const anonymousUser … const unauthenticatedGroup … type Authenticator … func (a *Authenticator) AuthenticateRequest(req *http.Request) (*authenticator.Response, bool, error) { … } // NewAuthenticator returns a new anonymous authenticator. // When conditions is empty all requests are authenticated as anonymous. // When conditions are non-empty only those requests that match the at-least one // condition are authenticated as anonymous. func NewAuthenticator(conditions []apiserver.AnonymousAuthCondition) authenticator.Request { … }