add KongVault reconciler

.mockery.yaml

@@ -18,4 +18,5 @@ packages:
       ConsumerGroupSDK:
       PluginSDK:
       UpstreamsSDK:
+      VaultSDK:
       MeSDK:

config/rbac/role/role.yaml

@@ -133,7 +133,6 @@ rules:
   - kongingresses
   - konglicenses
   - kongupstreampolicies
-  - kongvaults
   - tcpingresses
   - udpingresses
   verbs:
@@ -191,6 +190,7 @@ rules:
   - kongroutes
   - kongservices
   - kongupstreams
+  - kongvaults
   verbs:
   - get
   - list

controller/konnect/constraints/constraints.go

@@ -19,7 +19,8 @@ type SupportedKonnectEntityType interface {
 		configurationv1.KongConsumer |
 		configurationv1beta1.KongConsumerGroup |
 		configurationv1alpha1.KongPluginBinding |
-		configurationv1alpha1.KongUpstream
+		configurationv1alpha1.KongUpstream |
+		configurationv1alpha1.KongVault
 	// TODO: add other types
 
 	GetTypeName() string

controller/konnect/ops/kongvault.go

@@ -0,0 +1,15 @@
+package ops
+
+import (
+	"context"
+
+	sdkkonnectcomp "github.com/Kong/sdk-konnect-go/models/components"
+	sdkkonnectops "github.com/Kong/sdk-konnect-go/models/operations"
+)
+
+// VaultSDK is the interface for Konnect Vault SDK.
+type VaultSDK interface {
+	CreateVault(ctx context.Context, controlPlaneID string, vault sdkkonnectcomp.VaultInput, opts ...sdkkonnectops.Option) (*sdkkonnectops.CreateVaultResponse, error)
+	UpsertVault(ctx context.Context, request sdkkonnectops.UpsertVaultRequest, opts ...sdkkonnectops.Option) (*sdkkonnectops.UpsertVaultResponse, error)
+	DeleteVault(ctx context.Context, controlPlaneID string, vaultID string, opts ...sdkkonnectops.Option) (*sdkkonnectops.DeleteVaultResponse, error)
+}

controller/konnect/ops/ops.go

@@ -66,6 +66,8 @@ func Create[
 		return e, createPlugin(ctx, cl, sdk.GetPluginSDK(), ent)
 	case *configurationv1alpha1.KongUpstream:
 		return e, createUpstream(ctx, sdk.GetUpstreamsSDK(), ent)
+	case *configurationv1alpha1.KongVault:
+		return e, createVault(ctx, sdk.GetVaultSDK(), ent)
 
 		// ---------------------------------------------------------------------
 		// TODO: add other Konnect types
@@ -106,6 +108,8 @@ func Delete[
 		return deletePlugin(ctx, sdk.GetPluginSDK(), ent)
 	case *configurationv1alpha1.KongUpstream:
 		return deleteUpstream(ctx, sdk.GetUpstreamsSDK(), ent)
+	case *configurationv1alpha1.KongVault:
+		return deleteVault(ctx, sdk.GetVaultSDK(), ent)
 
 		// ---------------------------------------------------------------------
 		// TODO: add other Konnect types
@@ -171,6 +175,8 @@ func Update[
 		return ctrl.Result{}, updatePlugin(ctx, sdk.GetPluginSDK(), cl, ent)
 	case *configurationv1alpha1.KongUpstream:
 		return ctrl.Result{}, updateUpstream(ctx, sdk.GetUpstreamsSDK(), ent)
+	case *configurationv1alpha1.KongVault:
+		return ctrl.Result{}, updateVault(ctx, sdk.GetVaultSDK(), ent)
 
 		// ---------------------------------------------------------------------
 		// TODO: add other Konnect types