add IRSA credential type

radius-project · Jun 21, 2024 · 39d22b7 · 39d22b7
1 parent 0b6ecc0
commit 39d22b7
Show file tree

Hide file tree

Showing 7 changed files with 117 additions and 2 deletions.
diff --git a/pkg/ucp/api/v20231001preview/zz_generated_constants.go b/pkg/ucp/api/v20231001preview/zz_generated_constants.go
diff --git a/pkg/ucp/api/v20231001preview/zz_generated_interfaces.go b/pkg/ucp/api/v20231001preview/zz_generated_interfaces.go
diff --git a/pkg/ucp/api/v20231001preview/zz_generated_models.go b/pkg/ucp/api/v20231001preview/zz_generated_models.go
diff --git a/pkg/ucp/api/v20231001preview/zz_generated_models_serde.go b/pkg/ucp/api/v20231001preview/zz_generated_models_serde.go
diff --git a/pkg/ucp/api/v20231001preview/zz_generated_polymorphic_helpers.go b/pkg/ucp/api/v20231001preview/zz_generated_polymorphic_helpers.go
diff --git a/swagger/specification/ucp/resource-manager/UCP/preview/2023-10-01-preview/openapi.json b/swagger/specification/ucp/resource-manager/UCP/preview/2023-10-01-preview/openapi.json
@@ -1649,7 +1649,8 @@
       "type": "string",
       "description": "AWS credential kind",
       "enum": [
-        "AccessKey"
+        "AccessKey",
+        "IRSA"
       ],
       "x-ms-enum": {
         "name": "AWSCredentialKind",
@@ -1659,6 +1660,11 @@
             "name": "AccessKey",
             "value": "AccessKey",
             "description": "The AWS Access Key credential"
+          },
+          {
+            "name": "IRSA",
+            "value": "IRSA",
+            "description": "The AWS IRSA credential"
           }
         ]
       }
@@ -1772,6 +1778,32 @@
         }
       }
     },
+    "AwsIRSACredentialProperties": {
+      "type": "object",
+      "description": "AWS credential storage properties",
+      "properties": {
+        "roleARN": {
+          "type": "string",
+          "format": "password",
+          "description": "RoleARN for AWS IRSA identity",
+          "x-ms-secret": true
+        },
+        "storage": {
+          "$ref": "#/definitions/CredentialStorageProperties",
+          "description": "The storage properties"
+        }
+      },
+      "required": [
+        "roleARN",
+        "storage"
+      ],
+      "allOf": [
+        {
+          "$ref": "#/definitions/AwsCredentialProperties"
+        }
+      ],
+      "x-ms-discriminator-value": "IRSA"
+    },
     "AwsPlaneResource": {
       "type": "object",
       "description": "The AWS plane resource",

diff --git a/typespec/UCP/aws-credentials.tsp b/typespec/UCP/aws-credentials.tsp
@@ -63,6 +63,9 @@ model AwsPlaneNameParameter {
 enum AWSCredentialKind {
   @doc("The AWS Access Key credential")
   AccessKey,
+  @doc("The AWS IRSA credential")
+  IRSA,
+
 }
 
 @discriminator("kind")
@@ -93,6 +96,19 @@ model AwsAccessKeyCredentialProperties extends AwsCredentialProperties {
   storage: CredentialStorageProperties;
 }
 
+@doc("AWS credential storage properties")
+model AwsIRSACredentialProperties extends AwsCredentialProperties {
+  @doc("Access Key kind")
+  kind: AWSCredentialKind.IRSA;
+
+  @doc("RoleARN for AWS IRSA identity")
+  @secret
+  roleARN: string;
+
+  @doc("The storage properties")
+  storage: CredentialStorageProperties;
+}
+
 alias AwsCredentialBaseParameter<TResource> = CredentialBaseParameters<
   TResource,
   AwsPlaneNameParameter