XXX: note that this used to be used as: - api.SPIAccessTokenBindingErrorReasonTokenSync originally in secretHandler.Sync.

XXX: note that this used to be used as: - api.SPIAccessTokenBindingErrorReasonServiceAccountUnavailable in ensureReferencedServiceAccount -> serviceAccountHandler.Sync.

XXX: note that this used to be used as: - api.SPIAccessTokenBindingErrorReasonServiceAccountUpdate in ensureReferencedServiceAccount -> serviceAccountHandler.Sync - api.SPIAccessTokenBindingErrorReasonTokenSync in ensureReferencedServiceAccount -> serviceAccountHandler.Sync.

CheckPoint is an opaque struct representing the state of the dependent objects at some point in time.

Dependents represent the secret and the list of the service accounts that are linked to a deployment target of a dependents handler.

DependentsHandler is taking care of the dependent objects of the provided target.

ObjectMarker is used to mark or unmark some object with a link to the target.

SecretDataGetter is an abstraction that, given the provided key, is able to obtain the secret data from some kind of backing secret storage and prepare it in some way or fashion to be ready for persisting as the Data field of a Kubernetes secret.

SecretDeploymentTarget, together with SecretBuilder and ObjectMarker, represents a method of obtaining enough information for the DependentsHandler to be able to deliver the secrets and service accounts to some "target" place in (some) K8s cluster.