ContainerImage.Pinniped/internal/controller
Matt Moyer 657488fe90
Create CredentialIssuer at install, not runtime.
Previously, our controllers would automatically create a CredentialIssuer with a singleton name. The helpers we had for this also used "raw" client access and did not take advantage of the informer cache pattern.

With this change, the CredentialIssuer is always created at install time in the ytt YAML. The controllers now only update the existing CredentialIssuer status, and they do so using the informer cache as much as possible.

This change is targeted at only the kubecertagent controller to start. The impersonatorconfig controller will be updated in a following PR along with other changes.

Signed-off-by: Matt Moyer <moyerm@vmware.com>
2021-05-19 17:15:25 -05:00
..
apicerts dynamiccert: split into serving cert and CA providers 2021-03-15 12:24:07 -04:00
authenticator impersonator: add support for service account token authentication 2021-04-29 17:30:35 -04:00
conditionsutil Split package upstreamwatchers into four packages 2021-05-12 14:00:39 -07:00
impersonatorconfig Fix lint error 2021-03-30 14:53:26 -07:00
issuerconfig Create CredentialIssuer at install, not runtime. 2021-05-19 17:15:25 -05:00
kubecertagent Create CredentialIssuer at install, not runtime. 2021-05-19 17:15:25 -05:00
supervisorconfig Cache ResourceVersion of the validated bind Secret in memory 2021-05-13 15:22:36 -07:00
supervisorstorage Merge branch 'main' into initial_ldap 2021-05-11 11:09:37 -07:00
controller_test.go Clean this test up a trivial amount using require.Implementsf(). 2020-12-17 08:38:16 -06:00
utils.go Upstream Watcher Controller Syncs less often by adjusting its filters 2020-12-18 15:41:18 -08:00