Epic Goal

• update the hub cluster when certificates are changed on the managed cluster
• as the user/owner of a managed cluster I need to be able to update the certs on that cluster without access to the ACM hub and ensure that the cluster does not lose connectivity with the hub

Why is this important?

• this is important when the user of a managed cluster can be expected to make this change without having access to the hub cluster

Scenarios

1. here the customer deploys clusters with ACM to their customers, but the end customer can have to change the default certificates in use for their own reasons / security practices.

Acceptance Criteria

• when a deployed managed cluster's ingress/API certificate change happens, it is reflected to the hub cluster without any loss of communication between the two