Make secret name field sensitive for container app

Signed-off-by: Fatih Türken <[email protected]>
crossplane-contrib · Oct 2, 2024 · 5e1ee8e · 5e1ee8e
1 parent 13dfad9
commit 5e1ee8e
Show file tree

Hide file tree

Showing 5 changed files with 42 additions and 31 deletions.
diff --git a/apis/containerapp/v1beta2/zz_containerapp_terraformed.go b/apis/containerapp/v1beta2/zz_containerapp_terraformed.go
diff --git a/apis/containerapp/v1beta2/zz_containerapp_types.go b/apis/containerapp/v1beta2/zz_containerapp_types.go
diff --git a/apis/containerapp/v1beta2/zz_generated.deepcopy.go b/apis/containerapp/v1beta2/zz_generated.deepcopy.go
diff --git a/config/containerapp/config.go b/config/containerapp/config.go
@@ -6,12 +6,15 @@ package containerapp
 
 import (
 	"github.com/crossplane/upjet/pkg/config"
+	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
 )
 
 // Configure configures kubernetes group
 func Configure(p *config.Provider) {
 	p.AddResourceConfigurator("azurerm_container_app", func(r *config.Resource) {
 		r.ShortGroup = "containerapp"
+		r.TerraformResource.Schema["secret"].Elem.(*schema.Resource).
+			Schema["name"].Sensitive = true
 	})
 
 	p.AddResourceConfigurator("azurerm_container_app_environment", func(r *config.Resource) {

diff --git a/package/crds/containerapp.azure.upbound.io_containerapps.yaml b/package/crds/containerapp.azure.upbound.io_containerapps.yaml
@@ -3279,11 +3279,25 @@ spec:
                             The ID of a Key Vault secret. This can be a versioned or version-less ID.
                             The Key Vault Secret ID. Could be either one of `id` or `versionless_id`.
                           type: string
-                        name:
+                        nameSecretRef:
                           description: |-
                             The secret name.
                             The secret name.
-                          type: string
+                          properties:
+                            key:
+                              description: The key to select.
+                              type: string
+                            name:
+                              description: Name of the secret.
+                              type: string
+                            namespace:
+                              description: Namespace of the secret.
+                              type: string
+                          required:
+                          - key
+                          - name
+                          - namespace
+                          type: object
                         valueSecretRef:
                           description: |-
                             The value for this secret.
@@ -4113,11 +4127,25 @@ spec:
                             The ID of a Key Vault secret. This can be a versioned or version-less ID.
                             The Key Vault Secret ID. Could be either one of `id` or `versionless_id`.
                           type: string
-                        name:
+                        nameSecretRef:
                           description: |-
                             The secret name.
                             The secret name.
-                          type: string
+                          properties:
+                            key:
+                              description: The key to select.
+                              type: string
+                            name:
+                              description: Name of the secret.
+                              type: string
+                            namespace:
+                              description: Namespace of the secret.
+                              type: string
+                          required:
+                          - key
+                          - name
+                          - namespace
+                          type: object
                         valueSecretRef:
                           description: |-
                             The value for this secret.
@@ -4137,6 +4165,8 @@ spec:
                           - name
                           - namespace
                           type: object
+                      required:
+                      - nameSecretRef
                       type: object
                     type: array
                   tags:
@@ -5078,11 +5108,6 @@ spec:
                             The ID of a Key Vault secret. This can be a versioned or version-less ID.
                             The Key Vault Secret ID. Could be either one of `id` or `versionless_id`.
                           type: string
-                        name:
-                          description: |-
-                            The secret name.
-                            The secret name.
-                          type: string
                       type: object
                     type: array
                   tags: