forked from giantswarm/aws-operator
/
create.go
74 lines (59 loc) · 1.84 KB
/
create.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
package kmskey
import (
"context"
"github.com/aws/aws-sdk-go/aws"
"github.com/aws/aws-sdk-go/service/kms"
"github.com/giantswarm/microerror"
"github.com/giantswarm/aws-operator/service/awsconfig/v2/key"
)
func (r *Resource) ApplyCreateChange(ctx context.Context, obj, createChange interface{}) error {
customObject, err := key.ToCustomObject(obj)
if err != nil {
return microerror.Mask(err)
}
createInput, err := toKMSKeyState(createChange)
if err != nil {
return microerror.Mask(err)
}
if createInput.KeyAlias != "" {
key, err := r.awsClients.KMS.CreateKey(&kms.CreateKeyInput{})
if err != nil {
return microerror.Mask(err)
}
if _, err := r.awsClients.KMS.CreateAlias(&kms.CreateAliasInput{
AliasName: aws.String(createInput.KeyAlias),
TargetKeyId: key.KeyMetadata.Arn,
}); err != nil {
return microerror.Mask(err)
}
if _, err := r.awsClients.KMS.EnableKeyRotation(&kms.EnableKeyRotationInput{
KeyId: key.KeyMetadata.KeyId,
}); err != nil {
return microerror.Mask(err)
}
if _, err := r.awsClients.KMS.TagResource(&kms.TagResourceInput{
KeyId: key.KeyMetadata.KeyId,
Tags: getKMSTags(customObject),
}); err != nil {
return microerror.Mask(err)
}
r.logger.LogCtx(ctx, "debug", "creating KMS key: created")
} else {
r.logger.LogCtx(ctx, "debug", "creating KMS key: already created")
}
return nil
}
func (r *Resource) newCreateChange(ctx context.Context, obj, currentState, desiredState interface{}) (interface{}, error) {
currentKeyState, err := toKMSKeyState(currentState)
if err != nil {
return nil, microerror.Mask(err)
}
desiredKeyState, err := toKMSKeyState(desiredState)
if err != nil {
return nil, microerror.Mask(err)
}
if currentKeyState.KeyAlias == "" || desiredKeyState.KeyAlias != currentKeyState.KeyAlias {
return desiredKeyState, nil
}
return KMSKeyState{}, nil
}