Update tags support for VpcEndpoint resource (#96)

Description of changes:

- Included `update_operation` in `generator.yaml` file in order to make updates.
- Implemented update tags support for VpcEndpoint resource.
- Added e2e tests for the same.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Author: LikithaVemulapalli

apis/v1alpha1/ack-generate-metadata.yaml

@@ -1,13 +1,13 @@
 ack_generate_info:
-  build_date: "2022-09-14T17:04:56Z"
+  build_date: "2022-09-14T19:52:51Z"
   build_hash: 1da44f4be322eea156ed23a86e33c29da5cede9c
-  go_version: go1.18.1
+  go_version: go1.18.3
   version: v0.20.1-2-g1da44f4
 api_directory_checksum: 127aa0f51fbcdde596b8f42f93bcdf3b6dee8488
 api_version: v1alpha1
 aws_sdk_go_version: v1.44.93
 generator_config_info:
-  file_checksum: 753e88b4fc3df1b908f63a998ffe37497ec57da1
+  file_checksum: 54d118008c1b41e15473e323dbc940d79301b228
   original_file_name: generator.yaml
 last_modification:
   reason: API generation

apis/v1alpha1/generator.yaml

@@ -494,4 +494,9 @@ resources:
       sdk_create_post_build_request:
         template_path: hooks/vpc_endpoint/sdk_create_post_build_request.go.tpl
       sdk_delete_post_build_request:
-        template_path: hooks/vpc_endpoint/sdk_delete_post_build_request.go.tpl
+        template_path: hooks/vpc_endpoint/sdk_delete_post_build_request.go.tpl
+      sdk_file_end:
+        template_path: hooks/vpc_endpoint/sdk_file_end.go.tpl
+    update_operation:
+      custom_method_name: customUpdateVpcEndpoint
+    

generator.yaml

@@ -494,4 +494,9 @@ resources:
       sdk_create_post_build_request:
         template_path: hooks/vpc_endpoint/sdk_create_post_build_request.go.tpl
       sdk_delete_post_build_request:
-        template_path: hooks/vpc_endpoint/sdk_delete_post_build_request.go.tpl
+        template_path: hooks/vpc_endpoint/sdk_delete_post_build_request.go.tpl
+      sdk_file_end:
+        template_path: hooks/vpc_endpoint/sdk_file_end.go.tpl
+    update_operation:
+      custom_method_name: customUpdateVpcEndpoint
+    

pkg/resource/vpc_endpoint/hooks.go

@@ -14,8 +14,13 @@
 package vpc_endpoint
 
 import (
+	"context"
 	"errors"
 
+	svcapitypes "github.com/aws-controllers-k8s/ec2-controller/apis/v1alpha1"
+	ackcompare "github.com/aws-controllers-k8s/runtime/pkg/compare"
+	ackrtlog "github.com/aws-controllers-k8s/runtime/pkg/runtime/log"
+
 	svcsdk "github.com/aws/aws-sdk-go/service/ec2"
 )
 
@@ -30,6 +35,129 @@ func addIDToDeleteRequest(r *resource,
 	return nil
 }
 
+func (rm *resourceManager) customUpdateVpcEndpoint(
+	ctx context.Context,
+	desired *resource,
+	latest *resource,
+	delta *ackcompare.Delta,
+) (updated *resource, err error) {
+	rlog := ackrtlog.FromContext(ctx)
+	exit := rlog.Trace("rm.customUpdateVpcEndpoint")
+	defer exit(err)
+
+	// Merge in the information we read from the API call above to the copy of
+	// the original Kubernetes object we passed to the function
+	ko := desired.ko.DeepCopy()
+
+	if delta.DifferentAt("Spec.Tags") {
+		if err := rm.syncTags(ctx, desired, latest); err != nil {
+			return nil, err
+		}
+	}
+
+	rm.setStatusDefaults(ko)
+	return &resource{ko}, nil
+}
+
+// syncTags used to keep tags in sync by calling Create and Delete API's
+func (rm *resourceManager) syncTags(
+	ctx context.Context,
+	desired *resource,
+	latest *resource,
+) (err error) {
+	rlog := ackrtlog.FromContext(ctx)
+	exit := rlog.Trace("rm.syncTags")
+	defer func(err error) {
+		exit(err)
+	}(err)
+
+	resourceId := []*string{latest.ko.Status.VPCEndpointID}
+
+	toAdd, toDelete := computeTagsDelta(
+		desired.ko.Spec.Tags, latest.ko.Spec.Tags,
+	)
+
+	if len(toDelete) > 0 {
+		rlog.Debug("removing tags from vpcEndpoint resource", "tags", toDelete)
+		_, err = rm.sdkapi.DeleteTagsWithContext(
+			ctx,
+			&svcsdk.DeleteTagsInput{
+				Resources: resourceId,
+				Tags:      rm.sdkTags(toDelete),
+			},
+		)
+		rm.metrics.RecordAPICall("UPDATE", "DeleteTags", err)
+		if err != nil {
+			return err
+		}
+
+	}
+
+	if len(toAdd) > 0 {
+		rlog.Debug("adding tags to vpcEndpoint resource", "tags", toAdd)
+		_, err = rm.sdkapi.CreateTagsWithContext(
+			ctx,
+			&svcsdk.CreateTagsInput{
+				Resources: resourceId,
+				Tags:      rm.sdkTags(toAdd),
+			},
+		)
+		rm.metrics.RecordAPICall("UPDATE", "CreateTags", err)
+		if err != nil {
+			return err
+		}
+	}
+
+	return nil
+}
+
+// sdkTags converts *svcapitypes.Tag array to a *svcsdk.Tag array
+func (rm *resourceManager) sdkTags(
+	tags []*svcapitypes.Tag,
+) (sdktags []*svcsdk.Tag) {
+
+	for _, i := range tags {
+		sdktag := rm.newTag(*i)
+		sdktags = append(sdktags, sdktag)
+	}
+
+	return sdktags
+}
+
+// computeTagsDelta returns tags to be added and removed from the resource
+func computeTagsDelta(
+	desired []*svcapitypes.Tag,
+	latest []*svcapitypes.Tag,
+) (toAdd []*svcapitypes.Tag, toDelete []*svcapitypes.Tag) {
+
+	desiredTags := map[string]string{}
+	for _, tag := range desired {
+		desiredTags[*tag.Key] = *tag.Value
+	}
+
+	latestTags := map[string]string{}
+	for _, tag := range latest {
+		latestTags[*tag.Key] = *tag.Value
+	}
+
+	for _, tag := range desired {
+		val, ok := latestTags[*tag.Key]
+		if !ok || val != *tag.Value {
+			toAdd = append(toAdd, tag)
+		}
+	}
+
+	for _, tag := range latest {
+		_, ok := desiredTags[*tag.Key]
+		if !ok {
+			toDelete = append(toDelete, tag)
+		}
+	}
+
+	return toAdd, toDelete
+
+}
+
 // updateTagSpecificationsInCreateRequest adds
 // Tags defined in the Spec to CreateVpcEndpointInput.TagSpecification
 // and ensures the ResourceType is always set to 'vpc-endpoint'

pkg/resource/vpc_endpoint/sdk.go

@@ -0,0 +1,23 @@
+{{ $CRD := .CRD }}
+{{ $SDKAPI := .SDKAPI }}
+
+{{/* Generate helper methods for vpcEndpoint */}}
+{{- range $specFieldName, $specField := $CRD.Config.Resources.VpcEndpoint.Fields }}
+{{- if $specField.From }}
+{{- $operationName := $specField.From.Operation }}
+{{- $operation := (index $SDKAPI.API.Operations $operationName) -}}
+{{- range $vpcEndpointRefName, $vpcEndpointMemberRefs := $operation.InputRef.Shape.MemberRefs -}}
+{{- if eq $vpcEndpointRefName "Tags" }}
+{{- $vpcEndpointRef := $vpcEndpointMemberRefs.Shape.MemberRef }}
+{{- $vpcEndpointRefName = "Tag" }}
+func (rm *resourceManager) new{{ $vpcEndpointRefName }}(
+	    c svcapitypes.{{ $vpcEndpointRefName }},
+) *svcsdk.{{ $vpcEndpointRefName }} {
+	res := &svcsdk.{{ $vpcEndpointRefName }}{}
+{{ GoCodeSetSDKForStruct $CRD "" "res" $vpcEndpointRef "" "c" 1 }}
+	return res
+}
+{{- end }}
+{{- end }}
+{{- end }}
+{{- end }}

templates/hooks/vpc_endpoint/sdk_file_end.go.tpl

@@ -4,4 +4,7 @@ metadata:
   name: $VPC_ENDPOINT_NAME
 spec:
   serviceName: $SERVICE_NAME
-  vpcID: $VPC_ID
+  vpcID: $VPC_ID
+  tags:
+    - key: $TAG_KEY
+      value: $TAG_VALUE

test/e2e/resources/vpc_endpoint.yaml

@@ -33,9 +33,10 @@
 
 CREATE_WAIT_AFTER_SECONDS = 10
 DELETE_WAIT_AFTER_SECONDS = 10
+MODIFY_WAIT_AFTER_SECONDS = 5
 
 @pytest.fixture
-def simple_vpc_endpoint():
+def simple_vpc_endpoint(request):
     test_resource_values = REPLACEMENT_VALUES.copy()
     resource_name = random_suffix_name("vpc-endpoint-test", 24)
     test_vpc = get_bootstrap_resources().SharedTestVPC
@@ -45,6 +46,14 @@ def simple_vpc_endpoint():
     test_resource_values["SERVICE_NAME"] = ENDPOINT_SERVICE_NAME
     test_resource_values["VPC_ID"] = vpc_id
 
+    marker = request.node.get_closest_marker("resource_data")
+    if marker is not None:
+        data = marker.args[0]
+        if 'tag_key' in data:
+            test_resource_values["TAG_KEY"] = data["tag_key"]
+        if 'tag_value' in data:
+            test_resource_values["TAG_VALUE"] = data["tag_value"]
+
     # Load VPC Endpoint CR
     resource_data = load_ec2_resource(
         "vpc_endpoint",
@@ -94,6 +103,72 @@ def test_create_delete(self, ec2_client, simple_vpc_endpoint):
 
         # Check VPC Endpoint no longer exists in AWS
         ec2_validator.assert_vpc_endpoint(resource_id, exists=False)
+    
+    @pytest.mark.resource_data({'tag_key': 'initialtagkey', 'tag_value': 'initialtagvalue'})
+    def test_crud_tags(self, ec2_client, simple_vpc_endpoint):
+        (ref, cr) = simple_vpc_endpoint
+        
+        resource = k8s.get_resource(ref)
+        resource_id = cr["status"]["vpcEndpointID"]
+
+        time.sleep(CREATE_WAIT_AFTER_SECONDS)
+
+        # Check vpcEndpoint exists in AWS
+        ec2_validator = EC2Validator(ec2_client)
+        ec2_validator.assert_vpc_endpoint(resource_id)
+        
+        # Check tags exist for vpcEndpoint resource
+        assert resource["spec"]["tags"][0]["key"] == "initialtagkey"
+        assert resource["spec"]["tags"][0]["value"] == "initialtagvalue"
+
+        # New pair of tags
+        new_tags = [
+                {
+                    "key": "updatedtagkey",
+                    "value": "updatedtagvalue",
+                }
+               
+            ]
+
+        # Patch the vpcEndpoint, updating the tags with new pair
+        updates = {
+            "spec": {"tags": new_tags},
+        }
+
+        k8s.patch_custom_resource(ref, updates)
+        time.sleep(MODIFY_WAIT_AFTER_SECONDS)
+
+        # Check resource synced successfully
+        assert k8s.wait_on_condition(ref, "ACK.ResourceSynced", "True", wait_periods=5)
+        
+        # Assert tags are updated for vpcEndpoint resource
+        resource = k8s.get_resource(ref)
+        assert resource["spec"]["tags"][0]["key"] == "updatedtagkey"
+        assert resource["spec"]["tags"][0]["value"] == "updatedtagvalue"
+
+        # Patch the vpcEndpoint resource, deleting the tags
+        updates = {
+                "spec": {"tags": []},
+        }
+
+        k8s.patch_custom_resource(ref, updates)
+        time.sleep(MODIFY_WAIT_AFTER_SECONDS)
+
+        # Check resource synced successfully
+        assert k8s.wait_on_condition(ref, "ACK.ResourceSynced", "True", wait_periods=5)
+        
+        # Assert tags are deleted
+        resource = k8s.get_resource(ref)
+        assert len(resource['spec']['tags']) == 0
+
+        # Delete k8s resource
+        _, deleted = k8s.delete_custom_resource(ref)
+        assert deleted is True
+
+        time.sleep(DELETE_WAIT_AFTER_SECONDS)
+
+        # Check vpcEndpoint no longer exists in AWS
+        ec2_validator.assert_vpc_endpoint(resource_id, exists=False)
 
     def test_terminal_condition_malformed_vpc(self):
         test_resource_values = REPLACEMENT_VALUES.copy()