[Hrishikeshkashyap]

Description

cert-controller manages a specific Secret containing the webhook TLS certificate. However, the current Secret cache watches all Secrets in the namespace, even though the rotator already knows the exact Secret it needs through SecretKey.

This change filters the Secret cache using metadata.name, so it watches only the configured certificate Secret.

Why

This enables consumers to apply least-privilege RBAC and restrict Secret access using resourceNames, instead of requiring access to all Secrets in the namespace.

The filter applies only to Secrets, so the existing webhook configuration informers remain unaffected.

As a secondary benefit, filtering the Secret cache also avoids caching and processing unrelated Secrets, reducing unnecessary watch traffic and cache usage.

Changes

• Filter the Secret cache using cr.SecretKey.Name.
• Keep webhook configuration caching unchanged.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 62.21%. Comparing base (190188d) to head (205f369).
⚠️ Report is 245 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master     #590      +/-   ##
==========================================
+ Coverage   57.16%   62.21%   +5.04%     
==========================================
  Files           1        1              
  Lines         572      487      -85     
==========================================
- Hits          327      303      -24     
+ Misses        181      118      -63     
- Partials       64       66       +2     

Flag	Coverage Δ
unittests	62.21% <100.00%> (+5.04%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Hrishikeshkashyap]

@JaydipGabani Could you please take a look at this PR when you get a chance? Thanks!