deploy/resource_customizations/networking.gke.io/ManagedCertificate/health.lua

local hs = {}

if obj.status ~= nil then
  if obj.status.domainStatus ~= nil then
    for i, domainStatus in ipairs(obj.status.domainStatus) do
      if domainStatus.status == "FailedNotVisible" then
        hs.status = "Degraded"
        hs.message = "At least one certificate has failed to be provisioned"
        return hs
      end
    end
  end
end

if obj.status ~= nil and obj.status.certificateStatus == "Active" then
  hs.status = "Healthy"
  hs.message = "All certificates are active"
  return hs
end

hs.status = "Progressing"
hs.message = "At least one certificate is still being provisioned"
return hs