ApplyAPIService merges objectmeta and requires apiservice coordinates.

ApplyClusterRole merges objectmeta, requires rules, aggregation rules are not allowed for now.

ApplyClusterRoleBinding merges objectmeta, requires subjects and role refs TODO on non-matching roleref, delete and recreate.

ApplyConfigMap merges objectmeta, requires data.

ApplyDeployment merges objectmeta and requires matching generation.

ApplyNamespace merges objectmeta, does not worry about anything else.

ApplyRole merges objectmeta, requires rules.

ApplyRoleBinding merges objectmeta, requires subjects and role refs TODO on non-matching roleref, delete and recreate.

ApplySecret merges objectmeta, requires data.

ApplyService merges objectmeta and requires TODO, since this cannot determine whether changes are due to legitimate actors (api server) or illegitimate ones (users), we cannot update TODO I've special cased the selector for now.

ApplyServiceAccount merges objectmeta, does not worry about anything else.