removing hard coded authorizer

main.go

@@ -47,7 +47,6 @@ import (
 
 	"github.com/brancz/kube-rbac-proxy/pkg/authn"
 	"github.com/brancz/kube-rbac-proxy/pkg/authz"
-	"github.com/brancz/kube-rbac-proxy/pkg/hardcodedauthorizer"
 	"github.com/brancz/kube-rbac-proxy/pkg/proxy"
 	rbac_proxy_tls "github.com/brancz/kube-rbac-proxy/pkg/tls"
 )
@@ -202,7 +201,7 @@ func main() {
 		// prefix the authorizer with the permissions for metrics scraping which are well known.
 		// openshift RBAC policy will always allow this user to read metrics.
 		// TODO: remove this, once CMO lands static authorizer configuration.
-		hardcodedauthorizer.NewHardCodedMetricsAuthorizer(),
+		//hardcodedauthorizer.NewHardCodedMetricsAuthorizer(),
 		staticAuthorizer,
 		sarAuthorizer,
 	)

pkg/authz/auth.go

@@ -20,6 +20,7 @@ import (
 	"context"
 	"errors"
 	"fmt"
+	"k8s.io/klog/v2"
 	"time"
 
 	"k8s.io/apiserver/pkg/authorization/authorizer"
@@ -132,6 +133,7 @@ func (sa staticAuthorizer) Authorize(ctx context.Context, a authorizer.Attribute
 	// compare a against the configured static auths
 	for _, saConfig := range sa.config {
 		if saConfig.Equal(a) {
+			klog.V(2).Info("approved using static config")
 			return authorizer.DecisionAllow, "found corresponding static auth config", nil
 		}
 	}