Add support to set/change log retention period (#4)

Issue #, if available:

Description of changes:
This change adds the support to set/change the retention period for log-groups. By default, when log group is created, log retention period is set to 'never expire'. So, it is necessary to allow to change it.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Author: nnbu

apis/v1alpha1/ack-generate-metadata.yaml

@@ -1,13 +1,13 @@
 ack_generate_info:
-  build_date: "2023-05-24T17:19:40Z"
-  build_hash: 6542e04cc357215c91df94e747e3d412fb26df97
-  go_version: go1.19.4
-  version: v0.26.1-3-g6542e04
-api_directory_checksum: 399f9b6fb5675139a83fc87a26271448ad5d9584
+  build_date: "2023-10-10T03:24:22Z"
+  build_hash: 7445de38211639a12e79992d154adab6e60f01fd
+  go_version: go1.21.1
+  version: v0.27.1-1-g7445de3
+api_directory_checksum: 1c09a2cd5e3e19b4be39e68fc87d33aaf0dccd1e
 api_version: v1alpha1
 aws_sdk_go_version: v1.44.263
 generator_config_info:
-  file_checksum: c92ac565fa72636728117afcc963ee28a6ebd4e4
+  file_checksum: ad8a73bf74d9e8606bc2db81635b9d58b0a1c851
   original_file_name: generator.yaml
 last_modification:
   reason: API generation

apis/v1alpha1/generator.yaml

@@ -12,6 +12,8 @@ resources:
     exceptions:
       terminal_codes:
         - InvalidParameterException
+    reconcile:
+      requeue_on_success_seconds: 60
     fields:
       Name:
         type: string
@@ -21,6 +23,10 @@ resources:
           resource: Key
           service_name: kms
           path: Status.ACKResourceMetadata.ARN
+      RetentionDays:
+        from:
+          operation: PutRetentionPolicy
+          path: RetentionInDays
       CreationTime:
         is_read_only: true
         from:
@@ -50,10 +56,19 @@ resources:
       operations:
         DescribeLogGroups:
           input_fields:
-            LogGroupNamePattern: Name
+            LogGroupNamePrefix: Name
         CreateLogGroup:
           input_fields:
             LogGroupName: Name
         DeleteLogGroup:
           input_fields:
             LogGroupName: Name
+    hooks:
+      delta_pre_compare:
+        code: customPreCompare(delta, a, b)
+      sdk_create_post_set_output:
+        template_path: hooks/log_group/sdk_create_post_set_output.go.tpl
+      sdk_read_many_post_set_output:
+        template_path: hooks/log_group/sdk_read_many_post_set_output.go.tpl
+    update_operation:
+      custom_method_name: customUpdateLogGroup

apis/v1alpha1/log_group.go

@@ -29,14 +29,16 @@ spec:
         - "$(AWS_REGION)"
         - --aws-endpoint-url
         - "$(AWS_ENDPOINT_URL)"
-        - --enable-development-logging
-        - "$(ACK_ENABLE_DEVELOPMENT_LOGGING)"
+        - --enable-development-logging=$(ACK_ENABLE_DEVELOPMENT_LOGGING)
         - --log-level
         - "$(ACK_LOG_LEVEL)"
         - --resource-tags
         - "$(ACK_RESOURCE_TAGS)"
         - --watch-namespace
         - "$(ACK_WATCH_NAMESPACE)"
+        - --enable-leader-election=$(ENABLE_LEADER_ELECTION)
+        - --leader-election-namespace
+        - "$(LEADER_ELECTION_NAMESPACE)"
         image: controller:latest
         name: controller
         ports:
@@ -66,6 +68,10 @@ spec:
           value: "info"
         - name: ACK_RESOURCE_TAGS
           value: "services.k8s.aws/controller-version=%CONTROLLER_SERVICE%-%CONTROLLER_VERSION%,services.k8s.aws/namespace=%K8S_NAMESPACE%"
+        - name: ENABLE_LEADER_ELECTION
+          value: "false"
+        - name: LEADER_ELECTION_NAMESPACE
+          value: "ack-system"
         securityContext:
           allowPrivilegeEscalation: false
           privileged: false
@@ -79,5 +85,6 @@ spec:
       terminationGracePeriodSeconds: 10
       serviceAccountName: ack-cloudwatchlogs-controller
       hostIPC: false
-      hostNetwork: false
       hostPID: false
+      hostNetwork: false
+      dnsPolicy: ClusterFirst

apis/v1alpha1/zz_generated.deepcopy.go

@@ -56,6 +56,9 @@ spec:
                 type: object
               name:
                 type: string
+              retentionDays:
+                format: int64
+                type: integer
               tags:
                 additionalProperties:
                   type: string

cmd/controller/main.go

@@ -4,4 +4,5 @@ resources:
 - role-reader.yaml
 - role-writer.yaml
 - service-account.yaml
-
+- leader-election-role.yaml
+- leader-election-role-binding.yaml

config/controller/deployment.yaml

@@ -0,0 +1,14 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  namespace: ack-system
+  name: cloudwatchlogs-leader-election-rolebinding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: cloudwatchlogs-leader-election-role
+subjects:
+- kind: ServiceAccount
+  name: ack-cloudwatchlogs-controller
+  namespace: ack-system

config/crd/bases/cloudwatchlogs.services.k8s.aws_loggroups.yaml

@@ -0,0 +1,26 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: cloudwatchlogs-leader-election-role
+  namespace: ack-system
+rules:
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch