WIP: Proof of concept for Shared VPC support

openshift · Jun 26, 2023 · 842551b · 842551b
1 parent 0cd8bee
commit 842551b
Show file tree

Hide file tree

Showing 4 changed files with 17 additions and 0 deletions.
diff --git a/api/v1beta1/externaldns_types.go b/api/v1beta1/externaldns_types.go
@@ -101,6 +101,11 @@ type ExternalDNSSpec struct {
 	// +kubebuilder:validation:Optional
 	// +optional
 	Zones []string `json:"zones,omitempty"`
+
+	// AWSRoleARN is a string
+	// +kubebuilder:validation:Optional
+	// +optional
+	AWSRoleARN *string `json:"awsRoleARN,omitempty"`
 }
 
 // ExternalDNSDomain describes how sets of included

diff --git a/api/v1beta1/zz_generated.deepcopy.go b/api/v1beta1/zz_generated.deepcopy.go
diff --git a/config/crd/bases/externaldns.olm.openshift.io_externaldnses.yaml b/config/crd/bases/externaldns.olm.openshift.io_externaldnses.yaml
@@ -507,6 +507,9 @@ spec:
             description: spec is the specification of the desired behavior of the
               ExternalDNS.
             properties:
+              awsRoleARN:
+                description: AWSRoleARN is a string
+                type: string
               domains:
                 description: "Domains specifies which domains that ExternalDNS should
                   create DNS records for. Multiple domain values can be specified

diff --git a/pkg/operator/controller/externaldns/pod.go b/pkg/operator/controller/externaldns/pod.go
@@ -194,6 +194,10 @@ func (b *externalDNSContainerBuilder) fillProviderAgnosticFields(seq int, zone s
 		args = append(args, "--ignore-hostname-annotation")
 	}
 
+	if b.externalDNS.Spec.AWSRoleARN != nil {
+		args = append(args, fmt.Sprintf("--aws-assume-role=%s", *b.externalDNS.Spec.AWSRoleARN))
+	}
+
 	if len(b.externalDNS.Spec.Source.FQDNTemplate) > 0 {
 		args = append(args, fmt.Sprintf("--fqdn-template=%s", strings.Join(b.externalDNS.Spec.Source.FQDNTemplate, ",")))
 	} else {