fixed type scope as requested

Author: Daniel Ward

api/v1/syncedsecret_types.go

@@ -81,6 +81,10 @@ type SyncedSecretSpec struct {
 	// DataFrom
 	// +optional
 	DataFrom *DataFrom `json:"dataFrom,omitempty"`
+
+	// Type
+	// +optional
+	Type corev1.SecretType `json:"type,omitempty"`
 }
 
 // SyncedSecretStatus defines the observed state of SyncedSecret
@@ -105,8 +109,6 @@ type SyncedSecret struct {
 
 	Spec   SyncedSecretSpec   `json:"spec,omitempty"`
 	Status SyncedSecretStatus `json:"status,omitempty"`
-
-	Type corev1.SecretType `json:"type,omitempty"`
 }
 
 // +kubebuilder:object:root=true

config/crd/bases/secrets.contentful.com_syncedsecrets.yaml

@@ -92,6 +92,9 @@ spec:
             secretMetadata:
               description: Secret Metadata
               type: object
+            type:
+              description: Type
+              type: string
           type: object
         status:
           description: SyncedSecretStatus defines the observed state of SyncedSecret
@@ -107,8 +110,6 @@ spec:
           required:
           - currentVersionID
           type: object
-        type:
-          type: string
       type: object
   version: v1
   versions:

config/samples/secrets_v1_syncedsecret_specified_type.yaml

@@ -1,10 +1,10 @@
 apiVersion: secrets.contentful.com/v1
 kind: SyncedSecret
-type: kubernetes.io/dockerconfigjson
 metadata:
   name: syncedsecret-sample-ks
   namespace: kube-secret-syncer
 spec:
+  type: kubernetes.io/dockerconfigjson
   secretMetadata:
     name: demo-service-secret
     namespace: kube-secret-syncer

pkg/k8ssecret/secret.go

@@ -154,8 +154,8 @@ func GenerateK8SSecret(
 	}
 
 	secretType := corev1.SecretTypeOpaque
-	if cs.Type != "" {
-		secretType = cs.Type
+	if cs.Spec.Type != "" {
+		secretType = cs.Spec.Type
 	}
 
 	secret := &corev1.Secret{

pkg/k8ssecret/secret_test.go

@@ -160,7 +160,8 @@ func TestGenerateSecret(t *testing.T) {
 					"field2": []byte("value2"),
 				},
 			},
-		}, {
+		},
+		{
 			name: "it should support fields with a hardcoded value for Secret Type",
 			have: have{
 				SyncedSecret: secretsv1.SyncedSecret{
@@ -187,8 +188,8 @@ func TestGenerateSecret(t *testing.T) {
 							},
 						},
 						IAMRole: _s("iam_role"),
+						Type:    "kubernetes.io/dockerconfigjson",
 					},
-					Type: "kubernetes.io/dockerconfigjson",
 				},
 				err:               nil,
 				cachedSecrets:     secretsmanager.Secrets{"cachedSecret1": {}, "cachedSecret2": {}},