From 99749dd0d680831651a95aeb5ec9ac0c6a938961 Mon Sep 17 00:00:00 2001
From: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
Date: Mon, 5 May 2025 07:15:17 +0200
Subject: [PATCH] fix: check for client set initialization for service account
 token creation

Signed-off-by: Gergely Brautigam <182850+Skarlso@users.noreply.github.com>
---
 internal/listener/kubernetes/listener.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/internal/listener/kubernetes/listener.go b/internal/listener/kubernetes/listener.go
index 1fc7d82..317a0d5 100644
--- a/internal/listener/kubernetes/listener.go
+++ b/internal/listener/kubernetes/listener.go
@@ -199,6 +199,10 @@ func (h *Handler[T]) fetchSecretKey(ctx context.Context, secretKeySelector *v1al
 }
 
 func (h *Handler[T]) serviceAccountToken(ctx context.Context, serviceAccountSelector *v1alpha1.ServiceAccountSelector) ([]byte, error) {
+	if h.CtrlClientSet == nil {
+		return nil, errors.New("controller client not initialized; creating account token is unavailable")
+	}
+
 	if serviceAccountSelector == nil {
 		return nil, errors.New("service account selector is nil")
 	}