It can now only handle these in its own namespace. The fix was to add
`namespace=k3os-config-operator-system` to the RBAC markers for the CR.

This is necessary in order to get secrets and update the nodes.

This is still very much a work in progress.

I need this over in the picl-k3os-image-generator repository.

This will allow this code to be used outside of this project by
using the operator as a library.

These are not constant in the Go sense of `const` but must be treated
as constant. They’re structured so no one can update them outside of
the `pkg` package.

…ed from

For now it’s from the environment via the downward API but this might
change and the reconciler should not care when this changes.

This is another approach to handle terminal errors in a reconciler.
For the case where an object was deleted (like the node, the secret or
the K3OSConfig CR object) we have to return a nil error to the caller
so that our reconciler isn’t called anymore. I might flesh this out
more in the future with some functional options to configure the
response error further. For now, this will do.

…conciler

There’s now a couple more smaller methods to make this easier to read,
understand and test.

This removes the need for the nasty panic I added earlier.

This cuts down on the amount of parameters these need to lug around.

This way we can change the implementation of that and the rest of the
code doesn’t need to care.

This creates metadata-only watches on our secret (filtered by the
unique label it has) as well as the node the current instance is
running on. It’s pretty light on the network and the memory but boy
was this a pain to set up. 🤞 that it works correctly.

We’re using the context everywhere so enabling this should be safe.

…eases`

This feature has been on by default since v1.14 and this operator was
never deployed anywhere.

This includes about the same number of tests as the node label
reconciler but the implementation is more complex because of the
fact that taints have a lot more intricacies than labels.

This mostly deals with updates to comments and removing dead code.

This handles IsNotFound, IsGone and IsForbidden API server error
responses.