in pkg/cmd/serviceaccount/phases/delete/federatedidentitycredential.go [60:81]
func (p *federatedIdentityPhase) run(ctx context.Context, data workflow.RunData) error {
deleteData := data.(DeleteData)
subject := util.GetFederatedCredentialSubject(deleteData.ServiceAccountNamespace(), deleteData.ServiceAccountName())
l := mlog.WithValues(
"subject", subject,
"issuerURL", deleteData.ServiceAccountIssuerURL(),
).WithName(federatedIdentityPhaseName)
if fic, err := deleteData.AzureClient().GetFederatedCredential(ctx, deleteData.AADApplicationObjectID(), deleteData.ServiceAccountIssuerURL(), subject); err != nil {
if !cloud.IsFederatedCredentialNotFound(err) {
return errors.Wrap(err, "failed to get federated identity credential")
}
l.Warning("federated identity credential not found")
} else {
if err = deleteData.AzureClient().DeleteFederatedCredential(ctx, deleteData.AADApplicationObjectID(), *fic.GetId()); err != nil {
return errors.Wrap(err, "failed to delete federated identity credential")
}
l.Info("deleted federated identity credential")
}
return nil
}