fix: delete all provider resources

Client proxy defines among which types we will search for objects with
the desired labels. Currently this list is not full and we skip some
types, like ClusterRole or ClusterRole bindings. It leads to the fact
that objects of these types stay in the system when their provider is
deleted.

This PR updates the list of resource types we need to scan.

internal/controller/client_proxy.go

@@ -76,6 +76,8 @@ func (k *controllerProxy) ListResources(labels map[string]string, namespaces ...
  {Kind: "Secret", Namespaced: true},
  {Kind: "ConfigMap", Namespaced: true},
  {Kind: "Service", Namespaced: true},
+ {Kind: "ServiceAccount", Namespaced: true},
+ {Kind: "Namespace"},
  },
  },
  {
@@ -88,8 +90,30 @@ func (k *controllerProxy) ListResources(labels map[string]string, namespaces ...
  {
  GroupVersion: "admissionregistration.k8s.io/v1",
  APIResources: []metav1.APIResource{
- {Kind: "ValidatingWebhookConfiguration", Namespaced: true},
- {Kind: "MutatingWebhookConfiguration", Namespaced: true},
+ {Kind: "ValidatingWebhookConfiguration"},
+ {Kind: "MutatingWebhookConfiguration"},
+ },
+ },
+ {
+ GroupVersion: "apiextensions.k8s.io/v1",
+ APIResources: []metav1.APIResource{
+ {Kind: "CustomResourceDefinition"},
+ },
+ },
+ {
+ GroupVersion: "cert-manager.io/v1",
+ APIResources: []metav1.APIResource{
+ {Kind: "Certificate", Namespaced: true},
+ {Kind: "Issuer", Namespaced: true},
+ },
+ },
+ {
+ GroupVersion: "rbac.authorization.k8s.io/v1",
+ APIResources: []metav1.APIResource{
+ {Kind: "Role", Namespaced: true},
+ {Kind: "RoleBinding", Namespaced: true},
+ {Kind: "ClusterRole"},
+ {Kind: "ClusterRoleBinding"},
  },
  },
  }