Add token generation

Signed-off-by: Clément Blaise <clementblaise@me.com>

apis/projects/v1alpha1/types.go

@@ -113,6 +113,27 @@ type ProjectRole struct {
 	// Groups are a list of OIDC group claims bound to this role
 	// +optional
 	Groups []string `json:"groups,omitempty"`
+	// Tokens are a list of tokens to generate
+	// +optional
+	Tokens []ProjectToken `json:"tokens,omitempty"`
+}
+
+// ProjectToken holds the configuration for a Token
+type ProjectToken struct {
+	// ID is an id for the token
+	ID string `json:"id"`
+	// Description is a description for the token
+	// +optional
+	Description *string `json:"description,omitempty"`
+	// Duration before the token will expire. Valid time units are `s`, `m`, `h` and `d` E.g. 12h, 7d. No expiration if not set.
+	// +optional
+	ExpiresIn *string `json:"expiresIn,omitempty"`
+	// Duration to control token regeneration based on token age. Valid time units are `s`, `m`, `h` and `d`.
+	// +optional
+	RenewAfter *string `json:"renewAfter,omitempty"`
+	// Duration to control token regeneration based on remaining token lifetime. Valid time units are `s`, `m`, `h` and `d`.
+	// +optional
+	RenewBefore *string `json:"renewBefore,omitempty"`
 }
 
 // JWTToken holds the issuedAt and expiresAt values of a token

package/crds/projects.argocd.crossplane.io_projects.yaml

@@ -315,6 +315,38 @@ spec:
                           items:
                             type: string
                           type: array
+                        tokens:
+                          description: Tokens are a list of tokens to generate
+                          items:
+                            description: ProjectToken holds the configuration for
+                              a Token
+                            properties:
+                              description:
+                                description: Description is a description for the
+                                  token
+                                type: string
+                              expiresIn:
+                                description: Duration before the token will expire.
+                                  Valid time units are `s`, `m`, `h` and `d` E.g.
+                                  12h, 7d. No expiration if not set.
+                                type: string
+                              id:
+                                description: ID is an id for the token
+                                type: string
+                              renewAfter:
+                                description: Duration to control token regeneration
+                                  based on token age. Valid time units are `s`, `m`,
+                                  `h` and `d`.
+                                type: string
+                              renewBefore:
+                                description: Duration to control token regeneration
+                                  based on remaining token lifetime. Valid time units
+                                  are `s`, `m`, `h` and `d`.
+                                type: string
+                            required:
+                            - id
+                            type: object
+                          type: array
                       required:
                       - name
                       type: object

pkg/clients/projects/client.go

@@ -26,6 +26,10 @@ type ProjectServiceClient interface {
 	Update(ctx context.Context, in *project.ProjectUpdateRequest, opts ...grpc.CallOption) (*v1alpha1.AppProject, error)
 	// Delete deletes a project
 	Delete(ctx context.Context, in *project.ProjectQuery, opts ...grpc.CallOption) (*project.EmptyResponse, error)
+	// CreateToken a new project token
+	CreateToken(ctx context.Context, in *project.ProjectTokenCreateRequest, opts ...grpc.CallOption) (*project.ProjectTokenResponse, error)
+	// DeleteToken a new project token
+	DeleteToken(ctx context.Context, in *project.ProjectTokenDeleteRequest, opts ...grpc.CallOption) (*project.EmptyResponse, error)
 }
 
 // NewProjectServiceClient creates a new API client from a set of config options, or fails fatally if the new client creation fails.