Add feature gate to disable in-tree credential providers

pkg/credentialprovider/plugins.go

@@ -21,7 +21,9 @@ import (
 	"sort"
 	"sync"
 
+	utilfeature "k8s.io/apiserver/pkg/util/feature"
 	"k8s.io/klog/v2"
+	"k8s.io/kubernetes/pkg/features"
 )
 
 // All registered credential providers.
@@ -44,6 +46,12 @@ func RegisterCredentialProvider(name string, provider DockerConfigProvider) {
 	providers[name] = provider
 }
 
+// AreLegacyCloudCredentialProvidersDisabled checks if the legacy in-tree cloud
+// credential providers have been disabled.
+func AreLegacyCloudCredentialProvidersDisabled() bool {
+	return utilfeature.DefaultFeatureGate.Enabled(features.DisableKubeletCloudCredentialProviders)
+}
+
 // NewDockerKeyring creates a DockerKeyring to use for resolving credentials,
 // which draws from the set of registered credential providers.
 func NewDockerKeyring() DockerKeyring {