code: func NewCloudControllerManagerOptions() (*CloudControllerManagerOptions, error) {
  	componentConfig, err := NewDefaultComponentConfig(DefaultInsecureCloudControllerManagerPort)
  	if err != nil {
  		return nil, err
  	}
  
  	s := CloudControllerManagerOptions{
  		Generic:         cmoptions.NewGenericControllerManagerConfigurationOptions(&componentConfig.Generic),
  		KubeCloudShared: cmoptions.NewKubeCloudSharedOptions(&componentConfig.KubeCloudShared),
  		ServiceController: &cmoptions.ServiceControllerOptions{
  			ServiceControllerConfiguration: &componentConfig.ServiceController,
  		},
  		SecureServing: apiserveroptions.NewSecureServingOptions().WithLoopback(),
  		InsecureServing: (&apiserveroptions.DeprecatedInsecureServingOptions{
  			BindAddress: net.ParseIP(componentConfig.Generic.Address),
  			BindPort:    int(componentConfig.Generic.Port),
  			BindNetwork: "tcp",
  		}).WithLoopback(),
  		Authentication:            apiserveroptions.NewDelegatingAuthenticationOptions(),
  		Authorization:             apiserveroptions.NewDelegatingAuthorizationOptions(),
  		NodeStatusUpdateFrequency: componentConfig.NodeStatusUpdateFrequency,
  	}
  
  	s.Authentication.RemoteKubeConfigFileOptional = true
  	s.Authorization.RemoteKubeConfigFileOptional = true
  	s.Authorization.AlwaysAllowPaths = []string{"/healthz"}
  
  	// Set the PairName but leave certificate directory blank to generate in-memory by default
  	s.SecureServing.ServerCert.CertDirectory = ""
  	s.SecureServing.ServerCert.PairName = "cloud-controller-manager"
  	s.SecureServing.BindPort = ports.CloudControllerManagerPort
  
  	return &s, nil
  }
docs: // NewCloudControllerManagerOptions creates a new ExternalCMServer with a default config.