The new secret lock finalizer as getting called too often having to check secrets on every reconcile loop. Instead, move the finalizer check to be run once per generation change and upon final removal.
changed the default finalizer name back to the original name to ensure resources created on stables versions will continue to finalize correctly
added a new finalizer name that is unique per tf resource
The new secret lock finalizer as getting called too often having to check secrets on every reconcile loop. Instead, move the finalizer check to be run once per generation change and upon final removal.