Method UpdateWorkloadIdentity

backend/store/workload_identity.go:233–285

UpdateWorkloadIdentity updates a workload identity.

(ctx context.Context, wi *WorkloadIdentityMessage, patch *UpdateWorkloadIdentityMessage)

// UpdateWorkloadIdentity updates a workload identity.
func (s *Store) UpdateWorkloadIdentity(ctx context.Context, wi *WorkloadIdentityMessage, patch *UpdateWorkloadIdentityMessage) (*WorkloadIdentityMessage, error) {
	set := qb.Q()
	if v := patch.Delete; v != nil {
		set.Comma("deleted = ?", *v)
	}
	if v := patch.Name; v != nil {
		set.Comma("name = ?", *v)
	}
	if v := patch.Config; v != nil {
		configBytes, err := protojson.Marshal(v)
		if err != nil {
			return nil, err
		}
		set.Comma("config = ?", configBytes)
	}

	if set.Len() == 0 {
		return wi, nil
	}

	sqlStr, args, err := qb.Q().Space(`UPDATE workload_identity SET ? WHERE email = ? AND workspace = ?
		RETURNING deleted, email, name, workspace, project, config`,
		set, wi.Email, wi.Workspace).ToSQL()
	if err != nil {
		return nil, errors.Wrapf(err, "failed to build sql")
	}

	var updated WorkloadIdentityMessage
	var project sql.NullString
	var configBytes []byte
	if err := s.GetDB().QueryRowContext(ctx, sqlStr, args...).Scan(
		&updated.MemberDeleted,
		&updated.Email,
		&updated.Name,
		&updated.Workspace,
		&project,
		&configBytes,
	); err != nil {
		return nil, err
	}
	if project.Valid {
		updated.Project = &project.String
	}
	var config storepb.WorkloadIdentityConfig
	if err := common.ProtojsonUnmarshaler.Unmarshal(configBytes, &config); err != nil {
		return nil, err
	}
	updated.Config = &config

	s.userEmailCache.Remove(wi.Email)

	return &updated, nil
}

// DeleteWorkloadIdentity soft-deletes a workload identity.
func (s *Store) DeleteWorkloadIdentity(ctx context.Context, wi *WorkloadIdentityMessage) error {