certificate

var (
	// EnableV1Beta1CSRCompatibility is a condition variable that enables/disables
	// the compatibility with V1beta1 CSR api. If enabled, the CSR approver
	// controller wil watch and approve over the V1beta1 CSR api instead of V1.
	// Setting the variable to false will make the CSR signer controller strictly
	// requires V1 CSR api.
	//
	// The distinction between V1 and V1beta1 CSR is that the latter doesn't have
	// a "signerName" field which is used for discriminating external certificate
	// signers. With that being said, under V1beta1 CSR api once a CSR object is
	// approved, it will be immediately signed by the CSR signer controller from
	// kube-controller-manager. So the csr signer controller will be permanently
	// disabled to avoid conflict with Kubernetes' original CSR signer.
	//
	// TODO: Remove this condition gate variable after V1beta1 CSR api fades away
	//       in the Kubernetes community. The code blocks supporting V1beta1 CSR
	//       should also be removed.
	EnableV1Beta1CSRCompatibility = true
)