[control-plane]: Use filtered informer to watch OIDC service accounts

[creydr]

Currently we're watching all service accounts in the cluster for changes and reenque the objects which have an OIDC service account assigned if something changes:

eventing-kafka-broker/control-plane/pkg/reconciler/trigger/controller.go

Lines 145 to 149 in 45c65c8

	// Reconciler Trigger when the OIDC service account changes
	serviceaccountInformer.Informer().AddEventHandler(cache.FilteringResourceEventHandler{
	FilterFunc: controller.FilterController(&eventing.Trigger{}),
	Handler: controller.HandleAll(impl.EnqueueControllerOf),
	})

and

eventing-kafka-broker/control-plane/pkg/reconciler/trigger/namespaced_controller.go

Lines 141 to 144 in 45c65c8

	serviceaccountInformer.Informer().AddEventHandler(cache.FilteringResourceEventHandler{
	FilterFunc: controller.FilterController(&eventing.Trigger{}),
	Handler: controller.HandleAll(impl.EnqueueControllerOf),
	})

Instead we should use a filtered service account informer as done in knative/eventing#7341

Additional information:

• requires [control-plane]: Support auto generation of Triggers identity service account and expose in AuthStatus #3521 done first
• requires [control-plane]: Support auto generation of KafkaSource identity service account and expose in AuthStatus #3658
• In Use filtered informer to watch OIDC service accounts knative/eventing#7527 we did this in eventing-core

[yijie-04]

/assign

[karkabbage]

/assign

[creydr]

Hello @karkabbage and @yijie-04,
any updates on this? Do you need any more information to get started with this?

[karkabbage]

Hi @creydr , thanks for checking in!
From what I understand, I'll be following mostly from #7527 to change similar files for the trigger controllers.

[creydr]

Hi @creydr , thanks for checking in! From what I understand, I'll be following mostly from #7527 to change similar files for the trigger controllers.

Hello @karkabbage,
yes. It will be similar to what was done in knative/eventing#7527