Function IsServiceAccountAligned

pkg/specs/serviceaccount.go:82–128

IsServiceAccountAligned compares the given list of pull secrets with the ones managed by the operator inside the given ServiceAccount and returns true when everything is aligned

(
	ctx context.Context,
	sa *corev1.ServiceAccount,
	imagePullSecretsNames []string,
	updatedMetadata metav1.ObjectMeta,
)

// ones managed by the operator inside the given ServiceAccount and returns
// true when everything is aligned
func IsServiceAccountAligned(
	ctx context.Context,
	sa *corev1.ServiceAccount,
	imagePullSecretsNames []string,
	updatedMetadata metav1.ObjectMeta,
) bool {
	contextLogger := log.FromContext(ctx)
	// This is an old version of the ServiceAccount, that need to be refreshed to
	// store the annotation value
	if sa.Annotations == nil {
		return false
	}

	value := sa.Annotations[utils.OperatorManagedSecretsAnnotationName]
	if value == "" {
		return false
	}

	var serviceAccountPullSecrets []string
	if err := json.Unmarshal([]byte(value), &serviceAccountPullSecrets); err != nil {
		contextLogger.Error(err, "Cannot detect if a ServiceAccount need to be refreshed or not, refreshing it",
			"serviceAccount", sa)
		return false
	}

	if len(serviceAccountPullSecrets) != len(imagePullSecretsNames) {
		return false
	}
	if serviceAccountPullSecrets != nil && imagePullSecretsNames != nil && !reflect.DeepEqual(
		serviceAccountPullSecrets, imagePullSecretsNames) {
		return false
	}

	for name, value := range updatedMetadata.Labels {
		if sa.Labels[name] != value {
			return false
		}
	}

	for name, value := range updatedMetadata.Annotations {
		if sa.Annotations[name] != value {
			return false
		}
	}

	return true
}