Add kms referencing (#118)

michaelhtm · web-flow · commit cc8298877a2b · 2025-02-20T21:32:52.000Z
Issue [#2136](aws-controllers-k8s/community#2136) Description: Allow KMS Key ID reference by name By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
diff --git a/apis/v1alpha1/ack-generate-metadata.yaml b/apis/v1alpha1/ack-generate-metadata.yaml
@@ -1,13 +1,13 @@
 ack_generate_info:
-  build_date: "2025-02-19T22:50:30Z"
+  build_date: "2025-02-20T01:13:10Z"
   build_hash: 8b426c490ff1984d8ce5577e11d6dabe1b6373b8
   go_version: go1.24.0
   version: v0.43.1
-api_directory_checksum: d541a9148752f2234a9c2393a16d8af0f86101a9
+api_directory_checksum: e279917a9e4b26dd75502a4ef7fa8823f9844c83
 api_version: v1alpha1
 aws_sdk_go_version: v1.32.6
 generator_config_info:
-  file_checksum: 58cff89d7bab65d2de40974e88c022fe77281cac
+  file_checksum: f6d68afa724d9e1d8fb6ce58da11ed0e5635f9d5
   original_file_name: generator.yaml
 last_modification:
   reason: API generation
diff --git a/apis/v1alpha1/generator.yaml b/apis/v1alpha1/generator.yaml
@@ -60,6 +60,11 @@ resources:
       SSESpecification:
         compare:
           is_ignored: true
+      SSESpecification.KMSMasterKeyID:
+        references:
+          service_name: kms
+          resource: Key
+          path: Status.ACKResourceMetadata.ARN
     exceptions:
       errors:
         404:
diff --git a/apis/v1alpha1/types.go b/apis/v1alpha1/types.go
diff --git a/apis/v1alpha1/zz_generated.deepcopy.go b/apis/v1alpha1/zz_generated.deepcopy.go
diff --git a/cmd/controller/main.go b/cmd/controller/main.go
diff --git a/config/crd/bases/dynamodb.services.k8s.aws_tables.yaml b/config/crd/bases/dynamodb.services.k8s.aws_tables.yaml
@@ -228,6 +228,20 @@ spec:
                     type: boolean
                   kmsMasterKeyID:
                     type: string
+                  kmsMasterKeyRef:
+                    description: Reference field for KMSMasterKeyID
+                    properties:
+                      from:
+                        description: |-
+                          AWSResourceReference provides all the values necessary to reference another
+                          k8s resource for finding the identifier(Id/ARN/Name)
+                        properties:
+                          name:
+                            type: string
+                          namespace:
+                            type: string
+                        type: object
+                    type: object
                   sseType:
                     type: string
                 type: object
diff --git a/config/rbac/cluster-role-controller.yaml b/config/rbac/cluster-role-controller.yaml
@@ -46,6 +46,14 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - kms.services.k8s.aws
+  resources:
+  - keys
+  - keys/status
+  verbs:
+  - get
+  - list
 - apiGroups:
   - services.k8s.aws
   resources:
diff --git a/generator.yaml b/generator.yaml
@@ -60,6 +60,11 @@ resources:
       SSESpecification:
         compare:
           is_ignored: true
+      SSESpecification.KMSMasterKeyID:
+        references:
+          service_name: kms
+          resource: Key
+          path: Status.ACKResourceMetadata.ARN
     exceptions:
       errors:
         404:
diff --git a/go.mod b/go.mod
@@ -5,6 +5,7 @@ go 1.22.0
 toolchain go1.22.5
 
 require (
+	github.com/aws-controllers-k8s/kms-controller v1.0.21
 	github.com/aws-controllers-k8s/runtime v0.43.0
 	github.com/aws/aws-sdk-go v1.49.0
 	github.com/aws/aws-sdk-go-v2 v1.36.0
diff --git a/go.sum b/go.sum
@@ -1,3 +1,5 @@
+github.com/aws-controllers-k8s/kms-controller v1.0.21 h1:ar8gCdl/l7qbXzr48YN5tNq4vJbB5UqnRH7pAIkP3tI=
+github.com/aws-controllers-k8s/kms-controller v1.0.21/go.mod h1:tHFXV8lkrzautPPvQtPUJABPlJ9MXPRj8GB1UublGHQ=
 github.com/aws-controllers-k8s/runtime v0.43.0 h1:mCtMHO0rew84VbqotquvBirnKysbao+y2G3QI8bKZxM=
 github.com/aws-controllers-k8s/runtime v0.43.0/go.mod h1:Oy0JKvDxZMZ+SVupm4NZVqP00KLIIAMfk93KnOwlt5c=
 github.com/aws/aws-sdk-go v1.49.0 h1:g9BkW1fo9GqKfwg2+zCD+TW/D36Ux+vtfJ8guF4AYmY=
diff --git a/helm/crds/dynamodb.services.k8s.aws_tables.yaml b/helm/crds/dynamodb.services.k8s.aws_tables.yaml
@@ -228,6 +228,20 @@ spec:
                     type: boolean
                   kmsMasterKeyID:
                     type: string
+                  kmsMasterKeyRef:
+                    description: Reference field for KMSMasterKeyID
+                    properties:
+                      from:
+                        description: |-
+                          AWSResourceReference provides all the values necessary to reference another
+                          k8s resource for finding the identifier(Id/ARN/Name)
+                        properties:
+                          name:
+                            type: string
+                          namespace:
+                            type: string
+                        type: object
+                    type: object
                   sseType:
                     type: string
                 type: object
diff --git a/helm/templates/_helpers.tpl b/helm/templates/_helpers.tpl
@@ -93,6 +93,14 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - kms.services.k8s.aws
+  resources:
+  - keys
+  - keys/status
+  verbs:
+  - get
+  - list
 - apiGroups:
   - services.k8s.aws
   resources:
diff --git a/pkg/resource/table/references.go b/pkg/resource/table/references.go

Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,5 @@`
	`1`	`+github.com/aws-controllers-k8s/kms-controller v1.0.21 h1:ar8gCdl/l7qbXzr48YN5tNq4vJbB5UqnRH7pAIkP3tI=`
	`2`	`+github.com/aws-controllers-k8s/kms-controller v1.0.21/go.mod h1:tHFXV8lkrzautPPvQtPUJABPlJ9MXPRj8GB1UublGHQ=`
`1`	`3`	`github.com/aws-controllers-k8s/runtime v0.43.0 h1:mCtMHO0rew84VbqotquvBirnKysbao+y2G3QI8bKZxM=`
`2`	`4`	`github.com/aws-controllers-k8s/runtime v0.43.0/go.mod h1:Oy0JKvDxZMZ+SVupm4NZVqP00KLIIAMfk93KnOwlt5c=`
`3`	`5`	`github.com/aws/aws-sdk-go v1.49.0 h1:g9BkW1fo9GqKfwg2+zCD+TW/D36Ux+vtfJ8guF4AYmY=`