From 68ea574041d86d49a44e27c5f1eb1b02e1e64db2 Mon Sep 17 00:00:00 2001
From: Yang Le <yangle@redhat.com>
Date: Tue, 27 Jan 2026 16:42:40 +0800
Subject: [PATCH] update klusterlet crd in chart (#1355)

Signed-off-by: Yang Le <yangle@redhat.com>
---
 ...cluster-management.io_klusterlets.crd.yaml | 31 ++++++++++++++++++-
 1 file changed, 30 insertions(+), 1 deletion(-)

diff --git a/deploy/klusterlet/chart/klusterlet/crds/0000_00_operator.open-cluster-management.io_klusterlets.crd.yaml b/deploy/klusterlet/chart/klusterlet/crds/0000_00_operator.open-cluster-management.io_klusterlets.crd.yaml
index 5513eed4b..413635333 100644
--- a/deploy/klusterlet/chart/klusterlet/crds/0000_00_operator.open-cluster-management.io_klusterlets.crd.yaml
+++ b/deploy/klusterlet/chart/klusterlet/crds/0000_00_operator.open-cluster-management.io_klusterlets.crd.yaml
@@ -185,6 +185,35 @@ spec:
                 description: RegistrationConfiguration contains the configuration
                   of registration
                 properties:
+                  addOnKubeClientRegistrationDriver:
+                    description: This provides driver details required to register
+                      add-ons with hub for kubeClient type
+                    properties:
+                      authType:
+                        description: |-
+                          AuthType is the authentication driver used for add-on registration.
+                          Possible values are csr and token.
+                          Currently, this field only affects kubeClient type add-on registration. The csr type add-on registration always uses csr driver.
+                          In the future, this may be extended to customize authentication for csr type add-on registration as well.
+                        enum:
+                        - csr
+                        - token
+                        type: string
+                      token:
+                        description: Token contains the configuration for token-based
+                          registration.
+                        properties:
+                          expirationSeconds:
+                            description: |-
+                              ExpirationSeconds represents the seconds of a token to expire.
+                              If it is not set or 0, the default duration will be used, which is
+                              the same as the certificate expiration set by the hub cluster's
+                              kube-controller-manager (typically 1 year).
+                              The minimum valid value for production use is 3600 (1 hour), though smaller values are allowed for testing.
+                            format: int64
+                            type: integer
+                        type: object
+                    type: object
                   bootstrapKubeConfigs:
                     description: |-
                       BootstrapKubeConfigs defines the ordered list of bootstrap kubeconfigs. The order decides which bootstrap kubeconfig to use first when rebootstrap.
@@ -324,7 +353,7 @@ spec:
                     type: integer
                   registrationDriver:
                     description: This provides driver details required to register
-                      with hub
+                      klusterlet agent with hub
                     properties:
                       authType:
                         default: csr