, err := t.getInternal(key)
 	if err != nil {
@@ -193,7 +157,7 @@ func (t *TimedCache) get(key string, crt AzureCacheReadType) (interface{}, error
 	// Data is not cached yet, cache data is expired or requested force refresh
 	// cache it by getter. entry is locked before getting to ensure concurrent
 	// gets don't result in multiple ARM calls.
-	data, err := t.resourceProvider.Get(key, CacheReadTypeDefault /* not matter */)
+	data, err := t.Getter(key)
 	if err != nil {
 		return nil, err
 	}
@@ -213,10 +177,6 @@ func (t *TimedCache) Delete(key string) error {
 	})
 }
 
-func (c *ResourceProvider) Delete(_ string) error {
-	return nil
-}
-
 // Set sets the data cache for the key.
 // It is only used for testing.
 func (t *TimedCache) Set(key string, data interface{}) {
@@ -227,8 +187,6 @@ func (t *TimedCache) Set(key string, data interface{}) {
 	})
 }
 
-func (c *ResourceProvider) Set(_ string, _ interface{}) {}
-
 // Update updates the data cache for the key.
 func (t *TimedCache) Update(key string, data interface{}) {
 	if entry, err := t.getInternal(key); err == nil {
@@ -244,25 +202,3 @@ func (t *TimedCache) Update(key string, data interface{}) {
 		})
 	}
 }
-
-func (c *ResourceProvider) Update(_ string, _ interface{}) {}
-
-func (t *TimedCache) GetStore() cache.Store {
-	return t.Store
-}
-
-func (c *ResourceProvider) GetStore() cache.Store {
-	return nil
-}
-
-func (t *TimedCache) Lock() {
-	t.MutexLock.Lock()
-}
-
-func (t *TimedCache) Unlock() {
-	t.MutexLock.Unlock()
-}
-
-func (c *ResourceProvider) Lock() {}
-
-func (c *ResourceProvider) Unlock() {}
diff --git a/pkg/provider/azure.go b/pkg/provider/azure.go
index 72e3d047c..2703610cc 100644
--- a/pkg/provider/azure.go
+++ b/pkg/provider/azure.go
@@ -262,9 +262,6 @@ type Config struct {
 	// If the length is not 0, it is assumed the multiple standard load balancers mode is on. In this case,
 	// there must be one configuration named “<clustername>” or an error will be reported.
 	MultipleStandardLoadBalancerConfigurations []MultipleStandardLoadBalancerConfiguration `json:"multipleStandardLoadBalancerConfigurations,omitempty" yaml:"multipleStandardLoadBalancerConfigurations,omitempty"`
-
-	// DisableAPICallCache disables the cache for Azure API calls. It is for ARG support and not all resources will be disabled.
-	DisableAPICallCache bool `json:"disableAPICallCache,omitempty" yaml:"disableAPICallCache,omitempty"`
 }
 
 // MultipleStandardLoadBalancerConfiguration stores the properties regarding multiple standard load balancers.
@@ -402,16 +399,16 @@ type Cloud struct {
 	eventRecorder    record.EventRecorder
 	routeUpdater     *delayedRouteUpdater
 
-	vmCache  azcache.Resource
-	lbCache  azcache.Resource
-	nsgCache azcache.Resource
-	rtCache  azcache.Resource
+	vmCache  *azcache.TimedCache
+	lbCache  *azcache.TimedCache
+	nsgCache *azcache.TimedCache
+	rtCache  *azcache.TimedCache
 	// public ip cache
 	// key: [resourceGroupName]
 	// Value: sync.Map of [pipName]*PublicIPAddress
-	pipCache azcache.Resource
+	pipCache *azcache.TimedCache
 	// use LB frontEndIpConfiguration ID as the key and search for PLS attached to the frontEnd
-	plsCache azcache.Resource
+	plsCache *azcache.TimedCache
 
 	// Add service lister to always get latest service
 	serviceLister corelisters.ServiceLister
@@ -745,10 +742,6 @@ func (az *Cloud) getPutVMSSVMBatchSize() int {
 }
 
 func (az *Cloud) initCaches() (err error) {
-	if az.Config.DisableAPICallCache {
-		klog.Infof("API call cache is disabled, ignore logs about cache operations")
-	}
-
 	az.vmCache, err = az.newVMCache()
 	if err != nil {
 		return err
diff --git a/pkg/provider/azure_instance_metadata.go b/pkg/provider/azure_instance_metadata.go
index c79fd6395..38505d943 100644
--- a/pkg/provider/azure_instance_metadata.go
+++ b/pkg/provider/azure_instance_metadata.go
@@ -102,7 +102,7 @@ type LoadBalancerMetadata struct {
 // InstanceMetadataService knows how to query the Azure instance metadata server.
 type InstanceMetadataService struct {
 	imdsServer string
-	imsCache   azcache.Resource
+	imsCache   *azcache.TimedCache
 }
 
 // NewInstanceMetadataService creates an instance of the InstanceMetadataService accessor object.
@@ -111,7 +111,7 @@ func NewInstanceMetadataService(imdsServer string) (*InstanceMetadataService, er
 		imdsServer: imdsServer,
 	}
 
-	imsCache, err := azcache.NewTimedCache(consts.MetadataCacheTTL, ims.getMetadata, false)
+	imsCache, err := azcache.NewTimedcache(consts.MetadataCacheTTL, ims.getMetadata)
 	if err != nil {
 		return nil, err
 	}
diff --git a/pkg/provider/azure_standard.go b/pkg/provider/azure_standard.go
index 665a35fb0..ca8321f41 100644
--- a/pkg/provider/azure_standard.go
+++ b/pkg/provider/azure_standard.go
@@ -494,7 +494,7 @@ func MakeCRC32(str string) string {
 type availabilitySet struct {
 	*Cloud
 
-	vmasCache azcache.Resource
+	vmasCache *azcache.TimedCache
 }
 
 type AvailabilitySetEntry struct {
@@ -502,7 +502,7 @@ type AvailabilitySetEntry struct {
 	ResourceGroup string
 }
 
-func (as *availabilitySet) newVMASCache() (azcache.Resource, error) {
+func (as *availabilitySet) newVMASCache() (*azcache.TimedCache, error) {
 	getter := func(key string) (interface{}, error) {
 		localCache := &sync.Map{}
 
@@ -538,7 +538,7 @@ func (as *availabilitySet) newVMASCache() (azcache.Resource, error) {
 		as.Config.AvailabilitySetsCacheTTLInSeconds = consts.VMASCacheTTLDefaultInSeconds
 	}
 
-	return azcache.NewTimedCache(time.Duration(as.Config.AvailabilitySetsCacheTTLInSeconds)*time.Second, getter, as.Cloud.Config.DisableAPICallCache)
+	return azcache.NewTimedcache(time.Duration(as.Config.AvailabilitySetsCacheTTLInSeconds)*time.Second, getter)
 }
 
 // newStandardSet creates a new availabilitySet.
diff --git a/pkg/provider/azure_utils.go b/pkg/provider/azure_utils.go
index 610cd83b4..af0854f5b 100644
--- a/pkg/provider/azure_utils.go
+++ b/pkg/provider/azure_utils.go
@@ -286,17 +286,17 @@ func getVMSSVMCacheKey(resourceGroup, vmssName string) string {
 }
 
 // isNodeInVMSSVMCache check whether nodeName is in vmssVMCache
-func isNodeInVMSSVMCache(nodeName string, vmssVMCache azcache.Resource) bool {
+func isNodeInVMSSVMCache(nodeName string, vmssVMCache *azcache.TimedCache) bool {
 	if vmssVMCache == nil {
 		return false
 	}
 
 	var isInCache bool
 
-	vmssVMCache.Lock()
-	defer vmssVMCache.Unlock()
+	vmssVMCache.Lock.Lock()
+	defer vmssVMCache.Lock.Unlock()
 
-	for _, entry := range vmssVMCache.GetStore().List() {
+	for _, entry := range vmssVMCache.Store.List() {
 		if entry != nil {
 			e := entry.(*azcache.AzureCacheEntry)
 			e.Lock.Lock()
diff --git a/pkg/provider/azure_vmss.go b/pkg/provider/azure_vmss.go
index f63ec4fe5..469210f85 100644
--- a/pkg/provider/azure_vmss.go
+++ b/pkg/provider/azure_vmss.go
@@ -86,19 +86,19 @@ type ScaleSet struct {
 	// vmssCache is timed cache where the Store in the cache is a map of
 	// Key: consts.VMSSKey
 	// Value: sync.Map of [vmssName]*VMSSEntry
-	vmssCache azcache.Resource
+	vmssCache *azcache.TimedCache
 
 	// vmssVMCache is timed cache where the Store in the cache is a map of
 	// Key: [resourcegroup/vmssName]
 	// Value: sync.Map of [vmName]*VMSSVirtualMachineEntry
-	vmssVMCache azcache.Resource
+	vmssVMCache *azcache.TimedCache
 
 	// nonVmssUniformNodesCache is used to store node names from non uniform vm.
 	// Currently, the nodes can from avset or vmss flex or individual vm.
 	// This cache contains an entry called nonVmssUniformNodesEntry.
 	// nonVmssUniformNodesEntry contains avSetVMNodeNames list, clusterNodeNames list
 	// and current clusterNodeNames.
-	nonVmssUniformNodesCache azcache.Resource
+	nonVmssUniformNodesCache *azcache.TimedCache
 
 	// lockMap in cache refresh
 	lockMap *lockMap
diff --git a/pkg/provider/azure_vmss_cache.go b/pkg/provider/azure_vmss_cache.go
index 860fead7a..2ab07adff 100644
--- a/pkg/provider/azure_vmss_cache.go
+++ b/pkg/provider/azure_vmss_cache.go
@@ -64,7 +64,7 @@ const (
 	ManagedByUnknownVMSet VMManagementType = "ManagedByUnknownVMSet"
 )
 
-func (ss *ScaleSet) newVMSSCache(ctx context.Context) (azcache.Resource, error) {
+func (ss *ScaleSet) newVMSSCache(ctx context.Context) (*azcache.TimedCache, error) {
 	getter := func(key string) (interface{}, error) {
 		localCache := &sync.Map{} // [vmssName]*vmssEntry
 
@@ -102,16 +102,14 @@ func (ss *ScaleSet) newVMSSCache(ctx context.Context) (azcache.Resource, error)
 			}
 		}
 
-		if !ss.Cloud.Config.DisableAPICallCache {
-			if resourceGroupNotFound {
-				// gc vmss vm cache when there is resource group not found
-				vmssVMKeys := ss.vmssVMCache.GetStore().ListKeys()
-				for _, cacheKey := range vmssVMKeys {
-					vmssName := cacheKey[strings.LastIndex(cacheKey, "/")+1:]
-					if _, ok := localCache.Load(vmssName); !ok {
-						klog.V(2).Infof("remove vmss %s from vmssVMCache due to rg not found", cacheKey)
-						_ = ss.vmssVMCache.Delete(cacheKey)
-					}
+		if resourceGroupNotFound {
+			// gc vmss vm cache when there is resource group not found
+			vmssVMKeys := ss.vmssVMCache.Store.ListKeys()
+			for _, cacheKey := range vmssVMKeys {
+				vmssName := cacheKey[strings.LastIndex(cacheKey, "/")+1:]
+				if _, ok := localCache.Load(vmssName); !ok {
+					klog.V(2).Infof("remove vmss %s from vmssVMCache due to rg not found", cacheKey)
+					_ = ss.vmssVMCache.Delete(cacheKey)
 				}
 			}
 		}
@@ -121,7 +119,7 @@ func (ss *ScaleSet) newVMSSCache(ctx context.Context) (azcache.Resource, error)
 	if ss.Config.VmssCacheTTLInSeconds == 0 {
 		ss.Config.VmssCacheTTLInSeconds = consts.VMSSCacheTTLDefaultInSeconds
 	}
-	return azcache.NewTimedCache(time.Duration(ss.Config.VmssCacheTTLInSeconds)*time.Second, getter, ss.Config.DisableAPICallCache)
+	return azcache.NewTimedcache(time.Duration(ss.Config.VmssCacheTTLInSeconds)*time.Second, getter)
 }
 
 func (ss *ScaleSet) getVMSSVMsFromCache(resourceGroup, vmssName string, crt azcache.AzureCacheReadType) (*sync.Map, error) {
@@ -141,33 +139,31 @@ func (ss *ScaleSet) getVMSSVMsFromCache(resourceGroup, vmssName string, crt azca
 }
 
 // newVMSSVirtualMachinesCache instantiates a new VMs cache for VMs belonging to the provided VMSS.
-func (ss *ScaleSet) newVMSSVirtualMachinesCache() (azcache.Resource, error) {
+func (ss *ScaleSet) newVMSSVirtualMachinesCache() (*azcache.TimedCache, error) {
 	vmssVirtualMachinesCacheTTL := time.Duration(ss.Config.VmssVirtualMachinesCacheTTLInSeconds) * time.Second
 
 	getter := func(cacheKey string) (interface{}, error) {
 		localCache := &sync.Map{} // [nodeName]*VMSSVirtualMachineEntry
 		oldCache := make(map[string]*VMSSVirtualMachineEntry)
 
-		if !ss.Cloud.Config.DisableAPICallCache {
-			entry, exists, err := ss.vmssVMCache.GetStore().GetByKey(cacheKey)
-			if err != nil {
-				return nil, err
-			}
-			if exists {
-				cached := entry.(*azcache.AzureCacheEntry).Data
-				if cached != nil {
-					virtualMachines := cached.(*sync.Map)
-					virtualMachines.Range(func(key, value interface{}) bool {
-						oldCache[key.(string)] = value.(*VMSSVirtualMachineEntry)
-						return true
-					})
-				}
+		entry, exists, err := ss.vmssVMCache.Store.GetByKey(cacheKey)
+		if err != nil {
+			return nil, err
+		}
+		if exists {
+			cached := entry.(*azcache.AzureCacheEntry).Data
+			if cached != nil {
+				virtualMachines := cached.(*sync.Map)
+				virtualMachines.Range(func(key, value interface{}) bool {
+					oldCache[key.(string)] = value.(*VMSSVirtualMachineEntry)
+					return true
+				})
 			}
 		}
 
 		result := strings.Split(cacheKey, "/")
 		if len(result) < 2 {
-			err := fmt.Errorf("invalid cacheKey (%s)", cacheKey)
+			err = fmt.Errorf("Invalid cacheKey (%s)", cacheKey)
 			return nil, err
 		}
 
@@ -206,50 +202,43 @@ func (ss *ScaleSet) newVMSSVirtualMachinesCache() (azcache.Resource, error) {
 			}
 			localCache.Store(computerName, vmssVMCacheEntry)
 
-			if !ss.Cloud.Config.DisableAPICallCache {
-				delete(oldCache, computerName)
-			}
+			delete(oldCache, computerName)
 		}
 
-		if !ss.Cloud.Config.DisableAPICallCache {
-			// add old missing cache data with nil entries to prevent aggressive
-			// ARM calls during cache invalidation
-			for name, vmEntry := range oldCache {
-				// if the nil cache entry has existed for vmssVirtualMachinesCacheTTL in the cache
-				// then it should not be added back to the cache
-				if vmEntry.VirtualMachine == nil && time.Since(vmEntry.LastUpdate) > vmssVirtualMachinesCacheTTL {
-					klog.V(5).Infof("ignoring expired entries from old cache for %s", name)
-					continue
-				}
-				LastUpdate := time.Now().UTC()
-				if vmEntry.VirtualMachine == nil {
-					// if this is already a nil entry then keep the time the nil
-					// entry was first created, so we can cleanup unwanted entries
-					LastUpdate = vmEntry.LastUpdate
-				}
-
-				klog.V(5).Infof("adding old entries to new cache for %s", name)
-				localCache.Store(name, &VMSSVirtualMachineEntry{
-					ResourceGroup:  vmEntry.ResourceGroup,
-					VMSSName:       vmEntry.VMSSName,
-					InstanceID:     vmEntry.InstanceID,
-					VirtualMachine: nil,
-					LastUpdate:     LastUpdate,
-				})
+		// add old missing cache data with nil entries to prevent aggressive
+		// ARM calls during cache invalidation
+		for name, vmEntry := range oldCache {
+			// if the nil cache entry has existed for vmssVirtualMachinesCacheTTL in the cache
+			// then it should not be added back to the cache
+			if vmEntry.VirtualMachine == nil && time.Since(vmEntry.LastUpdate) > vmssVirtualMachinesCacheTTL {
+				klog.V(5).Infof("ignoring expired entries from old cache for %s", name)
+				continue
+			}
+			LastUpdate := time.Now().UTC()
+			if vmEntry.VirtualMachine == nil {
+				// if this is already a nil entry then keep the time the nil
+				// entry was first created, so we can cleanup unwanted entries
+				LastUpdate = vmEntry.LastUpdate
 			}
+
+			klog.V(5).Infof("adding old entries to new cache for %s", name)
+			localCache.Store(name, &VMSSVirtualMachineEntry{
+				ResourceGroup:  vmEntry.ResourceGroup,
+				VMSSName:       vmEntry.VMSSName,
+				InstanceID:     vmEntry.InstanceID,
+				VirtualMachine: nil,
+				LastUpdate:     LastUpdate,
+			})
 		}
 
 		return localCache, nil
 	}
 
-	return azcache.NewTimedCache(vmssVirtualMachinesCacheTTL, getter, ss.Cloud.Config.DisableAPICallCache)
+	return azcache.NewTimedcache(vmssVirtualMachinesCacheTTL, getter)
 }
 
 // DeleteCacheForNode deletes Node from VMSS VM and VM caches.
 func (ss *ScaleSet) DeleteCacheForNode(nodeName string) error {
-	if ss.Config.DisableAPICallCache {
-		return nil
-	}
 	vmManagementType, err := ss.getVMManagementTypeByNodeName(nodeName, azcache.CacheReadTypeUnsafe)
 	if err != nil {
 		klog.Errorf("getVMManagementTypeByNodeName(%s) failed with %v", nodeName, err)
@@ -325,7 +314,7 @@ func (ss *ScaleSet) updateCache(nodeName, resourceGroupName, vmssName, instanceI
 	return nil
 }
 
-func (ss *ScaleSet) newNonVmssUniformNodesCache() (azcache.Resource, error) {
+func (ss *ScaleSet) newNonVmssUniformNodesCache() (*azcache.TimedCache, error) {
 	getter := func(key string) (interface{}, error) {
 		vmssFlexVMNodeNames := sets.New[string]()
 		vmssFlexVMProviderIDs := sets.New[string]()
@@ -379,7 +368,7 @@ func (ss *ScaleSet) newNonVmssUniformNodesCache() (azcache.Resource, error) {
 	if ss.Config.NonVmssUniformNodesCacheTTLInSeconds == 0 {
 		ss.Config.NonVmssUniformNodesCacheTTLInSeconds = consts.NonVmssUniformNodesCacheTTLDefaultInSeconds
 	}
-	return azcache.NewTimedCache(time.Duration(ss.Config.NonVmssUniformNodesCacheTTLInSeconds)*time.Second, getter, ss.Cloud.Config.DisableAPICallCache)
+	return azcache.NewTimedcache(time.Duration(ss.Config.NonVmssUniformNodesCacheTTLInSeconds)*time.Second, getter)
 }
 
 func (ss *ScaleSet) getVMManagementTypeByNodeName(nodeName string, crt azcache.AzureCacheReadType) (VMManagementType, error) {
@@ -393,16 +382,6 @@ func (ss *ScaleSet) getVMManagementTypeByNodeName(nodeName string, crt azcache.A
 		return ManagedByUnknownVMSet, err
 	}
 
-	if ss.Cloud.Config.DisableAPICallCache {
-		if cached.(NonVmssUniformNodesEntry).AvSetVMNodeNames.Has(nodeName) {
-			return ManagedByAvSet, nil
-		}
-		if cached.(NonVmssUniformNodesEntry).VMSSFlexVMNodeNames.Has(nodeName) {
-			return ManagedByVmssFlex, nil
-		}
-		return ManagedByVmssUniform, nil
-	}
-
 	cachedNodes := cached.(NonVmssUniformNodesEntry).ClusterNodeNames
 	// if the node is not in the cache, assume the node has joined after the last cache refresh and attempt to refresh the cache.
 	if !cachedNodes.Has(nodeName) {
diff --git a/pkg/provider/azure_vmssflex.go b/pkg/provider/azure_vmssflex.go
index 22889373b..2d760239c 100644
--- a/pkg/provider/azure_vmssflex.go
+++ b/pkg/provider/azure_vmssflex.go
@@ -48,11 +48,11 @@ var (
 type FlexScaleSet struct {
 	*Cloud
 
-	vmssFlexCache azcache.Resource
+	vmssFlexCache *azcache.TimedCache
 
 	vmssFlexVMNameToVmssID   *sync.Map
 	vmssFlexVMNameToNodeName *sync.Map
-	vmssFlexVMCache          azcache.Resource
+	vmssFlexVMCache          *azcache.TimedCache
 
 	// lockMap in cache refresh
 	lockMap *lockMap
diff --git a/pkg/provider/azure_vmssflex_cache.go b/pkg/provider/azure_vmssflex_cache.go
index ed44394f8..8db7b5f7f 100644
--- a/pkg/provider/azure_vmssflex_cache.go
+++ b/pkg/provider/azure_vmssflex_cache.go
@@ -34,7 +34,7 @@ import (
 	"sigs.k8s.io/cloud-provider-azure/pkg/consts"
 )
 
-func (fs *FlexScaleSet) newVmssFlexCache(ctx context.Context) (azcache.Resource, error) {
+func (fs *FlexScaleSet) newVmssFlexCache(ctx context.Context) (*azcache.TimedCache, error) {
 	getter := func(key string) (interface{}, error) {
 		localCache := &sync.Map{}
 
@@ -73,10 +73,10 @@ func (fs *FlexScaleSet) newVmssFlexCache(ctx context.Context) (azcache.Resource,
 	if fs.Config.VmssFlexCacheTTLInSeconds == 0 {
 		fs.Config.VmssFlexCacheTTLInSeconds = consts.VmssFlexCacheTTLDefaultInSeconds
 	}
-	return azcache.NewTimedCache(time.Duration(fs.Config.VmssFlexCacheTTLInSeconds)*time.Second, getter, fs.Cloud.Config.DisableAPICallCache)
+	return azcache.NewTimedcache(time.Duration(fs.Config.VmssFlexCacheTTLInSeconds)*time.Second, getter)
 }
 
-func (fs *FlexScaleSet) newVmssFlexVMCache(ctx context.Context) (azcache.Resource, error) {
+func (fs *FlexScaleSet) newVmssFlexVMCache(ctx context.Context) (*azcache.TimedCache, error) {
 	getter := func(key string) (interface{}, error) {
 		localCache := &sync.Map{}
 
@@ -123,7 +123,7 @@ func (fs *FlexScaleSet) newVmssFlexVMCache(ctx context.Context) (azcache.Resourc
 	if fs.Config.VmssFlexVMCacheTTLInSeconds == 0 {
 		fs.Config.VmssFlexVMCacheTTLInSeconds = consts.VmssFlexVMCacheTTLDefaultInSeconds
 	}
-	return azcache.NewTimedCache(time.Duration(fs.Config.VmssFlexVMCacheTTLInSeconds)*time.Second, getter, fs.Cloud.Config.DisableAPICallCache)
+	return azcache.NewTimedcache(time.Duration(fs.Config.VmssFlexVMCacheTTLInSeconds)*time.Second, getter)
 }
 
 func (fs *FlexScaleSet) getNodeNameByVMName(vmName string) (string, error) {
@@ -333,9 +333,6 @@ func (fs *FlexScaleSet) getVmssFlexByName(vmssFlexName string) (*compute.Virtual
 }
 
 func (fs *FlexScaleSet) DeleteCacheForNode(nodeName string) error {
-	if fs.Config.DisableAPICallCache {
-		return nil
-	}
 	vmssFlexID, err := fs.getNodeVmssFlexID(nodeName)
 	if err != nil {
 		klog.Errorf("getNodeVmssFlexID(%s) failed with %v", nodeName, err)
diff --git a/pkg/provider/azure_wrap.go b/pkg/provider/azure_wrap.go
index 235e475d8..ea6e555e3 100644
--- a/pkg/provider/azure_wrap.go
+++ b/pkg/provider/azure_wrap.go
@@ -201,7 +201,7 @@ func (az *Cloud) getPrivateLinkService(frontendIPConfigID *string, crt azcache.A
 	return *(cachedPLS.(*network.PrivateLinkService)), nil
 }
 
-func (az *Cloud) newVMCache() (azcache.Resource, error) {
+func (az *Cloud) newVMCache() (*azcache.TimedCache, error) {
 	getter := func(key string) (interface{}, error) {
 		// Currently InstanceView request are used by azure_zones, while the calls come after non-InstanceView
 		// request. If we first send an InstanceView request and then a non InstanceView request, the second
@@ -240,10 +240,10 @@ func (az *Cloud) newVMCache() (azcache.Resource, error) {
 	if az.VMCacheTTLInSeconds == 0 {
 		az.VMCacheTTLInSeconds = vmCacheTTLDefaultInSeconds
 	}
-	return azcache.NewTimedCache(time.Duration(az.VMCacheTTLInSeconds)*time.Second, getter, az.Config.DisableAPICallCache)
+	return azcache.NewTimedcache(time.Duration(az.VMCacheTTLInSeconds)*time.Second, getter)
 }
 
-func (az *Cloud) newLBCache() (azcache.Resource, error) {
+func (az *Cloud) newLBCache() (*azcache.TimedCache, error) {
 	getter := func(key string) (interface{}, error) {
 		ctx, cancel := getContextWithCancel()
 		defer cancel()
@@ -265,10 +265,10 @@ func (az *Cloud) newLBCache() (azcache.Resource, error) {
 	if az.LoadBalancerCacheTTLInSeconds == 0 {
 		az.LoadBalancerCacheTTLInSeconds = loadBalancerCacheTTLDefaultInSeconds
 	}
-	return azcache.NewTimedCache(time.Duration(az.LoadBalancerCacheTTLInSeconds)*time.Second, getter, az.Config.DisableAPICallCache)
+	return azcache.NewTimedcache(time.Duration(az.LoadBalancerCacheTTLInSeconds)*time.Second, getter)
 }
 
-func (az *Cloud) newNSGCache() (azcache.Resource, error) {
+func (az *Cloud) newNSGCache() (*azcache.TimedCache, error) {
 	getter := func(key string) (interface{}, error) {
 		ctx, cancel := getContextWithCancel()
 		defer cancel()
@@ -289,10 +289,10 @@ func (az *Cloud) newNSGCache() (azcache.Resource, error) {
 	if az.NsgCacheTTLInSeconds == 0 {
 		az.NsgCacheTTLInSeconds = nsgCacheTTLDefaultInSeconds
 	}
-	return azcache.NewTimedCache(time.Duration(az.NsgCacheTTLInSeconds)*time.Second, getter, az.Config.DisableAPICallCache)
+	return azcache.NewTimedcache(time.Duration(az.NsgCacheTTLInSeconds)*time.Second, getter)
 }
 
-func (az *Cloud) newRouteTableCache() (azcache.Resource, error) {
+func (az *Cloud) newRouteTableCache() (*azcache.TimedCache, error) {
 	getter := func(key string) (interface{}, error) {
 		ctx, cancel := getContextWithCancel()
 		defer cancel()
@@ -313,10 +313,10 @@ func (az *Cloud) newRouteTableCache() (azcache.Resource, error) {
 	if az.RouteTableCacheTTLInSeconds == 0 {
 		az.RouteTableCacheTTLInSeconds = routeTableCacheTTLDefaultInSeconds
 	}
-	return azcache.NewTimedCache(time.Duration(az.RouteTableCacheTTLInSeconds)*time.Second, getter, az.Config.DisableAPICallCache)
+	return azcache.NewTimedcache(time.Duration(az.RouteTableCacheTTLInSeconds)*time.Second, getter)
 }
 
-func (az *Cloud) newPIPCache() (azcache.Resource, error) {
+func (az *Cloud) newPIPCache() (*azcache.TimedCache, error) {
 	getter := func(key string) (interface{}, error) {
 		ctx, cancel := getContextWithCancel()
 		defer cancel()
@@ -338,10 +338,10 @@ func (az *Cloud) newPIPCache() (azcache.Resource, error) {
 	if az.PublicIPCacheTTLInSeconds == 0 {
 		az.PublicIPCacheTTLInSeconds = publicIPCacheTTLDefaultInSeconds
 	}
-	return azcache.NewTimedCache(time.Duration(az.PublicIPCacheTTLInSeconds)*time.Second, getter, az.Config.DisableAPICallCache)
+	return azcache.NewTimedcache(time.Duration(az.PublicIPCacheTTLInSeconds)*time.Second, getter)
 }
 
-func (az *Cloud) newPLSCache() (azcache.Resource, error) {
+func (az *Cloud) newPLSCache() (*azcache.TimedCache, error) {
 	// for PLS cache, key is LBFrontendIPConfiguration ID
 	getter := func(key string) (interface{}, error) {
 		ctx, cancel := getContextWithCancel()
@@ -379,7 +379,7 @@ func (az *Cloud) newPLSCache() (azcache.Resource, error) {
 	if az.PlsCacheTTLInSeconds == 0 {
 		az.PlsCacheTTLInSeconds = plsCacheTTLDefaultInSeconds
 	}
-	return azcache.NewTimedCache(time.Duration(az.PlsCacheTTLInSeconds)*time.Second, getter, az.Config.DisableAPICallCache)
+	return azcache.NewTimedcache(time.Duration(az.PlsCacheTTLInSeconds)*time.Second, getter)
 }
 
 func (az *Cloud) useStandardLoadBalancer() bool {
diff --git a/vendor/github.com/onsi/ginkgo/v2/CHANGELOG.md b/vendor/github.com/onsi/ginkgo/v2/CHANGELOG.md
index cb72bd6f2..f06d37740 100644
--- a/vendor/github.com/onsi/ginkgo/v2/CHANGELOG.md
+++ b/vendor/github.com/onsi/ginkgo/v2/CHANGELOG.md
@@ -1,21 +1,3 @@
-## 2.11.0
-
-In prior versions of Ginkgo specs the CLI filter flags (e.g. `--focus`, `--label-filter`) would _override_ any programmatic focus.  This behavior has proved surprising and confusing in at least the following ways:
-
-- users cannot combine programmatic filters and CLI filters to more efficiently select subsets of tests
-- CLI filters can override programmatic focus on CI systems resulting in an exit code of 0 despite the presence of (incorrectly!) committed focused specs.
-
-Going forward Ginkgo will AND all programmatic and CLI filters.  Moreover, the presence of any programmatic focused tests will always result in a non-zero exit code.
-
-This change is technically a change in Ginkgo's external contract and may require some users to make changes to successfully adopt. Specifically: it's possible some users were intentionally using CLI filters to override programmatic focus.  If this is you please open an issue so we can explore solutions to the underlying problem you are trying to solve.
-
-### Fixes
-- Programmatic focus is no longer overwrriten by CLI filters [d6bba86]
-
-### Maintenance
-- Bump github.com/onsi/gomega from 1.27.7 to 1.27.8 (#1218) [4a70a38]
-- Bump golang.org/x/sys from 0.8.0 to 0.9.0 (#1219) [97eda4d]
-
 ## 2.10.0
 
 ### Features
diff --git a/vendor/github.com/onsi/ginkgo/v2/internal/focus.go b/vendor/github.com/onsi/ginkgo/v2/internal/focus.go
index e3da7d14d..966ea0c1a 100644
--- a/vendor/github.com/onsi/ginkgo/v2/internal/focus.go
+++ b/vendor/github.com/onsi/ginkgo/v2/internal/focus.go
@@ -8,22 +8,22 @@ import (
 )
 
 /*
-If a container marked as focus has a descendant that is also marked as focus, Ginkgo's policy is to
-unmark the container's focus.  This gives developers a more intuitive experience when debugging specs.
-It is common to focus a container to just run a subset of specs, then identify the specific specs within the container to focus -
-this policy allows the developer to simply focus those specific specs and not need to go back and turn the focus off of the container:
-
-As a common example, consider:
-
-	FDescribe("something to debug", function() {
-		It("works", function() {...})
-		It("works", function() {...})
-		FIt("doesn't work", function() {...})
-		It("works", function() {...})
-	})
-
-here the developer's intent is to focus in on the `"doesn't work"` spec and not to run the adjacent specs in the focused `"something to debug"` container.
-The nested policy applied by this function enables this behavior.
+	If a container marked as focus has a descendant that is also marked as focus, Ginkgo's policy is to
+	unmark the container's focus.  This gives developers a more intuitive experience when debugging specs.
+	It is common to focus a container to just run a subset of specs, then identify the specific specs within the container to focus -
+	this policy allows the developer to simply focus those specific specs and not need to go back and turn the focus off of the container:
+
+	As a common example, consider:
+
+		FDescribe("something to debug", function() {
+			It("works", function() {...})
+			It("works", function() {...})
+			FIt("doesn't work", function() {...})
+			It("works", function() {...})
+		})
+
+	here the developer's intent is to focus in on the `"doesn't work"` spec and not to run the adjacent specs in the focused `"something to debug"` container.
+	The nested policy applied by this function enables this behavior.
 */
 func ApplyNestedFocusPolicyToTree(tree *TreeNode) {
 	var walkTree func(tree *TreeNode) bool
@@ -44,43 +44,46 @@ func ApplyNestedFocusPolicyToTree(tree *TreeNode) {
 }
 
 /*
-Ginkgo supports focussing specs using `FIt`, `FDescribe`, etc. - this is called "programmatic focus"
-It also supports focussing specs using regular expressions on the command line (`-focus=`, `-skip=`) that match against spec text and file filters (`-focus-files=`, `-skip-files=`) that match against code locations for nodes in specs.
+	Ginkgo supports focussing specs using `FIt`, `FDescribe`, etc. - this is called "programmatic focus"
+	It also supports focussing specs using regular expressions on the command line (`-focus=`, `-skip=`) that match against spec text
+	and file filters (`-focus-files=`, `-skip-files=`) that match against code locations for nodes in specs.
 
-When both programmatic and file filters are provided their results are ANDed together.  If multiple kinds of filters are provided, the file filters run first followed by the regex filters.
+	If any of the CLI flags are provided they take precedence.  The file filters run first followed by the regex filters.
 
-This function sets the `Skip` property on specs by applying Ginkgo's focus policy:
-- If there are no CLI arguments and no programmatic focus, do nothing.
-- If a spec somewhere has programmatic focus skip any specs that have no programmatic focus.
-- If there are CLI arguments parse them and skip any specs that either don't match the focus filters or do match the skip filters.
+	This function sets the `Skip` property on specs by applying Ginkgo's focus policy:
+	- If there are no CLI arguments and no programmatic focus, do nothing.
+	- If there are no CLI arguments but a spec somewhere has programmatic focus, skip any specs that have no programmatic focus.
+	- If there are CLI arguments parse them and skip any specs that either don't match the focus filters or do match the skip filters.
 
-*Note:* specs with pending nodes are Skipped when created by NewSpec.
+	*Note:* specs with pending nodes are Skipped when created by NewSpec.
 */
 func ApplyFocusToSpecs(specs Specs, description string, suiteLabels Labels, suiteConfig types.SuiteConfig) (Specs, bool) {
 	focusString := strings.Join(suiteConfig.FocusStrings, "|")
 	skipString := strings.Join(suiteConfig.SkipStrings, "|")
 
+	hasFocusCLIFlags := focusString != "" || skipString != "" || len(suiteConfig.SkipFiles) > 0 || len(suiteConfig.FocusFiles) > 0 || suiteConfig.LabelFilter != ""
+
 	type SkipCheck func(spec Spec) bool
 
 	// by default, skip any specs marked pending
 	skipChecks := []SkipCheck{func(spec Spec) bool { return spec.Nodes.HasNodeMarkedPending() }}
 	hasProgrammaticFocus := false
 
-	for _, spec := range specs {
-		if spec.Nodes.HasNodeMarkedFocus() && !spec.Nodes.HasNodeMarkedPending() {
-			hasProgrammaticFocus = true
-			break
+	if !hasFocusCLIFlags {
+		// check for programmatic focus
+		for _, spec := range specs {
+			if spec.Nodes.HasNodeMarkedFocus() && !spec.Nodes.HasNodeMarkedPending() {
+				skipChecks = append(skipChecks, func(spec Spec) bool { return !spec.Nodes.HasNodeMarkedFocus() })
+				hasProgrammaticFocus = true
+				break
+			}
 		}
 	}
 
-	if hasProgrammaticFocus {
-		skipChecks = append(skipChecks, func(spec Spec) bool { return !spec.Nodes.HasNodeMarkedFocus() })
-	}
-
 	if suiteConfig.LabelFilter != "" {
 		labelFilter, _ := types.ParseLabelFilter(suiteConfig.LabelFilter)
-		skipChecks = append(skipChecks, func(spec Spec) bool {
-			return !labelFilter(UnionOfLabels(suiteLabels, spec.Nodes.UnionOfLabels()))
+		skipChecks = append(skipChecks, func(spec Spec) bool { 
+			return !labelFilter(UnionOfLabels(suiteLabels, spec.Nodes.UnionOfLabels())) 
 		})
 	}
 
diff --git a/vendor/github.com/onsi/ginkgo/v2/types/version.go b/vendor/github.com/onsi/ginkgo/v2/types/version.go
index f895739b8..b7ed8ff79 100644
--- a/vendor/github.com/onsi/ginkgo/v2/types/version.go
+++ b/vendor/github.com/onsi/ginkgo/v2/types/version.go
@@ -1,3 +1,3 @@
 package types
 
-const VERSION = "2.11.0"
+const VERSION = "2.10.0"
diff --git a/vendor/modules.txt b/vendor/modules.txt
index 2f6eceb98..167452855 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -318,7 +318,7 @@ github.com/modern-go/reflect2
 # github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
 ## explicit
 github.com/munnerz/goautoneg
-# github.com/onsi/ginkgo/v2 v2.11.0
+# github.com/onsi/ginkgo/v2 v2.10.0
 ## explicit; go 1.18
 github.com/onsi/ginkgo/v2
 github.com/onsi/ginkgo/v2/config


Test patch:
diff --git a/.pipelines/scripts/run-e2e.sh b/.pipelines/scripts/run-e2e.sh
index 77900c839..94d7bfcde 100755
--- a/.pipelines/scripts/run-e2e.sh
+++ b/.pipelines/scripts/run-e2e.sh
@@ -24,6 +24,7 @@ export PATH="${PATH:-}:${GOPATH}/bin"
 export AKS_CLUSTER_ID="/subscriptions/${AZURE_SUBSCRIPTION_ID:-}/resourcegroups/${RESOURCE_GROUP:-}/providers/Microsoft.ContainerService/managedClusters/${CLUSTER_NAME:-}"
 
 if [[ -z "${RELEASE_PIPELINE:-}" ]]; then
+  az extension add -n aks-preview
   az login --service-principal -u "${AZURE_CLIENT_ID:-}" -p "${AZURE_CLIENT_SECRET:-}" --tenant "${AZURE_TENANT_ID:-}"
 fi
 
@@ -37,24 +38,13 @@ get_k8s_version() {
     return
   fi
   K8S_RELEASE="${K8S_RELEASE:-$(echo ${BUILD_SOURCE_BRANCH_NAME:-} | cut -f2 -d'-')}"
-  az aks get-versions -l "${AZURE_LOCATION:-}" --subscription ${AZURE_SUBSCRIPTION_ID:-} --output json > az_aks_versions
-  echo "Current AKS versions are: $(cat az_aks_versions)"
-  if [[ $(cat az_aks_versions | jq 'has("orchestrators")') == true ]]; then
-    # Old format
-    AKS_KUBERNETES_VERSION=$(cat az_aks_versions \
-      | jq -r --arg K8S_RELEASE "${K8S_RELEASE:-}" 'last(.orchestrators |.[] | select(.orchestratorVersion | startswith($K8S_RELEASE))) | .orchestratorVersion')
-    if [[ "${AKS_KUBERNETES_VERSION:-}" == "null" ]]; then
-      cat az_aks_versions | jq -r '.orchestrators[] | .orchestratorVersion' | sort -V > sorted_k8s_versions 
-      AKS_KUBERNETES_VERSION=$(cat sorted_k8s_versions | tail -1)
-    fi
-  else
-    # Preview format
-    AKS_KUBERNETES_VERSION=$(cat az_aks_versions \
-      | jq -r --arg K8S_RELEASE "${K8S_RELEASE:-}" 'last(.values[] | select(.version | startswith($K8S_RELEASE)) | .patchVersions | keys | .[])')
-    if [[ "${AKS_KUBERNETES_VERSION:-}" == "null" ]]; then
-      cat az_aks_versions | jq -r '.values[] | .patchVersions | keys | .[]' | sort -V > sorted_k8s_versions
-      AKS_KUBERNETES_VERSION=$(cat sorted_k8s_versions | tail -1)
-    fi
+  AKS_KUBERNETES_VERSION=$(az aks get-versions -l "${AZURE_LOCATION:-}" --subscription ${AZURE_SUBSCRIPTION_ID:-} --output json \
+    | jq -r --arg K8S_RELEASE "${K8S_RELEASE:-}" 'last(.orchestrators |.[] | select(.orchestratorVersion | startswith($K8S_RELEASE))) | .orchestratorVersion')
+  # Normally, K8S_RELEASE has at least one match in AKS, but in case the k8s release is the first minor version,
+  # not picked by AKS, we use the latest AKS k8s version as a try-your-best workaround.
+  if [[ "${AKS_KUBERNETES_VERSION:-}" == "null" ]]; then
+  AKS_KUBERNETES_VERSION=$(az aks get-versions -l "${AZURE_LOCATION:-}" --subscription ${AZURE_SUBSCRIPTION_ID:-} --output json \
+    | jq -r '.orchestrators |.[] |select(.upgrades | .==null) |.orchestratorVersion')
   fi
 }
 
@@ -156,7 +146,6 @@ echo "Running e2e"
 
 # TODO: We should do it in autoscaling-multipool.json
 if [[ "${CLUSTER_TYPE:-}" == "autoscaling-multipool" ]]; then
-  az extension add -n aks-preview
   az aks update --subscription ${AZURE_SUBSCRIPTION_ID:-} --resource-group "${RESOURCE_GROUP:-}" --name "${CLUSTER_NAME:-}" --cluster-autoscaler-profile balance-similar-node-groups=true
 fi
 
diff --git a/pkg/azclient/configloader/configloader_suite_test.go b/pkg/azclient/configloader/configloader_suite_test.go
new file mode 100644
index 000000000..ca484e003
--- /dev/null
+++ b/pkg/azclient/configloader/configloader_suite_test.go
@@ -0,0 +1,29 @@
+/*
+Copyright 2023 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package configloader_test
+
+import (
+	"testing"
+
+	. "github.com/onsi/ginkgo/v2"
+	. "github.com/onsi/gomega"
+)
+
+func TestConfigloader(t *testing.T) {
+	RegisterFailHandler(Fail)
+	RunSpecs(t, "Configloader Suite")
+}
diff --git a/pkg/azclient/configloader/load_test.go b/pkg/azclient/configloader/load_test.go
new file mode 100644
index 000000000..0458967c7
--- /dev/null
+++ b/pkg/azclient/configloader/load_test.go
@@ -0,0 +1,58 @@
+/*
+Copyright 2023 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package configloader_test
+
+import (
+	"context"
+
+	. "github.com/onsi/ginkgo/v2"
+	. "github.com/onsi/gomega"
+
+	"sigs.k8s.io/cloud-provider-azure/pkg/azclient"
+	"sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader"
+)
+
+var _ = Describe("Load", func() {
+	When("authconfig is selected", func() {
+		It("should return empty", func() {
+			loader, err := configloader.Load[azclient.ClientFactoryConfig](context.Background(), nil, &configloader.FileLoaderConfig{
+				FilePath: "testdata/azure.json",
+			})
+			Expect(err).NotTo(HaveOccurred())
+			Expect(loader).NotTo(BeNil())
+		})
+	})
+	When("cloud config is selected", func() {
+		It("should return empty", func() {
+			loader, err := configloader.Load[azclient.ARMClientConfig](context.Background(), nil, &configloader.FileLoaderConfig{
+				FilePath: "testdata/azure.json",
+			})
+			Expect(err).NotTo(HaveOccurred())
+			Expect(loader).NotTo(BeNil())
+		})
+	})
+
+	When("client factory config is selected", func() {
+		It("should return empty", func() {
+			loader, err := configloader.Load[azclient.ClientFactoryConfig](context.Background(), nil, &configloader.FileLoaderConfig{
+				FilePath: "testdata/azure.json",
+			})
+			Expect(err).NotTo(HaveOccurred())
+			Expect(loader).NotTo(BeNil())
+		})
+	})
+})
diff --git a/pkg/azclient/configloader/loader_empty_test.go b/pkg/azclient/configloader/loader_empty_test.go
new file mode 100644
index 000000000..35689ed82
--- /dev/null
+++ b/pkg/azclient/configloader/loader_empty_test.go
@@ -0,0 +1,49 @@
+/*
+Copyright 2023 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package configloader_test
+
+import (
+	"context"
+
+	. "github.com/onsi/ginkgo/v2"
+	. "github.com/onsi/gomega"
+
+	"sigs.k8s.io/cloud-provider-azure/pkg/azclient"
+	"sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader"
+)
+
+var _ = Describe("LoaderEmpty", func() {
+	When("config is nil", func() {
+		It("should return empty", func() {
+			loader := configloader.NewEmptyLoader[azclient.ClientFactoryConfig](nil)
+			Expect(loader).NotTo(BeNil())
+			config, err := loader.Load(context.Background())
+			Expect(err).NotTo(HaveOccurred())
+			Expect(config).NotTo(BeNil())
+		})
+	})
+	When("config is not nil", func() {
+		It("should return empty", func() {
+			loader := configloader.NewEmptyLoader[azclient.ClientFactoryConfig](&azclient.ClientFactoryConfig{SubscriptionID: "123"})
+			Expect(loader).NotTo(BeNil())
+			config, err := loader.Load(context.Background())
+			Expect(err).NotTo(HaveOccurred())
+			Expect(config).NotTo(BeNil())
+			Expect(config.SubscriptionID).To(Equal("123"))
+		})
+	})
+})
diff --git a/pkg/azclient/configloader/loader_file_test.go b/pkg/azclient/configloader/loader_file_test.go
new file mode 100644
index 000000000..5798666dc
--- /dev/null
+++ b/pkg/azclient/configloader/loader_file_test.go
@@ -0,0 +1,83 @@
+/*
+Copyright 2023 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package configloader_test
+
+import (
+	"context"
+	"os"
+
+	"github.com/golang/mock/gomock"
+	. "github.com/onsi/ginkgo/v2"
+	. "github.com/onsi/gomega"
+
+	"sigs.k8s.io/cloud-provider-azure/pkg/azclient"
+	"sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader"
+	"sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader/mock_configloader"
+)
+
+var _ = Describe("LoaderFile", func() {
+	var mockCtrl *gomock.Controller
+	var underlayLoader *mock_configloader.MockFactoryConfigLoader
+	BeforeEach(func() {
+		mockCtrl = gomock.NewController(GinkgoT())
+		underlayLoader = mock_configloader.NewMockFactoryConfigLoader(mockCtrl)
+	})
+	AfterEach(func() {
+		mockCtrl.Finish()
+	})
+	Context("configfile is not valid", func() {
+		BeforeEach(func() {
+			underlayLoader.EXPECT().Load(gomock.Any()).Return(&azclient.ClientFactoryConfig{}, nil).AnyTimes()
+		})
+		It("should return empty", func() {
+			loader := configloader.NewFileLoader[azclient.ClientFactoryConfig]("notexistfile", underlayLoader, configloader.NewYamlByteLoader[azclient.ClientFactoryConfig])
+			Expect(loader).NotTo(BeNil())
+			config, err := loader.Load(context.Background())
+			Expect(err).To(HaveOccurred())
+			Expect(config).To(BeNil())
+		})
+	})
+	Context("configfile is not nil", func() {
+		var configFile *os.File
+		BeforeEach(func() {
+			underlayLoader.EXPECT().Load(gomock.Any()).Return(&azclient.ClientFactoryConfig{SubscriptionID: "123"}, nil)
+			configFile, _ = os.CreateTemp("", "configfile")
+		})
+		AfterEach(func() {
+			os.Remove(configFile.Name())
+		})
+
+		It("should keep old config", func() {
+			loader := configloader.NewFileLoader[azclient.ClientFactoryConfig](configFile.Name(), underlayLoader, configloader.NewYamlByteLoader[azclient.ClientFactoryConfig])
+			Expect(loader).NotTo(BeNil())
+			config, err := loader.Load(context.Background())
+			Expect(err).NotTo(HaveOccurred())
+			Expect(config).NotTo(BeNil())
+			Expect(config.SubscriptionID).To(Equal("123"))
+		})
+
+		It("should load config from file", func() {
+			os.WriteFile(configFile.Name(), []byte("subscriptionId: 123"), 0644)
+			loader := configloader.NewFileLoader[azclient.ClientFactoryConfig](configFile.Name(), underlayLoader, configloader.NewYamlByteLoader[azclient.ClientFactoryConfig])
+			Expect(loader).NotTo(BeNil())
+			config, err := loader.Load(context.Background())
+			Expect(err).NotTo(HaveOccurred())
+			Expect(config).NotTo(BeNil())
+			Expect(config.SubscriptionID).To(Equal("123"))
+		})
+	})
+})
diff --git a/pkg/azclient/configloader/loader_secret_test.go b/pkg/azclient/configloader/loader_secret_test.go
new file mode 100644
index 000000000..97aedbd26
--- /dev/null
+++ b/pkg/azclient/configloader/loader_secret_test.go
@@ -0,0 +1,113 @@
+/*
+Copyright 2023 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package configloader_test
+
+import (
+	"context"
+
+	"github.com/golang/mock/gomock"
+	. "github.com/onsi/ginkgo/v2"
+	. "github.com/onsi/gomega"
+	corev1 "k8s.io/api/core/v1"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	"k8s.io/client-go/kubernetes/fake"
+
+	"sigs.k8s.io/cloud-provider-azure/pkg/azclient"
+	"sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader"
+	"sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader/mock_configloader"
+)
+
+var _ = Describe("LoaderSecret", func() {
+	var mockCtrl *gomock.Controller
+	var underlayLoader *mock_configloader.MockFactoryConfigLoader
+	var k8sConfig *configloader.K8sSecretConfig = &configloader.K8sSecretConfig{}
+	var kubeClient *fake.Clientset
+	BeforeEach(func() {
+		mockCtrl = gomock.NewController(GinkgoT())
+		underlayLoader = mock_configloader.NewMockFactoryConfigLoader(mockCtrl)
+		kubeClient = fake.NewSimpleClientset()
+	})
+	AfterEach(func() {
+		mockCtrl.Finish()
+	})
+	Context("configfile is not valid", func() {
+		BeforeEach(func() {
+			underlayLoader.EXPECT().Load(gomock.Any()).Return(&azclient.ClientFactoryConfig{}, nil).AnyTimes()
+		})
+		It("should return error", func() {
+			loader := configloader.NewK8sSecretLoader[azclient.ClientFactoryConfig](k8sConfig, kubeClient, underlayLoader, configloader.NewYamlByteLoader[azclient.ClientFactoryConfig])
+			Expect(loader).NotTo(BeNil())
+			config, err := loader.Load(context.Background())
+			Expect(err).To(HaveOccurred())
+			Expect(config).To(BeNil())
+		})
+		It("should return error", func() {
+			kubeClient.CoreV1().Secrets(configloader.DefaultCloudProviderConfigSecNamespace).Create(context.Background(), &corev1.Secret{
+				ObjectMeta: metav1.ObjectMeta{
+					Name:      configloader.DefaultCloudProviderConfigSecName,
+					Namespace: configloader.DefaultCloudProviderConfigSecNamespace,
+				},
+				Data: nil,
+			}, metav1.CreateOptions{})
+			loader := configloader.NewK8sSecretLoader[azclient.ClientFactoryConfig](k8sConfig, kubeClient, underlayLoader, configloader.NewYamlByteLoader[azclient.ClientFactoryConfig])
+			Expect(loader).NotTo(BeNil())
+			config, err := loader.Load(context.Background())
+			Expect(err).To(HaveOccurred())
+			Expect(config).To(BeNil())
+		})
+	})
+	Context("configfile is valid", func() {
+		BeforeEach(func() {
+			underlayLoader.EXPECT().Load(gomock.Any()).Return(&azclient.ClientFactoryConfig{SubscriptionID: "123"}, nil)
+		})
+		It("should not return error", func() {
+			kubeClient.CoreV1().Secrets(configloader.DefaultCloudProviderConfigSecNamespace).Create(context.Background(), &corev1.Secret{
+				ObjectMeta: metav1.ObjectMeta{
+					Name:      configloader.DefaultCloudProviderConfigSecName,
+					Namespace: configloader.DefaultCloudProviderConfigSecNamespace,
+				},
+				Data: map[string][]byte{
+					configloader.DefaultCloudProviderConfigSecKey: {},
+				},
+			}, metav1.CreateOptions{})
+			loader := configloader.NewK8sSecretLoader[azclient.ClientFactoryConfig](k8sConfig, kubeClient, underlayLoader, configloader.NewYamlByteLoader[azclient.ClientFactoryConfig])
+			Expect(loader).NotTo(BeNil())
+			config, err := loader.Load(context.Background())
+			Expect(err).NotTo(HaveOccurred())
+			Expect(config).NotTo(BeNil())
+			Expect(config.SubscriptionID).To(Equal("123"))
+		})
+		It("should load config from file", func() {
+			var content = []byte(`{"subscriptionId": "123"}`)
+			kubeClient.CoreV1().Secrets(configloader.DefaultCloudProviderConfigSecNamespace).Create(context.Background(), &corev1.Secret{
+				ObjectMeta: metav1.ObjectMeta{
+					Name:      configloader.DefaultCloudProviderConfigSecName,
+					Namespace: configloader.DefaultCloudProviderConfigSecNamespace,
+				},
+				Data: map[string][]byte{
+					configloader.DefaultCloudProviderConfigSecKey: content,
+				},
+			}, metav1.CreateOptions{})
+			loader := configloader.NewK8sSecretLoader[azclient.ClientFactoryConfig](k8sConfig, kubeClient, underlayLoader, configloader.NewYamlByteLoader[azclient.ClientFactoryConfig])
+			Expect(loader).NotTo(BeNil())
+			config, err := loader.Load(context.Background())
+			Expect(err).NotTo(HaveOccurred())
+			Expect(config).NotTo(BeNil())
+			Expect(config.SubscriptionID).To(Equal("123"))
+		})
+	})
+})
diff --git a/pkg/azclient/configloader/loader_yaml_test.go b/pkg/azclient/configloader/loader_yaml_test.go
new file mode 100644
index 000000000..dd66d0b62
--- /dev/null
+++ b/pkg/azclient/configloader/loader_yaml_test.go
@@ -0,0 +1,106 @@
+/*
+Copyright 2023 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package configloader_test
+
+import (
+	"context"
+
+	"github.com/golang/mock/gomock"
+	. "github.com/onsi/ginkgo/v2"
+	. "github.com/onsi/gomega"
+
+	"sigs.k8s.io/cloud-provider-azure/pkg/azclient"
+	"sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader"
+	"sigs.k8s.io/cloud-provider-azure/pkg/azclient/configloader/mock_configloader"
+)
+
+var _ = Describe("LoaderYaml", func() {
+	var mockCtrl *gomock.Controller
+	var underlayLoader *mock_configloader.MockFactoryConfigLoader
+	BeforeEach(func() {
+		mockCtrl = gomock.NewController(GinkgoT())
+		underlayLoader = mock_configloader.NewMockFactoryConfigLoader(mockCtrl)
+	})
+	AfterEach(func() {
+		mockCtrl.Finish()
+	})
+
+	Context("newYamlByteLoader", func() {
+		It("should return nil if no config is provided", func() {
+			Expect(configloader.NewYamlByteLoader[azclient.ClientFactoryConfig]([]byte{}, nil)).NotTo(BeNil())
+		})
+		It("should return the config if provided", func() {
+			Expect(configloader.NewYamlByteLoader[azclient.ClientFactoryConfig]([]byte{}, underlayLoader)).NotTo(BeNil())
+		})
+	})
+	Context("yaml is invalid", func() {
+		When("yaml is empty", func() {
+			It("should return empty", func() {
+				underlayLoader.EXPECT().Load(gomock.Any()).Return(&azclient.ClientFactoryConfig{}, nil)
+				loader := configloader.NewYamlByteLoader[azclient.ClientFactoryConfig]([]byte{}, underlayLoader)
+				config, err := loader.Load(context.Background())
+				Expect(err).NotTo(HaveOccurred())
+				Expect(config).NotTo(BeNil())
+			})
+		})
+	})
+	Context("yaml is valid", func() {
+		When("config is nil", func() {
+			When("yaml is not empty", func() {
+				It("should return config", func() {
+					underlayLoader.EXPECT().Load(gomock.Any()).Return(&azclient.ClientFactoryConfig{}, nil)
+					loader := configloader.NewYamlByteLoader[azclient.ClientFactoryConfig]([]byte(`subscriptionId: 123`), underlayLoader)
+					config, err := loader.Load(context.Background())
+					Expect(err).NotTo(HaveOccurred())
+					Expect(config).NotTo(BeNil())
+					Expect(config.SubscriptionID).To(Equal("123"))
+				})
+			})
+		})
+		When("config is not nil", func() {
+			It("should keep old config", func() {
+				underlayLoader.EXPECT().Load(gomock.Any()).Return(&azclient.ClientFactoryConfig{CloudProviderBackoff: true}, nil)
+				loader := configloader.NewYamlByteLoader[azclient.ClientFactoryConfig]([]byte(`subscriptionId: 123`), underlayLoader)
+				config, err := loader.Load(context.Background())
+				Expect(err).NotTo(HaveOccurred())
+				Expect(config).NotTo(BeNil())
+				Expect(config.SubscriptionID).To(Equal("123"))
+				Expect(config.CloudProviderBackoff).To(BeTrue())
+			})
+			It("should overwrite config", func() {
+				underlayLoader.EXPECT().Load(gomock.Any()).Return(&azclient.ClientFactoryConfig{SubscriptionID: "456"}, nil)
+				loader := configloader.NewYamlByteLoader[azclient.ClientFactoryConfig]([]byte(`subscriptionId: 123`), underlayLoader)
+				config, err := loader.Load(context.Background())
+				Expect(err).NotTo(HaveOccurred())
+				Expect(config).NotTo(BeNil())
+				Expect(config.SubscriptionID).To(Equal("123"))
+			})
+		})
+	})
+	Context("yaml is invalid", func() {
+		When("yaml is actually a json", func() {
+			It("should not return error", func() {
+				underlayLoader.EXPECT().Load(gomock.Any()).Return(&azclient.ClientFactoryConfig{}, nil)
+				loader := configloader.NewYamlByteLoader[azclient.ClientFactoryConfig]([]byte(`{"subscriptionId": "123"}`), underlayLoader)
+				config, err := loader.Load(context.Background())
+				Expect(err).NotTo(HaveOccurred())
+				Expect(config).NotTo(BeNil())
+				Expect(config.SubscriptionID).To(Equal("123"))
+			})
+		})
+	})
+})
diff --git a/pkg/azclient/configloader/testdata/azure.json b/pkg/azclient/configloader/testdata/azure.json
new file mode 100644
index 000000000..2df80568e
--- /dev/null
+++ b/pkg/azclient/configloader/testdata/azure.json
@@ -0,0 +1,33 @@
+{
+    "cloud": "AzurePublicCloud",
+    "tenantId": "<tenant-id>",
+    "subscriptionId": "<subscription-id>",
+    "aadClientId": "<client-id>",
+    "aadClientSecret": "<client-secret>",
+    "resourceGroup": "<resource-group-name>",
+    "location": "<location>",
+    "vmType": "<vm-type>",
+    "subnetName": "<subnet-name>",
+    "securityGroupName": "<security-group-name>",
+    "vnetName": "<vnet-name>",
+    "vnetResourceGroup": "<vnet-resource-group>",
+    "routeTableName": "<route-table-name>",
+    "primaryAvailabilitySetName": "<primary-as-name>",
+    "primaryScaleSetName": "<primary-ss-name>",
+    "cloudProviderBackoff": true,
+    "cloudProviderBackoffRetries": 6,
+    "cloudProviderBackoffExponent": 1.5,
+    "cloudProviderBackoffDuration": 5,
+    "cloudProviderBackoffJitter": 1,
+    "cloudProviderRatelimit": true,
+    "cloudProviderRateLimitQPS": 6,
+    "cloudProviderRateLimitBucket": 20,
+    "useManagedIdentityExtension": false,
+    "userAssignedIdentityID": "",
+    "cloudConfigType":"file",
+    "useInstanceMetadata": true,
+    "loadBalancerSku": "<loadbalancer-sku>",
+    "excludeMasterFromStandardLB": false,
+    "maximumLoadBalancerRuleCount": 250,
+    "tags": "a=b,c=d"
+}
\ No newline at end of file
diff --git a/pkg/azclient/factory_test.go b/pkg/azclient/factory_test.go
index 3999cff08..13785c0a4 100644
--- a/pkg/azclient/factory_test.go
+++ b/pkg/azclient/factory_test.go
@@ -26,7 +26,7 @@ import (
 var _ = Describe("Factory", func() {
 	When("config is nil", func() {
 		It("should create factory instance without painc", func() {
-			factory, err := azclient.NewClientFactory(nil, nil)
+			factory, err := azclient.NewClientFactory(nil, nil, nil)
 			Expect(err).NotTo(HaveOccurred())
 			Expect(factory).NotTo(BeNil())
 			client := factory.GetavailabilitysetclientInterface()
diff --git a/pkg/cache/azure_cache_test.go b/pkg/cache/azure_cache_test.go
index 8061d834c..d786e71ea 100644
--- a/pkg/cache/azure_cache_test.go
+++ b/pkg/cache/azure_cache_test.go
@@ -81,9 +81,9 @@ func newFakeCache(t *testing.T) (*fakeDataSource, *TimedCache) {
 		sem: *semaphore.NewWeighted(1),
 	}
 	getter := dataSource.get
-	cache, err := NewTimedCache(fakeCacheTTL, getter, false)
+	cache, err := NewTimedcache(fakeCacheTTL, getter)
 	assert.NoError(t, err)
-	return dataSource, cache.(*TimedCache)
+	return dataSource, cache
 }
 
 func TestCacheGet(t *testing.T) {
@@ -127,7 +127,7 @@ func TestCacheGetError(t *testing.T) {
 	getter := func(key string) (interface{}, error) {
 		return nil, getError
 	}
-	cache, err := NewTimedCache(fakeCacheTTL, getter, false)
+	cache, err := NewTimedcache(fakeCacheTTL, getter)
 	assert.NoError(t, err)
 
 	val, err := cache.GetWithDeepCopy("key", CacheReadTypeDefault)
diff --git a/pkg/provider/azure_instances_test.go b/pkg/provider/azure_instances_test.go
index a13334131..e7000ab66 100644
--- a/pkg/provider/azure_instances_test.go
+++ b/pkg/provider/azure_instances_test.go
@@ -245,9 +245,9 @@ func TestInstanceID(t *testing.T) {
 			t.Errorf("Test [%s] unexpected error: %v", test.name, err)
 		}
 		if test.useCustomImsCache {
-			cloud.Metadata.imsCache, err = azcache.NewTimedCache(consts.MetadataCacheTTL, func(key string) (interface{}, error) {
+			cloud.Metadata.imsCache, err = azcache.NewTimedcache(consts.MetadataCacheTTL, func(key string) (interface{}, error) {
 				return nil, fmt.Errorf("getError")
-			}, false)
+			})
 			if err != nil {
 				t.Errorf("Test [%s] unexpected error: %v", test.name, err)
 			}
@@ -640,9 +640,9 @@ func TestNodeAddresses(t *testing.T) {
 		}
 
 		if test.useCustomImsCache {
-			cloud.Metadata.imsCache, err = azcache.NewTimedCache(consts.MetadataCacheTTL, func(key string) (interface{}, error) {
+			cloud.Metadata.imsCache, err = azcache.NewTimedcache(consts.MetadataCacheTTL, func(key string) (interface{}, error) {
 				return nil, fmt.Errorf("getError")
-			}, false)
+			})
 			if err != nil {
 				t.Errorf("Test [%s] unexpected error: %v", test.name, err)
 			}
diff --git a/pkg/provider/azure_utils_test.go b/pkg/provider/azure_utils_test.go
index 6a87e5e2f..7a5db3447 100644
--- a/pkg/provider/azure_utils_test.go
+++ b/pkg/provider/azure_utils_test.go
@@ -458,13 +458,14 @@ func TestGetVMSSVMCacheKey(t *testing.T) {
 }
 
 func TestIsNodeInVMSSVMCache(t *testing.T) {
+
 	getter := func(key string) (interface{}, error) {
 		return nil, nil
 	}
-	emptyCacheEntryTimedCache, _ := azcache.NewTimedCache(fakeCacheTTL, getter, false)
+	emptyCacheEntryTimedCache, _ := azcache.NewTimedcache(fakeCacheTTL, getter)
 	emptyCacheEntryTimedCache.Set("key", nil)
 
-	cacheEntryTimedCache, _ := azcache.NewTimedCache(fakeCacheTTL, getter, false)
+	cacheEntryTimedCache, _ := azcache.NewTimedcache(fakeCacheTTL, getter)
 	syncMap := &sync.Map{}
 	syncMap.Store("node", nil)
 	cacheEntryTimedCache.Set("key", syncMap)
@@ -472,7 +473,7 @@ func TestIsNodeInVMSSVMCache(t *testing.T) {
 	tests := []struct {
 		description    string
 		nodeName       string
-		vmssVMCache    azcache.Resource
+		vmssVMCache    *azcache.TimedCache
 		expectedResult bool
 	}{
 		{
@@ -482,28 +483,26 @@ func TestIsNodeInVMSSVMCache(t *testing.T) {
 		},
 		{
 			description:    "empty CacheEntry timed cache",
-			vmssVMCache:    emptyCacheEntryTimedCache.(*azcache.TimedCache),
+			vmssVMCache:    emptyCacheEntryTimedCache,
 			expectedResult: false,
 		},
 		{
 			description:    "node name in the cache",
 			nodeName:       "node",
-			vmssVMCache:    cacheEntryTimedCache.(*azcache.TimedCache),
+			vmssVMCache:    cacheEntryTimedCache,
 			expectedResult: true,
 		},
 		{
 			description:    "node name not in the cache",
 			nodeName:       "node2",
-			vmssVMCache:    cacheEntryTimedCache.(*azcache.TimedCache),
+			vmssVMCache:    cacheEntryTimedCache,
 			expectedResult: false,
 		},
 	}
 
 	for _, test := range tests {
-		t.Run(test.description, func(t *testing.T) {
-			result := isNodeInVMSSVMCache(test.nodeName, test.vmssVMCache)
-			assert.Equal(t, test.expectedResult, result)
-		})
+		result := isNodeInVMSSVMCache(test.nodeName, test.vmssVMCache)
+		assert.Equal(t, test.expectedResult, result, test.description)
 	}
 }