The MCOA addon has the responsibility of creating resources necessary for authenticating spoke workloads with the hub cluster. However, once these resources are created they are not tracked by the addon to be reconciled. So if for instance, cert-manager updates a secret then this secret will not trigger an update to the ManifestWorks resource.

Acceptance Criteria

1. When the fleet administrator updates any Secret or ConfigMap referenced by a ClusterLogForwarder packaged in a ManifestWorks, then the addon should reconcile a new version of the ManifestWorks resources.
2. When the fleet administrator updates any Secret of ConfigMap referenced by a OpenTelemetryCollector packaged in a ManifestWorks, then the addon should reconcile a new version of the ManifestWorks resources.

Developer Notes:

1. Design choice is to write a custom controller-runtime reconcile to watch on secrets and configmaps in dedicated namespaces (per spoke or open-cluster-management-obervability) and referenced by CLF and/or OTELCollector CRDs
2. The addon manager provides a Trigger method to reconcile ManifestWorks per spoke.