library-go certrotation: allow skipping initial get in applySecret

Author: vrutkovs

pkg/operator/boundsatokensignercontroller/controller.go

@@ -110,7 +110,7 @@ func (c *BoundSATokenSignerController) ensureNextOperatorSigningSecret(ctx conte
 			return err
 		}
 
-		secret, _, err = resourceapply.ApplySecret(ctx, c.secretClient, syncCtx.Recorder(), newSecret)
+		secret, _, err = resourceapply.ApplySecret(ctx, c.secretClient, syncCtx.Recorder(), newSecret, false)
 		if err != nil {
 			return err
 		}
@@ -177,7 +177,7 @@ func (c *BoundSATokenSignerController) ensurePublicKeyConfigMap(ctx context.Cont
 
 		// Ensure the configmap is updated with the current public key
 		configMap.Data[nextKeyKey] = currPublicKey
-		configMap, _, err = resourceapply.ApplyConfigMap(ctx, c.configMapClient, syncCtx.Recorder(), configMap)
+		configMap, _, err = resourceapply.ApplyConfigMap(ctx, c.configMapClient, syncCtx.Recorder(), configMap, false)
 		if err != nil {
 			return err
 		}

pkg/operator/nodekubeconfigcontroller/nodekubeconfigcontroller.go

@@ -153,7 +153,7 @@ func ensureNodeKubeconfigs(ctx context.Context, client coreclientv1.CoreV1Interf
 	}
 	requiredSecret.Annotations[annotations.OpenShiftComponent] = "kube-apiserver"
 
-	_, _, err = resourceapply.ApplySecret(ctx, client, recorder, requiredSecret)
+	_, _, err = resourceapply.ApplySecret(ctx, client, recorder, requiredSecret, false)
 	if err != nil {
 		return err
 	}

pkg/operator/targetconfigcontroller/targetconfigcontroller.go

@@ -227,7 +227,7 @@ func manageKubeAPIServerConfig(ctx context.Context, client coreclientv1.ConfigMa
 	if err != nil {
 		return nil, false, err
 	}
-	return resourceapply.ApplyConfigMap(ctx, client, recorder, requiredConfigMap)
+	return resourceapply.ApplyConfigMap(ctx, client, recorder, requiredConfigMap, false)
 }
 
 func managePods(ctx context.Context, client coreclientv1.ConfigMapsGetter, isStartupMonitorEnabledFn func() (bool, error), recorder events.Recorder, operatorSpec *operatorv1.StaticPodOperatorSpec, imagePullSpec, operatorImagePullSpec string) (*corev1.ConfigMap, bool, error) {
@@ -263,7 +263,7 @@ func managePods(ctx context.Context, client coreclientv1.ConfigMapsGetter, isSta
 	if optionalStartupMonitor != nil {
 		configMap.Data[startupMonitorPodKey] = resourceread.WritePodV1OrDie(optionalStartupMonitor)
 	}
-	return resourceapply.ApplyConfigMap(ctx, client, recorder, configMap)
+	return resourceapply.ApplyConfigMap(ctx, client, recorder, configMap, false)
 }
 
 func generateOptionalStartupMonitorPod(isStartupMonitorEnabledFn func() (bool, error), operatorSpec *operatorv1.StaticPodOperatorSpec, operatorImagePullSpec string) (string, *corev1.Pod, error) {
@@ -312,7 +312,7 @@ func ManageClientCABundle(ctx context.Context, lister corev1listers.ConfigMapLis
 	}
 	requiredConfigMap.Annotations[annotations.OpenShiftComponent] = "kube-apiserver"
 
-	return resourceapply.ApplyConfigMap(ctx, client, recorder, requiredConfigMap)
+	return resourceapply.ApplyConfigMap(ctx, client, recorder, requiredConfigMap, false)
 }
 
 func manageKubeAPIServerCABundle(ctx context.Context, lister corev1listers.ConfigMapLister, client coreclientv1.ConfigMapsGetter, recorder events.Recorder) (*corev1.ConfigMap, bool, error) {
@@ -339,7 +339,7 @@ func manageKubeAPIServerCABundle(ctx context.Context, lister corev1listers.Confi
 	}
 	requiredConfigMap.Annotations[annotations.OpenShiftComponent] = "kube-apiserver"
 
-	return resourceapply.ApplyConfigMap(ctx, client, recorder, requiredConfigMap)
+	return resourceapply.ApplyConfigMap(ctx, client, recorder, requiredConfigMap, false)
 }
 
 func ensureKubeAPIServerTrustedCA(ctx context.Context, client coreclientv1.CoreV1Interface, recorder events.Recorder) error {