• pre-req: need to ensure all resource generation happens in a singleton controller (due to clock skew); add a new operation to ensure only a singleton controller runs for resource generation
• add a delay (user configurable), default is tbd. maximum is 30 secs. Note: delay is only needed for the first VAPB
• deployment strategy for this singleton controller might impact the delay calculation to generate the VAPB resource
• singleton should add timestamp for “createAfter” OR a simple flag to allow creation of VAPB on the CT status; then reschedule the reconcile for the VAPB generation

Originally posted by @ritazh in #3501 (comment)