mirror of
https://github.com/kubernetes-sigs/kustomize.git
synced 2026-06-12 09:24:23 +00:00
feat: add remove secret command
(cherry picked from commit63d44f5e88) chore: fix for lint (cherry picked from commit21edcd0582) fix: correct lint issues (cherry picked from commit0c87856b2c) fix: Resolve conversations (cherry picked from commit9ee5ab3a70)
This commit is contained in:
92
kustomize/commands/edit/remove/removesecret.go
Normal file
92
kustomize/commands/edit/remove/removesecret.go
Normal file
@@ -0,0 +1,92 @@
|
||||
// Copyright 2019 The Kubernetes Authors.
|
||||
// SPDX-License-Identifier: Apache-2.0
|
||||
|
||||
package remove
|
||||
|
||||
import (
|
||||
"errors"
|
||||
"fmt"
|
||||
"log"
|
||||
"strings"
|
||||
|
||||
"github.com/spf13/cobra"
|
||||
"sigs.k8s.io/kustomize/api/konfig"
|
||||
"sigs.k8s.io/kustomize/api/types"
|
||||
"sigs.k8s.io/kustomize/kustomize/v4/commands/internal/kustfile"
|
||||
"sigs.k8s.io/kustomize/kyaml/filesys"
|
||||
)
|
||||
|
||||
type removeSecretOptions struct {
|
||||
secretNamesToRemove []string
|
||||
}
|
||||
|
||||
// newCmdRemoveSecret remove the name of a file containing a secret to the kustomization file.
|
||||
func newCmdRemoveSecret(fSys filesys.FileSystem) *cobra.Command {
|
||||
var o removeSecretOptions
|
||||
|
||||
cmd := &cobra.Command{
|
||||
Use: "secret",
|
||||
Short: "Removes specified secret" +
|
||||
konfig.DefaultKustomizationFileName(),
|
||||
Example: `
|
||||
remove secret my-secret
|
||||
`,
|
||||
RunE: func(cmd *cobra.Command, args []string) error {
|
||||
err := o.Validate(args)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
return o.RunRemoveSecret(fSys)
|
||||
},
|
||||
}
|
||||
return cmd
|
||||
}
|
||||
|
||||
// Validate validates removeSecret command.
|
||||
func (o *removeSecretOptions) Validate(args []string) error {
|
||||
if len(args) == 0 {
|
||||
return errors.New("must specify a Secret name")
|
||||
}
|
||||
if len(args) > 1 {
|
||||
return fmt.Errorf("too many arguments: %s; to provide multiple Secrets to remove, please separate Secret names by commas", args)
|
||||
}
|
||||
o.secretNamesToRemove = strings.Split(args[0], ",")
|
||||
return nil
|
||||
}
|
||||
|
||||
// RunRemoveSecret runs Secret command (do real work).
|
||||
func (o *removeSecretOptions) RunRemoveSecret(fSys filesys.FileSystem) error {
|
||||
mf, err := kustfile.NewKustomizationFile(fSys)
|
||||
if err != nil {
|
||||
return fmt.Errorf("could not read kustomization file: %w", err)
|
||||
}
|
||||
|
||||
m, err := mf.Read()
|
||||
if err != nil {
|
||||
return fmt.Errorf("could not read kustomization file: %w", err)
|
||||
}
|
||||
|
||||
foundSecrets := make(map[string]struct{})
|
||||
|
||||
newSecrets := make([]types.SecretArgs, 0, len(m.SecretGenerator))
|
||||
for _, currentSecret := range m.SecretGenerator {
|
||||
if kustfile.StringInSlice(currentSecret.Name, o.secretNamesToRemove) {
|
||||
foundSecrets[currentSecret.Name] = struct{}{}
|
||||
continue
|
||||
}
|
||||
newSecrets = append(newSecrets, currentSecret)
|
||||
}
|
||||
|
||||
for _, name := range o.secretNamesToRemove {
|
||||
if _, found := foundSecrets[name]; !found {
|
||||
log.Printf("secret %s doesn't exist in kustomization file", name)
|
||||
}
|
||||
}
|
||||
m.SecretGenerator = newSecrets
|
||||
|
||||
err = mf.Write(m)
|
||||
if err != nil {
|
||||
return fmt.Errorf("secret cannot write back to file, got %w", err)
|
||||
}
|
||||
return nil
|
||||
}
|
||||
Reference in New Issue
Block a user