storytold/irsa-manager
2
0
Fork 0
mirror of https://github.com/storytold/irsa-manager.git synced 2026-10-24 08:15:52 +00:00
Code Issues Packages Projects Releases Wiki Activity

add role deletion

Browse Source
This commit is contained in:
kkb0318
2024-05-26 16:30:17 +09:00
parent ddd3cff935
commit 2f1c707690
2 changed files with 17 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/aws/aws_role.go
+5 -5
View File
@@ -46,7 +46,7 @@ func (a *AwsIamClient) DeleteIRSARole(ctx context.Context, r RoleManager) error
} }
_, err := a.Client.DetachRolePolicy(ctx, detachRolePolicyInput) _, err := a.Client.DetachRolePolicy(ctx, detachRolePolicyInput)
// Ignore error if the policy is already detached or the role does not exist // Ignore error if the policy is already detached or the role does not exist
if errorHandle(err, []string{"NoSuchEntity"}) != nil { if errorHandler(err, []string{"NoSuchEntity"}) != nil {
return err return err
} }
log.Printf("Policy %s detached from role %s successfully", policy, r.RoleName) log.Printf("Policy %s detached from role %s successfully", policy, r.RoleName)
@@ -55,7 +55,7 @@ func (a *AwsIamClient) DeleteIRSARole(ctx context.Context, r RoleManager) error
input := &iam.DeleteRoleInput{RoleName: aws.String(r.RoleName)} input := &iam.DeleteRoleInput{RoleName: aws.String(r.RoleName)}
_, err := a.Client.DeleteRole(ctx, input) _, err := a.Client.DeleteRole(ctx, input)
// Ignore error if the role does not exist or there are other policies that this controller does not manage // Ignore error if the role does not exist or there are other policies that this controller does not manage
if errorHandle(err, []string{"DeleteConflict", "NoSuchEntity"}) != nil { if errorHandler(err, []string{"DeleteConflict", "NoSuchEntity"}) != nil {
return err return err
} }
log.Printf("Role %s deleted successfully", r.RoleName) log.Printf("Role %s deleted successfully", r.RoleName)
@@ -94,7 +94,7 @@ func (a *AwsIamClient) CreateIRSARole(ctx context.Context, issuerMeta issuer.OID
} }
_, err = a.Client.CreateRole(context.TODO(), createRoleInput) _, err = a.Client.CreateRole(context.TODO(), createRoleInput)
if errorHandle(err, []string{"EntityAlreadyExists"}) != nil { if errorHandler(err, []string{"EntityAlreadyExists"}) != nil {
return err return err
} }
log.Printf("Role %s created successfully", r.RoleName) log.Printf("Role %s created successfully", r.RoleName)
@@ -126,8 +126,8 @@ func (a *AwsIamClient) CreateIRSARole(ctx context.Context, issuerMeta issuer.OID
return nil return nil
} }
// errorHandle handles specific errors by checking the error code against a list of codes to ignore // errorHandler handles specific errors by checking the error code against a list of codes to ignore
func errorHandle(err error, errorCodes []string) error { func errorHandler(err error, errorCodes []string) error {
if err != nil { if err != nil {
var ae smithy.APIError var ae smithy.APIError
if errors.As(err, &ae) && slices.Contains(errorCodes, ae.ErrorCode()) { if errors.As(err, &ae) && slices.Contains(errorCodes, ae.ErrorCode()) {
internal/controller/irsa_controller.go
+12 -1
View File
@@ -120,6 +120,17 @@ func (r *IRSAReconciler) reconcileDelete(ctx context.Context, obj *irsav1alpha1.
} }
serviceAccount := obj.Spec.ServiceAccount serviceAccount := obj.Spec.ServiceAccount
kubeHandler := handler.NewKubernetesHandler(kubeClient) kubeHandler := handler.NewKubernetesHandler(kubeClient)
roleManager := awsclient.RoleManager{
RoleName: obj.Spec.IamRole.Name,
Policies: obj.Spec.IamPolicies,
}
err := r.AwsClient.IamClient().DeleteIRSARole(
ctx,
roleManager,
)
if err != nil {
return err
}
for _, ns := range serviceAccount.Namespaces { for _, ns := range serviceAccount.Namespaces {
sa := manifests.NewServiceAccountBuilder().Build(types.NamespacedName{ sa := manifests.NewServiceAccountBuilder().Build(types.NamespacedName{
Name: serviceAccount.Name, Name: serviceAccount.Name,
@@ -128,7 +139,7 @@ func (r *IRSAReconciler) reconcileDelete(ctx context.Context, obj *irsav1alpha1.
kubeHandler.Append(sa) kubeHandler.Append(sa)
} }
err := kubeHandler.DeleteAll(ctx) err = kubeHandler.DeleteAll(ctx)
if err != nil { if err != nil {
return err return err
} }