GetSelectedNamespaces returns a string array of all namespaces that match the selector for the policy.

Initialize to initialize some controller variables.

PeriodicallyExecCertificatePolicies always check status - let this be the only function in the controller.

ProcessPolicies reads each policy and looks for violations returning true if a change is found.

DefaultDuration is the default minimum duration (if one isn't specified in a policy) that a certificate can be valid for to be compliant.

EventOnParent specifies if we also want to send events to the parent policy.

KubeClient a k8s client used for k8s native resources.

NamespaceWatched defines which namespace we can watch for the Certificate policies and ignore others.

PlcChan a channel used to pass policies ready for update.

Reconciler reconciles a CertificatePolicy object.