Merge pull request #137162 from aojea/component_helpers

update component-helpers policies for dependencies

staging/publishing/OWNERS

@@ -6,6 +6,7 @@ approvers:
   - dims
   - justaugustus
 reviewers:
+  - aojea
   - sttts
   - cpanato
   - dims

staging/publishing/import-restrictions.yaml

@@ -278,6 +278,8 @@
   - k8s.io/klog
   - k8s.io/csi-translation-lib
 
+# To prevent dependency leaking into downstream components and to maintain a
+# minimal footprint, do NOT add any new dependencies to this module
 - baseImportPath: "./staging/src/k8s.io/component-helpers"
   allowedImports:
   - k8s.io/api

staging/src/k8s.io/component-helpers/README.md

@@ -10,7 +10,7 @@ Yet, still with a high level of abstraction.
 
 `k8s.io/component-base` staging repository was considered as a candidate for hosting the helpers. Although, since the helpers are not required by the core components, the repository was deemed unsuitable.
 
-The only allowed kubernetes dependencies are `k8s.io/apimachinery`, `k8s.io/api` and `k8s.io/client-go`.
+To maintain a minimal footprint and prevent dependency bloat, no external direct dependencies are allowed.
 
 ## Purpose