pub const SEED_SOURCE_AUTH_CONFLICT_REASON: &str = "SeedSourceAuthConflict";Expand description
reason for SEEDED_CONDITION = False when a migrate-mode seed’s
LOCAL backend and its resolved SOURCE repository disagree on workload
identity: one seeding pod runs as exactly one ServiceAccount, so one of the
two backends would authenticate as the wrong identity (or not at all).
The blob arm of this rule is an admission rejection
(validate_replication_auth, reached through validate_seed_blob_source),
but admission cannot follow a seed.from.repository reference to the source
CR’s backend — so the migrate arm is a controller-side park instead, and it
needs its own reason for kubectl kopiur doctor to explain rather than
misreport it.