Value Statement

The controller should watch Placements and determine ones that are referenced in MulticlusterRoleAssignments. The controller should label Placements related to MRA role assignments and watch for labeled ones to prevent reconcile storms from irrelevant Placements. As relevant PlacementDecisions get updated (clusters added or removed), the MRA controller should reconcile and dynamically update role assignments affected by PlacementDecision changes.

Definition of Done for Engineering Story Owner (Checklist)

• MRA controller labels Placements referenced in role assignments
• MRA controller watches Placements w/ label
• When Placement is updated, MRA's get reconciled that reference Placement
• End goal: cluster addition or removal from Placement adds or removes necessary role bindings from relevant ClusterPermissions

Development Complete

• The code is complete.
• Functionality is working.
• Any required downstream Docker file changes are made.

Tests Automated

• [ ] Unit/function tests have been automated and incorporated into the
  build.
• [ ] 100% automated unit/function test coverage for new or changed APIs.

Secure Design

• [ ] Security has been assessed and incorporated into your threat model.

Multidisciplinary Teams Readiness

• [ ] Create an informative documentation issue using the Customer

Portal Doc template that you can access from [The Playbook](

https://docs.google.com/document/d/1YTqpZRH54Bnn4WJ2nZmjaCoiRtqmrc2w6DdQxe_yLZ8/edit#heading=h.9fvyr2rdriby),

and ensure doc acceptance criteria is met.

• Call out this sentence as it's own action:

• [ ] Link the development issue to the doc issue.

Support Readiness

• [ ] The must-gather script has been updated.