This change updates the apicerts controllers to return an error when
they cannot successfully complete their Sync func. i.e. `return nil`
is reserved for cases where the controller has fully completed its
job with no errors. This makes it clear when a controller has
wedged - i.e. it is waiting on some other controller or process to
perform some action before it can complete. The controller lib's
queue will exponentially back off and thus there is no need to be
concerned with returning an error indefinitely or infinite log spam.
Even when the kubelet throws away container logs, it will be clear
what controllers are wedged based on the last hour or so of logs.
Signed-off-by: Monis Khan <mok@vmware.com>
7e21b9b78d