…3018)

* Ensure all WatchFunc enable watch and boomarks

AllowWatchBookmarks is generally pretty safe to enable as it has been
available in Kuberentes for a long while, and the server ignores the
flag if it doesn't implement it (per docs).

Signed-off-by: Vince Prignano <[email protected]>

* Defaults to false for 0.19

Signed-off-by: Vince Prignano <[email protected]>

---------

Signed-off-by: Vince Prignano <[email protected]>
Co-authored-by: Vince Prignano <[email protected]>

This change makes the leader elector use a client that internally has
a smaller timeout than the renew deadline, which avoids a situation
where a single request timing out makes us lose the leader lease.

Signed-off-by: Vince Prignano <[email protected]>

This change is a follow-up to the one that introduces the usage of the
leader-elector with client timeout. That change was breaking because it
introduces a new option and always assumed it was set. This change makes
us only use that option if its actually set.

… of fsnotify (#3023)

* Reestablish watch for the certificate paths

* Remove fsnotify and use cached read watcher

* Simplify return

* 🐛Fix certwatcher test to be backwards compatible

---------

Co-authored-by: Maxim Muzafarov <[email protected]>

…3028-to-release-0.19

[release-0.19] 🐛 Use leader elector with client timeout

Signed-off-by: Vince Prignano <[email protected]>

🌱 add deprecated Watch() to certwatcher