start watching configmaps that are referenced in superset spec

Author: labrenbe

rust/operator-binary/src/main.rs

@@ -112,6 +112,7 @@ async fn main() -> anyhow::Result<()> {
                 watcher::Config::default(),
             );
             let superset_store_1 = superset_controller.store();
+            let superset_store_2 = superset_controller.store();
             let superset_controller = superset_controller
                 .owns(
                     watch_namespace.get_api::<DeserializeGuard<Service>>(&client),
@@ -135,6 +136,19 @@ async fn main() -> anyhow::Result<()> {
                             .map(|superset| ObjectRef::from_obj(&*superset))
                     },
                 )
+                .watches(
+                    watch_namespace.get_api::<DeserializeGuard<ConfigMap>>(&client),
+                    watcher::Config::default(),
+                    move |config_map| {
+                        superset_store_2
+                            .state()
+                            .into_iter()
+                            .filter(move |superset| {
+                                references_configmap(superset, &config_map)
+                            })
+                            .map(|superset| ObjectRef::from_obj(&*superset))
+                    },
+                )
                 .run(
                     superset_controller::reconcile_superset,
                     superset_controller::error_policy,
@@ -268,6 +282,22 @@ fn references_authentication_class(
         .any(|c| c.common.authentication_class_name() == &authentication_class_name)
 }
 
+fn references_configmap(
+    superset: &DeserializeGuard<v1alpha1::SupersetCluster>,
+    config_map: &DeserializeGuard<ConfigMap>
+) -> bool {
+    let Ok(superset) = &superset.0 else {
+        return false;
+    };
+
+    let config_map_name = config_map.name_any();
+    superset.spec.cluster_config.vector_aggregator_config_map_name == Some(config_map_name.to_owned()) ||
+    match superset.spec.cluster_config.authorization.clone() {
+        Some (superset_authorization) => if superset_authorization.role_mapping_from_opa.opa.config_map_name == config_map_name { true } else { false }
+        None => false
+    }
+}
+
 fn valid_druid_connection(
     superset_cluster: &DeserializeGuard<v1alpha1::SupersetCluster>,
     druid_connection: &DeserializeGuard<druidconnection::v1alpha1::DruidConnection>,