feat(konnect): add KongKeySet reconciler (#657)

.mockery.yaml

@@ -26,3 +26,4 @@ packages:
       CACertificatesSDK:
       CertificatesSDK:
       KeysSDK:
+      KeySetsSDK:

CHANGELOG.md

@@ -66,6 +66,8 @@
   [#597](https://github.com/Kong/gateway-operator/pull/597)
 - Add `KongKey` reconciler for Konnect Keys.
   [#646](https://github.com/Kong/gateway-operator/pull/646)
+- Add `KongKeySet` reconciler for Konnect KeySets.
+  [#657](https://github.com/Kong/gateway-operator/pull/657)
 - The `DataPlaneKonnectExtension` CRD has been introduced. Such a CRD can be attached
   to a `DataPlane` via the extensions field to have a konnect-flavored `DataPlane`.
   [#453](https://github.com/Kong/gateway-operator/pull/453), [#578](https://github.com/Kong/gateway-operator/pull/578)

config/crd/bases/gateway-operator.konghq.com_dataplanekonnectextensions.yaml

@@ -88,6 +88,8 @@ spec:
                     - konnectID
                     - konnectNamespacedRef
                     type: string
+                required:
+                - type
                 type: object
                 x-kubernetes-validations:
                 - message: when type is konnectNamespacedRef, konnectNamespacedRef

config/samples/konnect_kongkeyset.yaml

@@ -0,0 +1,39 @@
+kind: KonnectAPIAuthConfiguration
+apiVersion: konnect.konghq.com/v1alpha1
+metadata:
+  name: konnect-api-auth-dev-1
+  namespace: default
+spec:
+  type: token
+  token: kpat_XXXXXXXXXXXXXXXXXXX
+  serverURL: us.api.konghq.tech
+---
+kind: KonnectGatewayControlPlane
+apiVersion: konnect.konghq.com/v1alpha1
+metadata:
+  name: test1
+  namespace: default
+spec:
+  name: test1
+  labels:
+    app: test1
+    key1: test1
+  konnect:
+    authRef:
+      name: konnect-api-auth-dev-1
+---
+kind: KongKeySet
+apiVersion: configuration.konghq.com/v1alpha1
+metadata:
+  name: key-set-1
+  namespace: default
+  annotations:
+    konghq.com/tags: "infra"
+spec:
+  controlPlaneRef:
+    type: konnectNamespacedRef
+    konnectNamespacedRef:
+      name: test1
+  name: key-set-1
+  tags:
+    - production

controller/konnect/constraints/constraints.go

@@ -26,7 +26,8 @@ type SupportedKonnectEntityType interface {
 		configurationv1alpha1.KongCertificate |
 		configurationv1alpha1.KongTarget |
 		configurationv1alpha1.KongVault |
-		configurationv1alpha1.KongKey
+		configurationv1alpha1.KongKey |
+		configurationv1alpha1.KongKeySet
 	// TODO: add other types
 
 	GetTypeName() string

controller/konnect/ops/kongkeyset.go

@@ -0,0 +1,15 @@
+package ops
+
+import (
+	"context"
+
+	sdkkonnectcomp "github.com/Kong/sdk-konnect-go/models/components"
+	sdkkonnectops "github.com/Kong/sdk-konnect-go/models/operations"
+)
+
+// KeySetsSDK is the interface for the KeySetsSDK.
+type KeySetsSDK interface {
+	CreateKeySet(ctx context.Context, controlPlaneID string, keySet sdkkonnectcomp.KeySetInput, opts ...sdkkonnectops.Option) (*sdkkonnectops.CreateKeySetResponse, error)
+	UpsertKeySet(ctx context.Context, request sdkkonnectops.UpsertKeySetRequest, opts ...sdkkonnectops.Option) (*sdkkonnectops.UpsertKeySetResponse, error)
+	DeleteKeySet(ctx context.Context, controlPlaneID string, keySetID string, opts ...sdkkonnectops.Option) (*sdkkonnectops.DeleteKeySetResponse, error)
+}

controller/konnect/ops/ops.go

@@ -80,7 +80,8 @@ func Create[
 		return e, createVault(ctx, sdk.GetVaultSDK(), ent)
 	case *configurationv1alpha1.KongKey:
 		return e, createKey(ctx, sdk.GetKeysSDK(), ent)
-
+	case *configurationv1alpha1.KongKeySet:
+		return e, createKeySet(ctx, sdk.GetKeySetsSDK(), ent)
 		// ---------------------------------------------------------------------
 		// TODO: add other Konnect types
 
@@ -134,7 +135,8 @@ func Delete[
 		return deleteVault(ctx, sdk.GetVaultSDK(), ent)
 	case *configurationv1alpha1.KongKey:
 		return deleteKey(ctx, sdk.GetKeysSDK(), ent)
-
+	case *configurationv1alpha1.KongKeySet:
+		return deleteKeySet(ctx, sdk.GetKeySetsSDK(), ent)
 		// ---------------------------------------------------------------------
 		// TODO: add other Konnect types
 
@@ -233,6 +235,8 @@ func Update[
 		return ctrl.Result{}, updateVault(ctx, sdk.GetVaultSDK(), ent)
 	case *configurationv1alpha1.KongKey:
 		return ctrl.Result{}, updateKey(ctx, sdk.GetKeysSDK(), ent)
+	case *configurationv1alpha1.KongKeySet:
+		return ctrl.Result{}, updateKeySet(ctx, sdk.GetKeySetsSDK(), ent)
 
 		// ---------------------------------------------------------------------
 		// TODO: add other Konnect types