Export the certwatcher package

[ncdc]

Consumers might want to react to externally-managed + rotated certificates, and the certwatcher package handles this, but it is an internal package. Could we consider exporting it?

[fejta-bot]

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

Send feedback to sig-contributor-experience at kubernetes/community.
/lifecycle stale

[christopherhein]

/remove-lifecycle stale

[christopherhein]

@vincepri @pwittrock is this something controller-runtime would be interested in?

[vincepri]

The code was originally proposed by @bison in 2d952ac — I don't see anything in there that particularly worries me to expose it as non-internal package.

@alvaroaleman @DirectXMan12 thoughts?

[alvaroaleman]

yeah sgtm (looking at the code makes me want to replace the mutex with a RW mutex though).

[christopherhein]

Awesome, I was thinking this would be nice to be able to use this with the Runnable interfaces in the manager you could configure reloading like we have with internal webhooks.