Addon certificate tracking and more addon status condition types

addon/v1alpha1/0000_01_addon.open-cluster-management.io_managedclusteraddons.crd.yaml

@@ -137,6 +137,18 @@ spec:
                     description: RegistrationConfig defines the configuration of the addon agent to register to hub. The Klusterlet agent will create a csr for the addon agent with the registrationConfig.
                     type: object
                     properties:
+                      certificateStatus:
+                        description: certificateStatus actively tracks the status of the certificate used by the addon.
+                        type: object
+                        properties:
+                          expiringTimestamp:
+                            description: expiringTimestamp records the next time certificate will expire.
+                            type: string
+                            format: date-time
+                          lastRenewedTimestamp:
+                            description: lastRenewedTimestamp records the last timestamp when we approved/renewed certificates for the addon agents.
+                            type: string
+                            format: date-time
                       signerName:
                         description: signerName is the name of signer that addon agent will use to create csr.
                         type: string

addon/v1alpha1/types_managedclusteraddon.go

@@ -58,6 +58,18 @@ type RegistrationConfig struct {
 	//
 	// +optional
 	Subject Subject `json:"subject,omitempty"`
+
+	// certificateStatus actively tracks the status of the certificate used by the addon.
+	CertificateStatus *RegistrationConfigCertificateStatus `json:"certificateStatus,omitempty"`
+}
+
+type RegistrationConfigCertificateStatus struct {
+	// lastRenewedTimestamp records the last timestamp when we approved/renewed certificates
+	// for the addon agents.
+	LastRenewedTimestamp metav1.Time `json:"lastRenewedTimestamp,omitempty"`
+
+	// expiringTimestamp records the next time certificate will expire.
+	ExpiringTimestamp metav1.Time `json:"expiringTimestamp,omitempty"`
 }
 
 // Subject is the user subject of the addon agent to be registered to the hub.
@@ -126,6 +138,16 @@ const (
 	// ManagedClusterAddOnConditionDegraded represents that the addon agent is providing degraded service on
 	// the managed cluster.
 	ManagedClusterAddOnConditionDegraded string = "Degraded"
+
+	// ManagedClusterAddOConditionTypeRegistrationApplied represents that whether the addon agent finished
+	// its registration into the hub control plane, including finishing CSR approval, signing, permission
+	// configuration, etc.
+	ManagedClusterAddOConditionTypeRegistrationApplied = "RegistrationApplied"
+
+	// ManagedClusterAddOConditionTypeManifestApplied represents that whether the corresponding resources are
+	// applied to the hub cluster as a ManifestWork resource. Note that it doesn't imply the applied ManifestWork
+	// is successfully delivered/executed by the work agent.
+	ManagedClusterAddOConditionTypeManifestApplied = "ManifestApplied"
 )
 
 // ObjectReference contains enough information to let you inspect or modify the referred object.