diff --git a/Godeps/Godeps.json b/Godeps/Godeps.json
index d6b5dfe9..6c531412 100644
--- a/Godeps/Godeps.json
+++ b/Godeps/Godeps.json
@@ -280,135 +280,135 @@
 		},
 		{
 			"ImportPath": "k8s.io/api/admissionregistration/v1alpha1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/admissionregistration/v1beta1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/apps/v1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/apps/v1beta1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/apps/v1beta2",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/auditregistration/v1alpha1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/authentication/v1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/authentication/v1beta1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/authorization/v1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/authorization/v1beta1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/autoscaling/v1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/autoscaling/v2beta1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/autoscaling/v2beta2",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/batch/v1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/batch/v1beta1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/batch/v2alpha1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/certificates/v1beta1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/coordination/v1beta1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/core/v1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/events/v1beta1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/extensions/v1beta1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/imagepolicy/v1alpha1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/networking/v1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/policy/v1beta1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/rbac/v1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/rbac/v1alpha1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/rbac/v1beta1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/scheduling/v1alpha1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/scheduling/v1beta1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/settings/v1alpha1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/storage/v1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/storage/v1alpha1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/api/storage/v1beta1",
-			"Rev": "de5c567eef5cb050b5476484727b074df9185088"
+			"Rev": "4af2133c62e952aeea2bde9da9d7c61854e88e33"
 		},
 		{
 			"ImportPath": "k8s.io/apimachinery/pkg/api/apitesting",
diff --git a/kubernetes/typed/authentication/OWNERS b/kubernetes/typed/authentication/OWNERS
new file mode 100644
index 00000000..c607d2aa
--- /dev/null
+++ b/kubernetes/typed/authentication/OWNERS
@@ -0,0 +1,7 @@
+approvers:
+- sig-auth-authenticators-approvers
+reviewers:
+- sig-auth-authenticators-reviewers
+labels:
+- sig/auth
+
diff --git a/kubernetes/typed/authorization/OWNERS b/kubernetes/typed/authorization/OWNERS
new file mode 100644
index 00000000..cd0d70a0
--- /dev/null
+++ b/kubernetes/typed/authorization/OWNERS
@@ -0,0 +1,7 @@
+approvers:
+- sig-auth-authorizers-approvers
+reviewers:
+- sig-auth-authorizers-reviewers
+labels:
+- sig/auth
+
diff --git a/kubernetes/typed/rbac/OWNERS b/kubernetes/typed/rbac/OWNERS
new file mode 100644
index 00000000..cd0d70a0
--- /dev/null
+++ b/kubernetes/typed/rbac/OWNERS
@@ -0,0 +1,7 @@
+approvers:
+- sig-auth-authorizers-approvers
+reviewers:
+- sig-auth-authorizers-reviewers
+labels:
+- sig/auth
+
diff --git a/listers/authentication/OWNERS b/listers/authentication/OWNERS
new file mode 100644
index 00000000..c607d2aa
--- /dev/null
+++ b/listers/authentication/OWNERS
@@ -0,0 +1,7 @@
+approvers:
+- sig-auth-authenticators-approvers
+reviewers:
+- sig-auth-authenticators-reviewers
+labels:
+- sig/auth
+
diff --git a/listers/authorization/OWNERS b/listers/authorization/OWNERS
new file mode 100644
index 00000000..cd0d70a0
--- /dev/null
+++ b/listers/authorization/OWNERS
@@ -0,0 +1,7 @@
+approvers:
+- sig-auth-authorizers-approvers
+reviewers:
+- sig-auth-authorizers-reviewers
+labels:
+- sig/auth
+
diff --git a/listers/rbac/OWNERS b/listers/rbac/OWNERS
new file mode 100644
index 00000000..cd0d70a0
--- /dev/null
+++ b/listers/rbac/OWNERS
@@ -0,0 +1,7 @@
+approvers:
+- sig-auth-authorizers-approvers
+reviewers:
+- sig-auth-authorizers-reviewers
+labels:
+- sig/auth
+
diff --git a/pkg/apis/clientauthentication/OWNERS b/pkg/apis/clientauthentication/OWNERS
new file mode 100644
index 00000000..3b7ea1b1
--- /dev/null
+++ b/pkg/apis/clientauthentication/OWNERS
@@ -0,0 +1,7 @@
+# approval on api packages bubbles to api-approvers
+reviewers:
+- sig-auth-authenticators-approvers
+- sig-auth-authenticators-reviewers
+labels:
+- sig/auth
+
diff --git a/plugin/pkg/client/auth/OWNERS b/plugin/pkg/client/auth/OWNERS
new file mode 100644
index 00000000..c607d2aa
--- /dev/null
+++ b/plugin/pkg/client/auth/OWNERS
@@ -0,0 +1,7 @@
+approvers:
+- sig-auth-authenticators-approvers
+reviewers:
+- sig-auth-authenticators-reviewers
+labels:
+- sig/auth
+
diff --git a/tools/auth/OWNERS b/tools/auth/OWNERS
new file mode 100644
index 00000000..c607d2aa
--- /dev/null
+++ b/tools/auth/OWNERS
@@ -0,0 +1,7 @@
+approvers:
+- sig-auth-authenticators-approvers
+reviewers:
+- sig-auth-authenticators-reviewers
+labels:
+- sig/auth
+
diff --git a/util/cert/OWNERS b/util/cert/OWNERS
new file mode 100644
index 00000000..470b7a1c
--- /dev/null
+++ b/util/cert/OWNERS
@@ -0,0 +1,7 @@
+approvers:
+- sig-auth-certificates-approvers
+reviewers:
+- sig-auth-certificates-reviewers
+labels:
+- sig/auth
+
diff --git a/util/certificate/OWNERS b/util/certificate/OWNERS
index 2dce803b..470b7a1c 100644
--- a/util/certificate/OWNERS
+++ b/util/certificate/OWNERS
@@ -1,8 +1,7 @@
-reviewers:
-- mikedanese
-- liggit
-- smarterclayton
 approvers:
-- mikedanese
-- liggit
-- smarterclayton
+- sig-auth-certificates-approvers
+reviewers:
+- sig-auth-certificates-reviewers
+labels:
+- sig/auth
+