Develop

[malagant]

When you forgot to add the edit role to system:serviceaccount::letsencrypt the watcher script still tries to process an empty list of routes instead of giving a hint about the error. This solution might be only a temporary fix, but works nice in our environment. ;)

[ibotty]

I agree to have more explicit error handling. I don't like calling watch_routes twice though.