Generic storage using secrets as backing + Invitation resource plumbing

README.md

@@ -95,6 +95,21 @@ spec:
     port: 9443
   version: v1
 ---
+apiVersion: apiregistration.k8s.io/v1
+kind: APIService
+metadata:
+  name: v1.user.appuio.io
+spec:
+  insecureSkipTLSVerify: true
+  group: user.appuio.io
+  groupPriorityMinimum: 1000
+  versionPriority: 15
+  service:
+    name: apiserver
+    namespace: default
+    port: 9443
+  version: v1
+---
 apiVersion: v1
 kind: Service
 metadata:

api.go

@@ -11,14 +11,18 @@ import (
 	genericregistry "k8s.io/apiserver/pkg/registry/generic"
 	"k8s.io/apiserver/pkg/registry/rest"
 	"sigs.k8s.io/apiserver-runtime/pkg/builder"
+	"sigs.k8s.io/apiserver-runtime/pkg/util/loopback"
 	ctrl "sigs.k8s.io/controller-runtime"
+	"sigs.k8s.io/controller-runtime/pkg/client"
 
 	billingv1 "github.com/appuio/control-api/apis/billing/v1"
 	orgv1 "github.com/appuio/control-api/apis/organization/v1"
+	userv1 "github.com/appuio/control-api/apis/user/v1"
 	"github.com/appuio/control-api/apiserver/authwrapper"
 	billingStore "github.com/appuio/control-api/apiserver/billing"
 	"github.com/appuio/control-api/apiserver/billing/odoostorage"
 	orgStore "github.com/appuio/control-api/apiserver/organization"
+	"github.com/appuio/control-api/apiserver/secretstorage"
 )
 
 type organizationStatusRegisterer struct {
@@ -44,6 +48,17 @@ func APICommand() *cobra.Command {
 		WithResourceAndHandler(&orgv1.Organization{}, ost).
 		WithResourceAndHandler(organizationStatusRegisterer{&orgv1.Organization{}}, ost).
 		WithResourceAndHandler(&billingv1.BillingEntity{}, ob.Build).
+		WithResourceAndHandler(&userv1.Invitation{}, func(s *runtime.Scheme, g genericregistry.RESTOptionsGetter) (rest.Storage, error) {
+			c, err := client.NewWithWatch(loopback.GetLoopbackMasterClientConfig(), client.Options{})
+			if err != nil {
+				return nil, err
+			}
+			err = userv1.AddToScheme(c.Scheme())
+			if err != nil {
+				return nil, err
+			}
+			return secretstorage.NewStorage(&userv1.Invitation{}, c, "default")
+		}).
 		WithoutEtcd().
 		ExposeLoopbackAuthorizer().
 		ExposeLoopbackMasterClientConfig().

apiserver/authwrapper/storage_test.go

@@ -18,7 +18,7 @@ import (
 
 	"github.com/appuio/control-api/apiserver/authwrapper"
 	"github.com/appuio/control-api/apiserver/authwrapper/mock"
-	"github.com/appuio/control-api/apiserver/authwrapper/testresource"
+	"github.com/appuio/control-api/apiserver/testresource"
 )
 
 var gvr = func() metav1.GroupVersionResource {

apiserver/billing/rbac_test.go

@@ -21,7 +21,7 @@ import (
 	"sigs.k8s.io/controller-runtime/pkg/client/fake"
 
 	"github.com/appuio/control-api/apiserver/authwrapper/mock"
-	"github.com/appuio/control-api/apiserver/authwrapper/testresource"
+	"github.com/appuio/control-api/apiserver/testresource"
 )
 
 func Test_createRBACWrapper(t *testing.T) {