Move OAuth metadata publishing right after route handling

As we don't yet have a cluster operator deployed by the CVO,
we need to make sure that the OAuth metadata is published as
soon as we can so that it is reflected in the API server for
the other components.

Once we get the cluster operator deployed by CVO, this can be
done at any time as CVO will need to wait for us to report
availability. Make sure to keep in mind that everything has
to be in place to report available status, then!

Author: stlaz

pkg/operator2/operator.go

@@ -182,12 +182,7 @@ func (c *authOperator) handleSync(operatorConfig *operatorv1.Authentication) err
 	}
 	resourceVersions = append(resourceVersions, route.GetResourceVersion())
 
-	serviceCA, servingCert, err := c.handleServiceCA()
-	if err != nil {
-		return err
-	}
-	resourceVersions = append(resourceVersions, serviceCA.GetResourceVersion(), servingCert.GetResourceVersion())
-
+	// make sure API server sees our metadata as soon as we've got a route with a host
 	metadata, _, err := resourceapply.ApplyConfigMap(c.configMaps, c.recorder, getMetadataConfigMap(route))
 	if err != nil {
 		return err
@@ -200,6 +195,12 @@ func (c *authOperator) handleSync(operatorConfig *operatorv1.Authentication) err
 	}
 	resourceVersions = append(resourceVersions, authConfig.GetResourceVersion())
 
+	serviceCA, servingCert, err := c.handleServiceCA()
+	if err != nil {
+		return err
+	}
+	resourceVersions = append(resourceVersions, serviceCA.GetResourceVersion(), servingCert.GetResourceVersion())
+
 	service, _, err := resourceapply.ApplyService(c.services, c.recorder, defaultService())
 	if err != nil {
 		return err