Do not make ANONYMOUS superuser when with none authentication

[scholzj]

Type of Change

• Task

Description

Originally, when the internal cluster authentication was disabled, we automatically configure the ANONYMOUS user as superuser. Looking back, I think that was a mistake as it is disaster in waiting (e.g. similarly to the watched namespaces CVE). So this PR rolls that back. If users want to use the type: none authentication with authorization, they should make the ANONYMOUS user explicitly to make sure they are aware of this.

Checklist

• Update documentation
• Make sure all tests pass
• Try your changes inside a Kubernetes cluster, not just from unit tests

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 80.85%. Comparing base (40768d3) to head (03898d0).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@             Coverage Diff              @@
##               main   #13142      +/-   ##
============================================
- Coverage     80.88%   80.85%   -0.03%     
+ Complexity     6737     6736       -1     
============================================
  Files           355      355              
  Lines         23072    23071       -1     
  Branches       3148     3148              
============================================
- Hits          18662    18655       -7     
- Misses         3183     3187       +4     
- Partials       1227     1229       +2     

Files with missing lines	Coverage Δ
...cluster/model/KafkaBrokerConfigurationBuilder.java	94.72% <ø> (-0.02%)	⬇️

... and 3 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[scholzj]

/gha run pipeline=regression clusterSecurityEncryption=none clusterSecurityAuthentication=none

[github-actions]

⏳ System test verification started: link
Internal cluster security: encryption none, authentication none

The following 6 job(s) will be executed:

• regression-brokers-and-security-amd64 (cncf-ubuntu-8-32-x86)
• regression-operators-amd64 (cncf-ubuntu-8-32-x86)
• regression-operands-amd64 (cncf-ubuntu-8-32-x86)
• regression-brokers-and-security-arm64 (cncf-ubuntu-8-32-arm)
• regression-operators-arm64 (cncf-ubuntu-8-32-arm)
• regression-operands-arm64 (cncf-ubuntu-8-32-arm)

Tests will start after successful build completion.

[github-actions]

❌ System test verification failed: link