func()

in pkg/cmd/serviceaccount/phases/delete/federatedidentitycredential.go [60:81]


func (p *federatedIdentityPhase) run(ctx context.Context, data workflow.RunData) error {
	deleteData := data.(DeleteData)

	subject := util.GetFederatedCredentialSubject(deleteData.ServiceAccountNamespace(), deleteData.ServiceAccountName())
	l := mlog.WithValues(
		"subject", subject,
		"issuerURL", deleteData.ServiceAccountIssuerURL(),
	).WithName(federatedIdentityPhaseName)
	if fic, err := deleteData.AzureClient().GetFederatedCredential(ctx, deleteData.AADApplicationObjectID(), deleteData.ServiceAccountIssuerURL(), subject); err != nil {
		if !cloud.IsFederatedCredentialNotFound(err) {
			return errors.Wrap(err, "failed to get federated identity credential")
		}
		l.Warning("federated identity credential not found")
	} else {
		if err = deleteData.AzureClient().DeleteFederatedCredential(ctx, deleteData.AADApplicationObjectID(), *fic.GetId()); err != nil {
			return errors.Wrap(err, "failed to delete federated identity credential")
		}
		l.Info("deleted federated identity credential")
	}

	return nil
}