add(): add CRD for GCPAuthEngineConfig

PROJECT

@@ -425,4 +425,4 @@ resources:
     defaulting: true
     validation: true
     webhookVersion: v1
-version: "3"
+version: "3"

api/v1alpha1/webhook_suite_test.go

@@ -235,7 +235,7 @@ var _ = BeforeSuite(func() {
 	Expect(err).NotTo(HaveOccurred())
 
 	err = (&GCPAuthEngineConfig{}).SetupWebhookWithManager(mgr)
-	Expect(err).NotTo(HaveOccurred())
+	Expect(err).NotTo(HaveOccurred()) 
 
 	err = (&GCPAuthEngineRole{}).SetupWebhookWithManager(mgr)
 	Expect(err).NotTo(HaveOccurred())

config/crd/bases/redhatcop.redhat.io_gcpauthengineconfigs.yaml

@@ -363,4 +363,4 @@ spec:
     served: true
     storage: true
     subresources:
-      status: {}
+      status: {}

config/rbac/role.yaml

@@ -287,9 +287,6 @@ rules:
   - get
   - patch
   - update
-- apiGroups:
-  - redhatcop.redhat.io
-  resources:
   - githubsecretengineconfigs
   verbs:
   - create

config/samples/kustomization.yaml

@@ -32,5 +32,4 @@ resources:
 - redhatcop_v1alpha1_azureauthenginerole.yaml
 - redhatcop_v1alpha1_gcpauthengineconfig.yaml
 - redhatcop_v1alpha1_gcpauthenginerole.yaml
-
 #+kubebuilder:scaffold:manifestskustomizesamples

config/webhook/manifests.yaml

@@ -89,9 +89,9 @@ webhooks:
     service:
       name: webhook-service
       namespace: system
-      path: /mutate-redhatcop-redhat-io-v1alpha1-databasesecretengineconfig
+      path: /mutate-redhatcop-redhat-io-v1alpha1-gcpauthengineconfig
   failurePolicy: Fail
-  name: mdatabasesecretengineconfig.kb.io
+  name: mgcpauthengineconfig.kb.io
   rules:
   - apiGroups:
     - redhatcop.redhat.io
@@ -100,7 +100,26 @@ webhooks:
     operations:
     - CREATE
     resources:
-    - databasesecretengineconfigs
+    - gcpauthengineconfigs
+  sideEffects: None
+- admissionReviewVersions:
+  - v1
+  clientConfig:
+    service:
+      name: webhook-service
+      namespace: system
+      path: /mutate-redhatcop-redhat-io-v1alpha1-gcpauthenginerole
+  failurePolicy: Fail
+  name: mgcpauthenginerole.kb.io
+  rules:
+  - apiGroups:
+    - redhatcop.redhat.io
+    apiVersions:
+    - v1alpha1
+    operations:
+    - CREATE
+    resources:
+    - gcpauthengineroles
   sideEffects: None
 - admissionReviewVersions:
   - v1
@@ -179,6 +198,26 @@ webhooks:
     resources:
     - gcpauthengineroles
   sideEffects: None
+- admissionReviewVersions:
+  - v1
+  clientConfig:
+    service:
+      name: webhook-service
+      namespace: system
+      path: /mutate-redhatcop-redhat-io-v1alpha1-gcpauthengineconfig
+  failurePolicy: Fail
+  name: mgcpauthengineconfig.kb.io
+  rules:
+  - apiGroups:
+    - redhatcop.redhat.io
+    apiVersions:
+    - v1alpha1
+    operations:
+    - CREATE
+    - UPDATE
+    resources:
+    - gcpauthengineconfigs
+  sideEffects: None
 - admissionReviewVersions:
   - v1
   clientConfig:

docs/auth-engines.md

@@ -492,7 +492,6 @@ spec:
 
  The endpoint value provided for a given key has the form of scheme://host:port. The scheme:// and :port portions of the endpoint value are optional.
 
-
 ## GCPAuthEngineRole
  The `GCPAuthEngineRole` CRD allows a user to register a role in an authentication engine mount of type [Google Cloud](https://developer.hashicorp.com/vault/api-docs/auth/gcp#create-update-role).
 

main.go

@@ -165,10 +165,12 @@ func main() {
 		setupLog.Error(err, "unable to create controller", "controller", "GCPAuthEngineConfig")
 		os.Exit(1)
 	}
+
 	if err = (&controllers.GCPAuthEngineRoleReconciler{ReconcilerBase: vaultresourcecontroller.NewFromManager(mgr, "GCPAuthEngineRole")}).SetupWithManager(mgr); err != nil {
 		setupLog.Error(err, "unable to create controller", "controller", "GCPAuthEngineRole")
 		os.Exit(1)
 	}
+
 	if err = (&controllers.VaultSecretReconciler{ReconcilerBase: vaultresourcecontroller.NewFromManager(mgr, "VaultSecret")}).SetupWithManager(mgr); err != nil {
 		setupLog.Error(err, "unable to create controller", "controller", "VaultSecret")
 		os.Exit(1)
@@ -307,6 +309,7 @@ func main() {
 			setupLog.Error(err, "unable to create webhook", "webhook", "GCPAuthEngineConfig")
 			os.Exit(1)
 		}
+
 		if err = (&redhatcopv1alpha1.GCPAuthEngineRole{}).SetupWebhookWithManager(mgr); err != nil {
 			setupLog.Error(err, "unable to create webhook", "webhook", "GCPAuthEngineRole")
 			os.Exit(1)