// In starter.go
configClient, err := configclient.NewForConfig(cc.KubeConfig)
configInformers := configinformers.NewSharedInformerFactory(configClient, 10*time.Minute)
configInformers.Config().V1().APIServers().Informer()
configInformers.Start(ctx.Done())

// In target_config_reconciler.go
func (c *TargetConfigReconciler) getClusterTLSProfile(ctx context.Context) (*configv1.TLSSecurityProfile, error) {
    apiServer, err := c.apiServerLister.Get("cluster")
    if err != nil {
        if errors.IsNotFound(err) {
            return nil, nil // Use default
        }
        return nil, err
    }
    return apiServer.Spec.TLSSecurityProfile, nil
}