chore: Handle secrets on spec (#55)

demeter-run · Aug 9, 2024 · dd4a850 · dd4a850
1 parent 5ac3578
commit dd4a850
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/bootstrap/crds/main.tf b/bootstrap/crds/main.tf
@@ -55,6 +55,10 @@ resource "kubernetes_manifest" "customresourcedefinition_cardanonodeports_demete
               "properties" = {
                 "spec" = {
                   "properties" = {
+                    "authToken" = {
+                      "nullable" = true
+                      "type" = "string"
+                    }
                     "network" = {
                       "type" = "string"
                     }

diff --git a/operator/src/controller.rs b/operator/src/controller.rs
@@ -35,6 +35,7 @@ pub struct CardanoNodePortSpec {
     pub network: String,
     pub version: String,
     pub throughput_tier: String,
+    pub auth_token: Option<String>,
 }
 
 #[derive(Deserialize, Serialize, Clone, Default, Debug, JsonSchema)]
@@ -55,7 +56,10 @@ impl Context {
 }
 
 async fn reconcile(crd: Arc<CardanoNodePort>, ctx: Arc<Context>) -> Result<Action> {
-    let key = build_api_key(&crd).await?;
+    let key = match &crd.spec.auth_token {
+        Some(key) => key.clone(),
+        None => build_api_key(&crd).await?,
+    };
 
     let status = CardanoNodePortStatus {
         authenticated_endpoint_url: build_hostname(&key),