identity and secret not updated when to update control plane identity

[likakuli]

Is there an existing issue for this?

• I have searched the existing issues

Version

v1.0.3

What happened?

1. Use renew to trigger certs update for control plane identity
2. The tenant certs in the provider have been updated, but the certs in the secret in the consumer have not been updated

Relevant log output

How can we reproduce the issue?

1. Use renew to trigger certs update for control plane identity
2. The tenant certs in the provider have been updated, but the certs in the identity and secret in the consumer have not been updated

Provider or distribution

native k8s

CNI version

No response

Kernel Version

No response

Kubernetes Version

v1.24

Code of Conduct

• I agree to follow this project's Code of Conduct

[likakuli]

The root cause is that the tenant object is not handled by the CRD replicator like rslice is, so after the provider tenant certificate is updated, the consumer cannot detect it. Rslice does not have this problem because its state is synchronized back to the consumer by the CRD replicator, which contains the new certificate information. As a result, the consumer's identity and secret are updated.