add KongVault reconciler

.mockery.yaml

@@ -17,4 +17,5 @@ packages:
       ConsumersSDK:
       ConsumerGroupSDK:
       PluginSDK:
+      VaultSDK:
       MeSDK:

config/rbac/role/role.yaml

@@ -133,7 +133,6 @@ rules:
   - kongingresses
   - konglicenses
   - kongupstreampolicies
-  - kongvaults
   - tcpingresses
   - udpingresses
   verbs:
@@ -167,6 +166,7 @@ rules:
   - kongpluginbindings
   - kongroutes
   - kongservices
+  - kongvaults
   verbs:
   - get
   - list

controller/konnect/constraints/constraints.go

@@ -18,7 +18,8 @@ type SupportedKonnectEntityType interface {
 		configurationv1alpha1.KongRoute |
 		configurationv1.KongConsumer |
 		configurationv1beta1.KongConsumerGroup |
-		configurationv1alpha1.KongPluginBinding
+		configurationv1alpha1.KongPluginBinding |
+		configurationv1alpha1.KongVault
 	// TODO: add other types
 
 	GetTypeName() string

controller/konnect/ops/kongvault.go

@@ -0,0 +1,15 @@
+package ops
+
+import (
+	"context"
+
+	sdkkonnectcomp "github.com/Kong/sdk-konnect-go/models/components"
+	sdkkonnectops "github.com/Kong/sdk-konnect-go/models/operations"
+)
+
+// VaultSDK is the interface for Konnect Vault SDK.
+type VaultSDK interface {
+	CreateVault(ctx context.Context, controlPlaneID string, vault sdkkonnectcomp.VaultInput, opts ...sdkkonnectops.Option) (*sdkkonnectops.CreateVaultResponse, error)
+	UpsertVault(ctx context.Context, request sdkkonnectops.UpsertVaultRequest, opts ...sdkkonnectops.Option) (*sdkkonnectops.UpsertVaultResponse, error)
+	DeleteVault(ctx context.Context, controlPlaneID string, vaultID string, opts ...sdkkonnectops.Option) (*sdkkonnectops.DeleteVaultResponse, error)
+}

controller/konnect/ops/ops.go

@@ -64,6 +64,8 @@ func Create[
 		return e, createConsumerGroup(ctx, sdk.GetConsumerGroupsSDK(), ent)
 	case *configurationv1alpha1.KongPluginBinding:
 		return e, createPlugin(ctx, cl, sdk.GetPluginSDK(), ent)
+	case *configurationv1alpha1.KongVault:
+		return e, createVault(ctx, sdk.GetVaultSDK(), ent)
 
 		// ---------------------------------------------------------------------
 		// TODO: add other Konnect types
@@ -102,6 +104,8 @@ func Delete[
 		return deleteConsumerGroup(ctx, sdk.GetConsumerGroupsSDK(), ent)
 	case *configurationv1alpha1.KongPluginBinding:
 		return deletePlugin(ctx, sdk.GetPluginSDK(), ent)
+	case *configurationv1alpha1.KongVault:
+		return deleteVault(ctx, sdk.GetVaultSDK(), ent)
 
 		// ---------------------------------------------------------------------
 		// TODO: add other Konnect types
@@ -165,6 +169,8 @@ func Update[
 		return ctrl.Result{}, updateConsumerGroup(ctx, sdk.GetConsumerGroupsSDK(), ent)
 	case *configurationv1alpha1.KongPluginBinding:
 		return ctrl.Result{}, updatePlugin(ctx, sdk.GetPluginSDK(), cl, ent)
+	case *configurationv1alpha1.KongVault:
+		return ctrl.Result{}, updateVault(ctx, sdk.GetVaultSDK(), ent)
 
 		// ---------------------------------------------------------------------
 		// TODO: add other Konnect types