changed to boolean field, which indicatest provider behavior after databases and roles restoration

Author: JevgeniF

apis/cluster/postgresql/v1alpha1/role_types.go

@@ -91,11 +91,11 @@ type RoleParameters struct {
 	// +optional
 	ConfigurationParameters *[]RoleConfigurationParameter `json:"configurationParameters,omitempty"`
 
-	// PasswordResetToken can be set to any string to trigger a one-time password reset.
-	// Useful after restoring a database from a snapshot, where roles already exist in the DB but
-	// the connection secret may be empty. Change the token value to trigger another reset.
+	// PasswordReset controls behaviour when the role exists in the database but the connection
+	// secret has no password.
+	// When true, a new password is generated and written to the connection secret.
 	// +optional
-	PasswordResetToken *string `json:"passwordResetToken,omitempty"`
+	PasswordReset *bool `json:"passwordReset,omitempty"`
 }
 
 // RoleConfigurationParameter is a role configuration parameter.
@@ -111,10 +111,6 @@ type RoleObservation struct {
 	PrivilegesAsClauses []string `json:"privilegesAsClauses,omitempty"`
 	// ConfigurationParameters represents the applied configuration parameters for the PostgreSQL role.
 	ConfigurationParameters *[]RoleConfigurationParameter `json:"configurationParameters,omitempty"`
-	// LastPasswordResetToken tracks the passwordResetToken value at which the last password reset was applied.
-	// Used to prevent repeated resets when spec.forProvider.passwordResetToken is set.
-	// +optional
-	LastPasswordResetToken *string `json:"lastPasswordResetToken,omitempty"`
 }
 
 // +kubebuilder:object:root=true

apis/cluster/postgresql/v1alpha1/zz_generated.deepcopy.go

@@ -92,11 +92,11 @@ type RoleParameters struct {
 	// +optional
 	ConfigurationParameters *[]RoleConfigurationParameter `json:"configurationParameters,omitempty"`
 
-	// PasswordResetToken can be set to any string to trigger a one-time password reset.
-	// Useful after restoring a database from a snapshot, where roles already exist in the DB but
-	// the connection secret may be empty. Change the token value to trigger another reset.
+	// PasswordReset controls behaviour when the role exists in the database but the connection
+	// secret has no password.
+	// When true, a new password is generated and written to the connection secret.
 	// +optional
-	PasswordResetToken *string `json:"passwordResetToken,omitempty"`
+	PasswordReset *bool `json:"passwordReset,omitempty"`
 }
 
 // RoleConfigurationParameter is a role configuration parameter.
@@ -112,10 +112,6 @@ type RoleObservation struct {
 	PrivilegesAsClauses []string `json:"privilegesAsClauses,omitempty"`
 	// ConfigurationParameters represents the applied configuration parameters for the PostgreSQL role.
 	ConfigurationParameters *[]RoleConfigurationParameter `json:"configurationParameters,omitempty"`
-	// LastPasswordResetToken tracks the passwordResetToken value at which the last password reset was applied.
-	// Used to prevent repeated resets when spec.forProvider.passwordResetToken is set.
-	// +optional
-	LastPasswordResetToken *string `json:"lastPasswordResetToken,omitempty"`
 }
 
 // +kubebuilder:object:root=true

apis/namespaced/postgresql/v1alpha1/role_types.go

@@ -94,12 +94,11 @@ spec:
                     description: ConnectionLimit to be applied to the role.
                     format: int32
                     type: integer
-                  passwordResetToken:
+                  passwordReset:
                     description: |-
-                      PasswordResetToken can be set to any string to trigger a one-time password reset.
-                      Useful after restoring a database from a snapshot, where roles already exist in the DB but
-                      the connection secret may be empty. Change the token value to trigger another reset.
-                    type: string
+                      PasswordReset controls behaviour when the role exists in the database but the connection
+                      secret has no password. When true, a new password is generated and written to the connection secret.
+                    type: boolean
                   passwordSecretRef:
                     description: |-
                       PasswordSecretRef references the secret that contains the password used
@@ -258,11 +257,6 @@ spec:
                           type: string
                       type: object
                     type: array
-                  lastPasswordResetToken:
-                    description: |-
-                      LastPasswordResetToken tracks the passwordResetToken value at which the last password reset was applied.
-                      Used to prevent repeated resets when spec.forProvider.passwordResetToken is set.
-                    type: string
                   privilegesAsClauses:
                     description: |-
                       PrivilegesAsClauses represents the applied privileges state, taking into account

apis/namespaced/postgresql/v1alpha1/zz_generated.deepcopy.go

@@ -80,12 +80,11 @@ spec:
                     description: ConnectionLimit to be applied to the role.
                     format: int32
                     type: integer
-                  passwordResetToken:
+                  passwordReset:
                     description: |-
-                      PasswordResetToken can be set to any string to trigger a one-time password reset.
-                      Useful after restoring a database from a snapshot, where roles already exist in the DB but
-                      the connection secret may be empty. Change the token value to trigger another reset.
-                    type: string
+                      PasswordReset controls behaviour when the role exists in the database but the connection
+                      secret has no password. When true, a new password is generated and written to the connection secret.
+                    type: boolean
                   passwordSecretRef:
                     description: |-
                       PasswordSecretRef references the secret that contains the password used
@@ -211,11 +210,6 @@ spec:
                           type: string
                       type: object
                     type: array
-                  lastPasswordResetToken:
-                    description: |-
-                      LastPasswordResetToken tracks the passwordResetToken value at which the last password reset was applied.
-                      Used to prevent repeated resets when spec.forProvider.passwordResetToken is set.
-                    type: string
                   privilegesAsClauses:
                     description: |-
                       PrivilegesAsClauses represents the applied privileges state, taking into account

package/crds/postgresql.sql.crossplane.io_roles.yaml

@@ -352,10 +352,6 @@ func (c *external) Update(ctx context.Context, mg *v1alpha1.Role) (managed.Exter
 		}); err != nil {
 			return managed.ExternalUpdate{}, errors.Wrap(err, errUpdateRole)
 		}
-		if mg.Spec.ForProvider.PasswordResetToken != nil {
-			token := *mg.Spec.ForProvider.PasswordResetToken
-			mg.Status.AtProvider.LastPasswordResetToken = &token
-		}
 	}
 
 	privs := privilegesToClauses(mg.Spec.ForProvider.Privileges)