selectively move to client-go packages

plugin/pkg/auth/authenticator/request/headerrequest/BUILD

@@ -8,19 +8,6 @@ load(
     "go_test",
 )
 
-go_library(
-    name = "go_default_library",
-    srcs = ["requestheader.go"],
-    tags = ["automanaged"],
-    deps = [
-        "//pkg/auth/authenticator:go_default_library",
-        "//pkg/util/cert:go_default_library",
-        "//pkg/util/sets:go_default_library",
-        "//plugin/pkg/auth/authenticator/request/x509:go_default_library",
-        "//vendor:k8s.io/apiserver/pkg/authentication/user",
-    ],
-)
-
 go_test(
     name = "go_default_test",
     srcs = ["requestheader_test.go"],
@@ -28,3 +15,16 @@ go_test(
     tags = ["automanaged"],
     deps = ["//vendor:k8s.io/apiserver/pkg/authentication/user"],
 )
+
+go_library(
+    name = "go_default_library",
+    srcs = ["requestheader.go"],
+    tags = ["automanaged"],
+    deps = [
+        "//pkg/auth/authenticator:go_default_library",
+        "//plugin/pkg/auth/authenticator/request/x509:go_default_library",
+        "//vendor:k8s.io/apiserver/pkg/authentication/user",
+        "//vendor:k8s.io/client-go/pkg/util/cert",
+        "//vendor:k8s.io/client-go/pkg/util/sets",
+    ],
+)

plugin/pkg/auth/authenticator/request/headerrequest/requestheader.go

@@ -24,9 +24,9 @@ import (
 	"strings"
 
 	"k8s.io/apiserver/pkg/authentication/user"
+	utilcert "k8s.io/client-go/pkg/util/cert"
+	"k8s.io/client-go/pkg/util/sets"
 	"k8s.io/kubernetes/pkg/auth/authenticator"
-	utilcert "k8s.io/kubernetes/pkg/util/cert"
-	"k8s.io/kubernetes/pkg/util/sets"
 	x509request "k8s.io/kubernetes/plugin/pkg/auth/authenticator/request/x509"
 )
 

plugin/pkg/auth/authenticator/request/union/BUILD

@@ -8,17 +8,6 @@ load(
     "go_test",
 )
 
-go_library(
-    name = "go_default_library",
-    srcs = ["union.go"],
-    tags = ["automanaged"],
-    deps = [
-        "//pkg/auth/authenticator:go_default_library",
-        "//pkg/util/errors:go_default_library",
-        "//vendor:k8s.io/apiserver/pkg/authentication/user",
-    ],
-)
-
 go_test(
     name = "go_default_test",
     srcs = ["unionauth_test.go"],
@@ -26,3 +15,14 @@ go_test(
     tags = ["automanaged"],
     deps = ["//vendor:k8s.io/apiserver/pkg/authentication/user"],
 )
+
+go_library(
+    name = "go_default_library",
+    srcs = ["union.go"],
+    tags = ["automanaged"],
+    deps = [
+        "//pkg/auth/authenticator:go_default_library",
+        "//vendor:k8s.io/apiserver/pkg/authentication/user",
+        "//vendor:k8s.io/client-go/pkg/util/errors",
+    ],
+)

plugin/pkg/auth/authenticator/request/union/union.go

@@ -20,8 +20,8 @@ import (
 	"net/http"
 
 	"k8s.io/apiserver/pkg/authentication/user"
+	utilerrors "k8s.io/client-go/pkg/util/errors"
 	"k8s.io/kubernetes/pkg/auth/authenticator"
-	utilerrors "k8s.io/kubernetes/pkg/util/errors"
 )
 
 // unionAuthRequestHandler authenticates requests using a chain of authenticator.Requests

plugin/pkg/auth/authenticator/request/x509/BUILD

@@ -8,6 +8,19 @@ load(
     "go_test",
 )
 
+go_test(
+    name = "go_default_test",
+    srcs = ["x509_test.go"],
+    data = glob(["testdata/*"]),
+    library = ":go_default_library",
+    tags = ["automanaged"],
+    deps = [
+        "//pkg/auth/authenticator:go_default_library",
+        "//vendor:k8s.io/apiserver/pkg/authentication/user",
+        "//vendor:k8s.io/client-go/pkg/util/sets",
+    ],
+)
+
 go_library(
     name = "go_default_library",
     srcs = [
@@ -17,22 +30,9 @@ go_library(
     tags = ["automanaged"],
     deps = [
         "//pkg/auth/authenticator:go_default_library",
-        "//pkg/util/errors:go_default_library",
-        "//pkg/util/sets:go_default_library",
         "//vendor:github.com/golang/glog",
         "//vendor:k8s.io/apiserver/pkg/authentication/user",
-    ],
-)
-
-go_test(
-    name = "go_default_test",
-    srcs = ["x509_test.go"],
-    data = glob(["testdata/*"]),
-    library = ":go_default_library",
-    tags = ["automanaged"],
-    deps = [
-        "//pkg/auth/authenticator:go_default_library",
-        "//pkg/util/sets:go_default_library",
-        "//vendor:k8s.io/apiserver/pkg/authentication/user",
+        "//vendor:k8s.io/client-go/pkg/util/errors",
+        "//vendor:k8s.io/client-go/pkg/util/sets",
     ],
 )

plugin/pkg/auth/authenticator/request/x509/x509.go

@@ -26,9 +26,9 @@ import (
 	"github.com/golang/glog"
 
 	"k8s.io/apiserver/pkg/authentication/user"
+	utilerrors "k8s.io/client-go/pkg/util/errors"
+	"k8s.io/client-go/pkg/util/sets"
 	"k8s.io/kubernetes/pkg/auth/authenticator"
-	utilerrors "k8s.io/kubernetes/pkg/util/errors"
-	"k8s.io/kubernetes/pkg/util/sets"
 )
 
 // UserConversion defines an interface for extracting user info from a client certificate chain

plugin/pkg/auth/authenticator/request/x509/x509_test.go

@@ -29,8 +29,8 @@ import (
 	"time"
 
 	"k8s.io/apiserver/pkg/authentication/user"
+	"k8s.io/client-go/pkg/util/sets"
 	"k8s.io/kubernetes/pkg/auth/authenticator"
-	"k8s.io/kubernetes/pkg/util/sets"
 )
 
 const (