oauthendpoints: filter only relevant configmaps and secrets to the OA…

…uthRouteCheckController

pkg/controllers/oauthendpoints/oauth_endpoints_controller.go

@@ -57,6 +57,16 @@ func NewOAuthRouteCheckController(
 		return getOAuthRouteTLSConfig(cmLister, secretLister, ingressLister, systemCABundle)
 	}
 
+	filterFunc := factory.NamesFilter(
+		// NS: openshift-authentication
+		"oauth-openshift",
+		"v4-0-config-system-router-certs",
+		"v4-0-config-system-custom-router-certs",
+
+		// NS: openshift-config-managed
+		"default-ingress-cert",
+	)
+
 	return endpointaccessible.NewEndpointAccessibleController(
 		"OAuthServerRoute",
 		operatorClient,
@@ -67,6 +77,7 @@ func NewOAuthRouteCheckController(
 			routeInformer,
 			ingressInformer,
 		},
+		filterFunc,
 		recorder,
 		wait.Jitter(time.Minute, 5.0))
 }
@@ -93,6 +104,7 @@ func NewOAuthServiceCheckController(
 			kubeInformersForTargetNS.Core().V1().ConfigMaps().Informer(),
 			kubeInformersForTargetNS.Core().V1().Services().Informer(),
 		},
+		nil,
 		recorder,
 		wait.Jitter(time.Minute, 1.0))
 }
@@ -120,6 +132,7 @@ func NewOAuthServiceEndpointsCheckController(
 			kubeInformersForTargetNS.Core().V1().Endpoints().Informer(),
 			kubeInformersForTargetNS.Core().V1().ConfigMaps().Informer(),
 		},
+		nil,
 		recorder,
 		wait.Jitter(time.Minute, 1.0))
 }

pkg/libs/endpointaccessible/endpoint_accessible_controller.go

@@ -36,6 +36,7 @@ func NewEndpointAccessibleController(
 	endpointListFn EndpointListFunc,
 	getTLSConfigFn EndpointTLSConfigFunc,
 	triggers []factory.Informer,
+	triggersFilterFunc factory.EventFilterFunc,
 	recorder events.Recorder,
 	resyncInterval time.Duration,
 ) factory.Controller {
@@ -49,7 +50,7 @@ func NewEndpointAccessibleController(
 	}
 
 	return factory.New().
-		WithInformers(triggers...).
+		WithFilteredEventsInformers(triggersFilterFunc, triggers...).
 		WithInformers(operatorClient.Informer()).
 		WithSync(c.sync).
 		ResyncEvery(resyncInterval).