feat: add remove secret command

(cherry picked from commit 63d44f5e88)

chore: fix for lint

(cherry picked from commit 21edcd0582)

fix: correct lint issues

(cherry picked from commit 0c87856b2c)

fix: Resolve conversations

(cherry picked from commit 9ee5ab3a70)
This commit is contained in:
yufei.li
2022-11-17 00:26:11 +08:00
committed by Mauren Berti
parent e3b9afcfaa
commit 0cfafddacc
3 changed files with 180 additions and 0 deletions

View File

@@ -0,0 +1,92 @@
// Copyright 2019 The Kubernetes Authors.
// SPDX-License-Identifier: Apache-2.0
package remove
import (
"errors"
"fmt"
"log"
"strings"
"github.com/spf13/cobra"
"sigs.k8s.io/kustomize/api/konfig"
"sigs.k8s.io/kustomize/api/types"
"sigs.k8s.io/kustomize/kustomize/v4/commands/internal/kustfile"
"sigs.k8s.io/kustomize/kyaml/filesys"
)
type removeSecretOptions struct {
secretNamesToRemove []string
}
// newCmdRemoveSecret remove the name of a file containing a secret to the kustomization file.
func newCmdRemoveSecret(fSys filesys.FileSystem) *cobra.Command {
var o removeSecretOptions
cmd := &cobra.Command{
Use: "secret",
Short: "Removes specified secret" +
konfig.DefaultKustomizationFileName(),
Example: `
remove secret my-secret
`,
RunE: func(cmd *cobra.Command, args []string) error {
err := o.Validate(args)
if err != nil {
return err
}
return o.RunRemoveSecret(fSys)
},
}
return cmd
}
// Validate validates removeSecret command.
func (o *removeSecretOptions) Validate(args []string) error {
if len(args) == 0 {
return errors.New("must specify a Secret name")
}
if len(args) > 1 {
return fmt.Errorf("too many arguments: %s; to provide multiple Secrets to remove, please separate Secret names by commas", args)
}
o.secretNamesToRemove = strings.Split(args[0], ",")
return nil
}
// RunRemoveSecret runs Secret command (do real work).
func (o *removeSecretOptions) RunRemoveSecret(fSys filesys.FileSystem) error {
mf, err := kustfile.NewKustomizationFile(fSys)
if err != nil {
return fmt.Errorf("could not read kustomization file: %w", err)
}
m, err := mf.Read()
if err != nil {
return fmt.Errorf("could not read kustomization file: %w", err)
}
foundSecrets := make(map[string]struct{})
newSecrets := make([]types.SecretArgs, 0, len(m.SecretGenerator))
for _, currentSecret := range m.SecretGenerator {
if kustfile.StringInSlice(currentSecret.Name, o.secretNamesToRemove) {
foundSecrets[currentSecret.Name] = struct{}{}
continue
}
newSecrets = append(newSecrets, currentSecret)
}
for _, name := range o.secretNamesToRemove {
if _, found := foundSecrets[name]; !found {
log.Printf("secret %s doesn't exist in kustomization file", name)
}
}
m.SecretGenerator = newSecrets
err = mf.Write(m)
if err != nil {
return fmt.Errorf("secret cannot write back to file, got %w", err)
}
return nil
}