Function CopySecret

pkg/secrets/backup.go:104–138

CopySecret copies the given secret from the operator namespace to the workspace namespace. It NEVER overwrites an existing secret: if a secret already exists in the workspace namespace, it returns the existing secret without modification.

(ctx context.Context, c client.Client, workspace *dw.DevWorkspace, sourceSecret *corev1.Secret, scheme *runtime.Scheme, log logr.Logger)

// It NEVER overwrites an existing secret: if a secret already exists in the workspace namespace,
// it returns the existing secret without modification.
func CopySecret(ctx context.Context, c client.Client, workspace *dw.DevWorkspace, sourceSecret *corev1.Secret, scheme *runtime.Scheme, log logr.Logger) (namespaceSecret *corev1.Secret, err error) {
	desiredSecret := &corev1.Secret{
		ObjectMeta: metav1.ObjectMeta{
			Name:      constants.DevWorkspaceBackupAuthSecretName,
			Namespace: workspace.Namespace,
			Labels: map[string]string{
				constants.DevWorkspaceWatchSecretLabel: "true",
			},
		},
		Data: sourceSecret.Data,
		Type: sourceSecret.Type,
	}

	err = c.Create(ctx, desiredSecret)
	if err != nil {
		if k8sErrors.IsAlreadyExists(err) {
			// Race condition - secret was created between Get and Create
			// Fetch and return it (respect what's there)
			if err := c.Get(ctx, client.ObjectKey{
				Name:      constants.DevWorkspaceBackupAuthSecretName,
				Namespace: workspace.Namespace,
			}, sourceSecret); err != nil {
				return nil, err
			}
			log.Info("Registry auth secret was created concurrently, using existing secret",
				"secretName", constants.DevWorkspaceBackupAuthSecretName)
			return sourceSecret, nil
		}
		return nil, err
	}

	log.Info("Successfully copied registry auth secret to workspace namespace",
		"name", desiredSecret.Name, "namespace", workspace.Namespace)
	return desiredSecret, nil
}