The certificate controller is responsible for the following: 1.

The certificate-publisher controller is responsible for publishing the certificate and key of the ingresscontroller for the cluster ingress domain to the "router-certs" secret in the "openshift-config-managed" namespace and for publishing the certificate for the default ingresscontroller to the "default-ingress-cert" configmap in the same namespace.

ClientCAConfigMapName returns the namespaced name for the operator-managed client CA configmap, which is a copy of the user-managed configmap from the openshift-config namespace.

CRLConfigMapName returns the namespaced name for the CRL configmap.

DefaultIngressCertConfigMapName returns the namespaced name for the default ingress cert configmap.

FeatureGateClusterConfigName returns the namespaced name of the featuregates.config.openshift.io resource of the cluster.

GatewayDNSRecordName returns the namespaced name for a DNSRecord CR associated with a Gateway.

HttpErrorCodePageConfigMapName returns the namespaced name for the errorpage configmap.

InfrastructureClusterConfigName returns the namespaced name of the infrastructure.config.openshift.io resource of the cluster.

IngressClusterConfigName returns the namespaced name of the ingress.config.openshift.io resource for the operator.

IngressClusterOperatorName returns the namespaced name of the ClusterOperator resource for the operator.

RouterCASecretName returns the namespaced name for the router CA secret.

RouterCertsGlobalSecretName returns the namespaced name for the router certs secret.

RouterDeploymentName returns the namespaced name for the router deployment.

RouterEffectiveDefaultCertificateSecretName returns the namespaced name for the in-use router default certificate secret.

RouterOperatorGeneratedDefaultCertificateSecretName returns the namespaced name for the operator-generated router default certificate secret.

RouterPodDisruptionBudgetName returns the namespaced name for the router deployment's pod disruption budget.

RsyslogConfigMapName returns the namespaced name for the rsyslog configmap.

ServiceCAConfigMapName returns the namespaced name for the configmap with the service CA bundle.

ServiceMeshControlPlaneName returns the namespaced name for a ServiceMeshControlPlane CR.

ServiceMeshSubscriptionName returns the namespaced name for a Subscription CR to install OpenShift Service Mesh.

CanaryDaemonsetLabel identifies a daemonset as an ingress canary daemonset, and the value is the name of the owning canary controller.

ControllerDeploymentHashLabel identifies an ingress controller deployment's generation.

ControllerDeploymentLabel identifies a deployment as an ingress controller deployment, and the value is the name of the owning ingress controller.

DefaultCanaryNamespace is the default namespace for the ingress canary check resources.

GlobalMachineSpecifiedConfigNamespace is the location for global config.

GlobalUserSpecifiedConfigNamespace is the namespace for configuring OpenShift.

OpenshiftOperatorNamespace is the default namespace for the openshift operator resources.

Remote worker label, used for node affinity of router deployment.