Merge pull request #51818 from liggitt/controller-roles
Automatic merge from submit-queue (batch tested with PRs 51819, 51706, 51761, 51818, 51500)
Build controller roles/bindings on demand
As we start to have alpha gated features that involve policy changes, we need to conditionally include roles/bindings in policy based on feature enablement.
Examples:
* https://github.com/kubernetes/kubernetes/pull/49727/files#diff-a066255fca075e2bdcfe045e7ca352f7
* https://github.com/kubernetes/kubernetes/pull/51202/files#diff-eee450e334a11e0b683ce965f584c3c4R137
This moves the policy building from an init() func to be on demand, so that feature gates set at the point we set up the post-start reconcile take effect