CreateCerts creates and returns a CA certificate and certificate and key for the server.

SetDefaults simply leverages apis.Defaultable to set defaults.

Validate checks whether "new" and "old" implement HasImmutableFields and checks them, it then delegates validation to apis.Validatable on "new".

AdmissionController implements the external admission webhook for validation of pilot configuration.

ControllerOptions contains the configuration for the webhook.

GenericCRD is the interface definition that allows us to perform the generic CRD actions like deciding whether to increment generation and so forth.

ResourceCallback defines a signature for resource specific (Route, Configuration, etc.) handlers that can validate and mutate an object.

ResourceDefaulter defines a signature for resource specific (Route, Configuration, etc.) handlers that can set defaults on an object.