Add Rotate CSI Credentials

CHANGELOG.md

@@ -1,6 +1,11 @@
 Changelog
 =========
 
+Unreleased
+----------
+
+- feature: SKS: add SKSCluster.RotateCSICredentials() method
+
 3.1.15
 ------
 

v2/client_mock.go

@@ -828,6 +828,15 @@
 	return args.Get(0).(*oapi.RotateSksCcmCredentialsResponse), args.Error(1)
 }
 
+func (m *oapiClientMock) RotateSksCsiCredentialsWithResponse(
+	ctx context.Context,
+	id string,
+	reqEditors ...oapi.RequestEditorFn,
+) (*oapi.RotateSksCsiCredentialsResponse, error) {
+	args := m.Called(ctx, id, reqEditors)
+	return args.Get(0).(*oapi.RotateSksCsiCredentialsResponse), args.Error(1)
+}
+
 func (m *oapiClientMock) ScaleInstanceWithResponse(
 	ctx context.Context,
 	id string,

v2/sks_cluster.go

@@ -417,6 +417,29 @@
 	return nil
 }
 
+// RotateSKSClusterCSICredentials rotates the Exoscale IAM credentials managed by the SKS control plane for the
+// Kubernetes Exoscale Container Storage Interface Addon.
+func (c *Client) RotateSKSClusterCSICredentials(ctx context.Context, zone string, cluster *SKSCluster) error {
+	if err := validateOperationParams(cluster, "update"); err != nil {
+		return err
+	}
+
+	resp, err := c.RotateSksCsiCredentialsWithResponse(apiv2.WithZone(ctx, zone), *cluster.ID)
+	if err != nil {
+		return err
+	}
+
+	_, err = oapi.NewPoller().
+		WithTimeout(c.timeout).
+		WithInterval(c.pollInterval).
+		Poll(ctx, oapi.OperationPoller(c, zone, *resp.JSON200.Id))
+	if err != nil {
+		return err
+	}
+
+	return nil
+}
+
 // UpdateSKSCluster updates an SKS cluster.
 func (c *Client) UpdateSKSCluster(ctx context.Context, zone string, cluster *SKSCluster) error {
 	if err := validateOperationParams(cluster, "update"); err != nil {

v2/sks_cluster_test.go

@@ -643,6 +643,50 @@
 	ts.Require().True(rotated)
 }
 
+func (ts *testSuite) TestClient_RotateSKSClusterCSICredentials() {
+	var (
+		testOperationID    = ts.randomID()
+		testOperationState = oapi.OperationStateSuccess
+		rotated            = false
+	)
+
+	cluster := &SKSCluster{
+		ID: &testSKSClusterID,
+	}
+
+	ts.mock().
+		On(
+			"RotateSksCsiCredentialsWithResponse",
+			mock.Anything,                 // ctx
+			mock.Anything,                 // id
+			([]oapi.RequestEditorFn)(nil), // reqEditors
+		).
+		Run(func(args mock.Arguments) {
+			ts.Require().Equal(testSKSClusterID, args.Get(1))
+			rotated = true
+		}).
+		Return(
+			&oapi.RotateSksCsiCredentialsResponse{
+				HTTPResponse: &http.Response{StatusCode: http.StatusOK},
+				JSON200: &oapi.Operation{
+					Id:        &testOperationID,
+					Reference: oapi.NewReference(nil, &testSKSClusterID, nil),
+					State:     &testOperationState,
+				},
+			},
+			nil,
+		)
+
+	ts.mockGetOperation(&oapi.Operation{
+		Id:        &testOperationID,
+		Reference: oapi.NewReference(nil, &testSKSClusterID, nil),
+		State:     &testOperationState,
+	})
+
+	ts.Require().NoError(ts.client.RotateSKSClusterCSICredentials(context.Background(), testZone, cluster))
+	ts.Require().True(rotated)
+}
+
 func (ts *testSuite) TestClient_UpdateSKSCluster() {
 	var (
 		testSKSClusterAutoUpgradeUpdated = false

v3/generator/source.yaml

@@ -5195,6 +5195,7 @@ components:
         state:
           type: string
           enum:
+          - rotating-csi-credentials
           - rotating-ccm-credentials
           - creating
           - upgrading
@@ -13764,6 +13765,27 @@ paths:
                     type: string
                     format: uuid
       operationId: evict-instance-pool-members
+  "/sks-cluster/{id}/rotate-csi-credentials":
+    put:
+      tags:
+      - sks
+      responses:
+        '200':
+          description: '200'
+          content:
+            application/json:
+              schema:
+                "$ref": "#/components/schemas/operation"
+      description: ''
+      parameters:
+      - in: path
+        required: true
+        name: id
+        schema:
+          type: string
+          format: uuid
+      summary: Rotate Exoscale CSI credentials
+      operationId: rotate-sks-csi-credentials
   "/dbaas-grafana/{service-name}/user/{username}/password/reset":
     put:
       tags: