(chore): allow cross projects access

Signed-off-by: abhijith-darshan <abhijith.ravindra@sap.com>

Author: abhijith-darshan

cmd/webhook/main.go

@@ -22,7 +22,9 @@ const (
 
 func main() {
 	var domainFilters []string
+	var allProjects bool
 	pflag.StringArrayVar(&domainFilters, "domain-filter", []string{}, "List of domains to work on (can be specified multiple times)")
+	pflag.BoolVar(&allProjects, "all-projects", false, "Manage all zones and recordsets regardless of the project the service user resides in")
 	pflag.Parse()
 
 	log.SetLevel(log.DebugLevel)
@@ -61,7 +63,7 @@ func main() {
 	}()
 
 	epf := endpoint.NewDomainFilter(domainFilters)
-	dp, err := provider.NewDesignateProvider(*epf, false)
+	dp, err := provider.NewDesignateProvider(*epf, allProjects, false)
 	if err != nil {
 		log.Fatalf("NewDesignateProvider: %v", err)
 		metrics.OpenstackConnectionMetric.Set(0)

internal/designate/client/client.go

@@ -51,17 +51,24 @@ type DesignateClientInterface interface {
 	DeleteRecordSet(ctx context.Context, zoneID, recordSetID string) error
 }
 
+const allProjectsHeader = "X-Auth-All-Projects"
+
 // implementation of the DesignateClientInterface
 type designateClient struct {
 	serviceClient *gophercloud.ServiceClient
 }
 
 // factory function for the DesignateClientInterface
-func NewDesignateClient() (DesignateClientInterface, error) {
+func NewDesignateClient(allProjects bool) (DesignateClientInterface, error) {
 	serviceClient, err := createDesignateServiceClient()
 	if err != nil {
 		return nil, err
 	}
+	if allProjects {
+		serviceClient.MoreHeaders = map[string]string{
+			allProjectsHeader: "true",
+		}
+	}
 	return &designateClient{serviceClient}, nil
 }
 

internal/designate/provider/provider.go

@@ -29,9 +29,9 @@ import (
 	"sigs.k8s.io/external-dns/endpoint"
 	"sigs.k8s.io/external-dns/plan"
 	"sigs.k8s.io/external-dns/provider"
-)
 
-import "external-dns-openstack-webhook/internal/designate/client"
+	"external-dns-openstack-webhook/internal/designate/client"
+)
 
 const (
 	// ID of the RecordSet from which endpoint was created
@@ -56,8 +56,8 @@ type designateProvider struct {
 }
 
 // NewDesignateProvider is a factory function for OpenStack designate providers
-func NewDesignateProvider(domainFilter endpoint.DomainFilter, dryRun bool) (provider.Provider, error) {
-	client, err := client.NewDesignateClient()
+func NewDesignateProvider(domainFilter endpoint.DomainFilter, allProjects, dryRun bool) (provider.Provider, error) {
+	client, err := client.NewDesignateClient(allProjects)
 	if err != nil {
 		return nil, err
 	}
@@ -116,7 +116,7 @@ func getHostZoneID(hostname string, managedZones map[string]string) string {
 	resultID := ""
 
 	for zoneID, zoneName := range managedZones {
-		if !strings.HasSuffix(hostname, "." + zoneName) && hostname != zoneName {
+		if !strings.HasSuffix(hostname, "."+zoneName) && hostname != zoneName {
 			continue
 		}
 		ln := len(zoneName)

internal/designate/provider/provider_test.go

@@ -262,7 +262,7 @@ clouds:
 	os.Setenv("OS_CLOUD", "unittest")
 	os.Setenv("OS_CACERT", tmpfile.Name())
 
-	if _, err := NewDesignateProvider(endpoint.DomainFilter{}, true); err != nil {
+	if _, err := NewDesignateProvider(endpoint.DomainFilter{}, false, true); err != nil {
 		t.Fatalf("Failed to initialize Designate provider: %s", err)
 	}
 }