use kubeconfig writer for iamauth kubeconfig

pkg/awsiamauth/installer.go

@@ -9,6 +9,7 @@ import (
 	"github.com/aws/eks-anywhere/pkg/cluster"
 	"github.com/aws/eks-anywhere/pkg/crypto"
 	"github.com/aws/eks-anywhere/pkg/filewriter"
+	"github.com/aws/eks-anywhere/pkg/kubeconfig"
 	"github.com/aws/eks-anywhere/pkg/logger"
 	"github.com/aws/eks-anywhere/pkg/types"
 )
@@ -23,11 +24,12 @@ type KubernetesClient interface {
 
 // Installer provides the necessary behavior for installing the AWS IAM Authenticator.
 type Installer struct {
-	certgen         crypto.CertificateGenerator
-	templateBuilder *TemplateBuilder
-	clusterID       uuid.UUID
-	k8s             KubernetesClient
-	writer          filewriter.FileWriter
+	certgen          crypto.CertificateGenerator
+	templateBuilder  *TemplateBuilder
+	clusterID        uuid.UUID
+	k8s              KubernetesClient
+	writer           filewriter.FileWriter
+	kubeconfigWriter kubeconfig.Writer
 }
 
 // NewInstaller creates a new installer instance.
@@ -36,13 +38,15 @@ func NewInstaller(
 	clusterID uuid.UUID,
 	k8s KubernetesClient,
 	writer filewriter.FileWriter,
+	kubeconfigWriter kubeconfig.Writer,
 ) *Installer {
 	return &Installer{
-		certgen:         certgen,
-		templateBuilder: &TemplateBuilder{},
-		clusterID:       clusterID,
-		k8s:             k8s,
-		writer:          writer,
+		certgen:          certgen,
+		templateBuilder:  &TemplateBuilder{},
+		clusterID:        clusterID,
+		k8s:              k8s,
+		writer:           writer,
+		kubeconfigWriter: kubeconfigWriter,
 	}
 }
 
@@ -163,6 +167,17 @@ func (i *Installer) GenerateManagementAWSIAMKubeconfig(
 ) error {
 	fileName := fmt.Sprintf("%s-aws.kubeconfig", cluster.Name)
 
+	fsOptions := []filewriter.FileOptionsFunc{filewriter.PersistentFile, filewriter.Permission0600}
+	fh, path, err := i.writer.Create(
+		fileName,
+		fsOptions...,
+	)
+	if err != nil {
+		return err
+	}
+
+	defer fh.Close()
+
 	decodedKubeconfigSecretValue, err := i.k8s.GetAWSIAMKubeconfigSecretValue(
 		ctx,
 		cluster,
@@ -172,16 +187,11 @@ func (i *Installer) GenerateManagementAWSIAMKubeconfig(
 		return fmt.Errorf("generating aws-iam-authenticator kubeconfig: %v", err)
 	}
 
-	writtenFile, err := i.writer.Write(
-		fileName,
-		decodedKubeconfigSecretValue,
-		filewriter.PersistentFile,
-		filewriter.Permission0600,
-	)
+	i.kubeconfigWriter.WriteKubeconfigContent(ctx, cluster.Name, decodedKubeconfigSecretValue, fh)
 	if err != nil {
-		return fmt.Errorf("writing aws-iam-authenticator kubeconfig to %s: %v", writtenFile, err)
+		return fmt.Errorf("writing aws-iam-authenticator kubeconfig to %s: %v", path, err)
 	}
 
-	logger.V(3).Info("Generated aws-iam-authenticator kubeconfig", "kubeconfig", writtenFile)
+	logger.V(3).Info("Generated aws-iam-authenticator kubeconfig", "kubeconfig", path)
 	return nil
 }

pkg/awsiamauth/installer_test.go

@@ -17,6 +17,7 @@ import (
 	cryptomocks "github.com/aws/eks-anywhere/pkg/crypto/mocks"
 	"github.com/aws/eks-anywhere/pkg/filewriter"
 	filewritermock "github.com/aws/eks-anywhere/pkg/filewriter/mocks"
+	kubeconfigmocks "github.com/aws/eks-anywhere/pkg/kubeconfig/mocks"
 	"github.com/aws/eks-anywhere/pkg/types"
 )
 
@@ -38,6 +39,7 @@ func TestInstallAWSIAMAuth(t *testing.T) {
 
 	var kubeconfig []byte
 	writer := filewritermock.NewMockFileWriter(ctrl)
+	kwriter := kubeconfigmocks.NewMockWriter(ctrl)
 	writer.EXPECT().Write(gomock.Any(), gomock.Any(), gomock.Any()).DoAndReturn(
 		func(fileName string, content []byte, f ...filewriter.FileOptionsFunc) (string, error) {
 			kubeconfig = content
@@ -80,7 +82,7 @@ func TestInstallAWSIAMAuth(t *testing.T) {
 		},
 	}
 
-	installer := awsiamauth.NewInstaller(certs, clusterID, k8s, writer)
+	installer := awsiamauth.NewInstaller(certs, clusterID, k8s, writer, kwriter)
 
 	err := installer.InstallAWSIAMAuth(context.Background(), &types.Cluster{}, &types.Cluster{}, spec)
 	if err != nil {
@@ -172,8 +174,8 @@ func TestInstallAWSIAMAuthErrors(t *testing.T) {
 					},
 				},
 			}
-
-			installer := awsiamauth.NewInstaller(certs, clusterID, k8s, writer)
+			kwriter := kubeconfigmocks.NewMockWriter(ctrl)
+			installer := awsiamauth.NewInstaller(certs, clusterID, k8s, writer, kwriter)
 
 			err := installer.InstallAWSIAMAuth(context.Background(), &types.Cluster{}, &types.Cluster{}, spec)
 			if err == nil {
@@ -205,7 +207,8 @@ func TestCreateAndInstallAWSIAMAuthCASecret(t *testing.T) {
 	certs := cryptomocks.NewMockCertificateGenerator(ctrl)
 	certs.EXPECT().GenerateIamAuthSelfSignCertKeyPair().Return([]byte("ca-cert"), []byte("ca-key"), nil)
 
-	installer := awsiamauth.NewInstaller(certs, clusterID, k8s, writer)
+	kwriter := kubeconfigmocks.NewMockWriter(ctrl)
+	installer := awsiamauth.NewInstaller(certs, clusterID, k8s, writer, kwriter)
 
 	err := installer.CreateAndInstallAWSIAMAuthCASecret(context.Background(), &types.Cluster{}, "test-cluster")
 	if err != nil {
@@ -248,7 +251,8 @@ func TestCreateAndInstallAWSIAMAuthCASecretErrors(t *testing.T) {
 			certs := cryptomocks.NewMockCertificateGenerator(ctrl)
 			certs.EXPECT().GenerateIamAuthSelfSignCertKeyPair().Return([]byte("ca-cert"), []byte("ca-key"), nil)
 
-			installer := awsiamauth.NewInstaller(certs, clusterID, k8s, writer)
+			kwriter := kubeconfigmocks.NewMockWriter(ctrl)
+			installer := awsiamauth.NewInstaller(certs, clusterID, k8s, writer, kwriter)
 
 			err := installer.CreateAndInstallAWSIAMAuthCASecret(context.Background(), &types.Cluster{}, "test-cluster")
 
@@ -280,7 +284,8 @@ func TestUpgradeAWSIAMAuth(t *testing.T) {
 		},
 	)
 
-	installer := awsiamauth.NewInstaller(certs, clusterID, k8s, writer)
+	kwriter := kubeconfigmocks.NewMockWriter(ctrl)
+	installer := awsiamauth.NewInstaller(certs, clusterID, k8s, writer, kwriter)
 
 	spec := &cluster.Spec{
 		Config: &cluster.Config{
@@ -335,7 +340,8 @@ func TestGenerateManagementAWSIAMKubeconfig(t *testing.T) {
 	writer := filewritermock.NewMockFileWriter(ctrl)
 	writer.EXPECT().Write(gomock.Any(), gomock.Any(), gomock.Any()).Return("kubeconfig", nil)
 
-	installer := awsiamauth.NewInstaller(certs, clusterID, k8s, writer)
+	kwriter := kubeconfigmocks.NewMockWriter(ctrl)
+	installer := awsiamauth.NewInstaller(certs, clusterID, k8s, writer, kwriter)
 
 	err := installer.GenerateManagementAWSIAMKubeconfig(context.Background(), &types.Cluster{})
 	if err != nil {
@@ -353,10 +359,11 @@ func TestGenerateManagementAWSIAMKubeconfigError(t *testing.T) {
 
 	writer := filewritermock.NewMockFileWriter(ctrl)
 
-	installer := awsiamauth.NewInstaller(certs, clusterID, k8s, writer)
+	kwriter := kubeconfigmocks.NewMockWriter(ctrl)
+	installer := awsiamauth.NewInstaller(certs, clusterID, k8s, writer, kwriter)
 
 	err := installer.GenerateManagementAWSIAMKubeconfig(context.Background(), &types.Cluster{})
 	if err == nil {
 		t.Fatal(err)
 	}
-}
+}

pkg/dependencies/factory.go

@@ -951,8 +951,8 @@ func (f *Factory) WithCiliumTemplater() *Factory {
 	return f
 }
 
-func (f *Factory) WithAwsIamAuth() *Factory {
-	f.WithKubectl().WithWriter()
+func (f *Factory) WithAwsIamAuth(clusterConfig *v1alpha1.Cluster) *Factory {
+	f.WithKubectl().WithWriter().WithKubeconfigWriter(clusterConfig)
 
 	f.buildSteps = append(f.buildSteps, func(ctx context.Context) error {
 		if f.dependencies.AwsIamAuth != nil {
@@ -971,6 +971,7 @@ func (f *Factory) WithAwsIamAuth() *Factory {
 			clusterId,
 			awsiamauth.NewRetrierClient(f.dependencies.Kubectl, opts...),
 			f.dependencies.Writer,
+			f.dependencies.KubeconfigWriter,
 		)
 		return nil
 	})
@@ -1067,7 +1068,7 @@ func (f *Factory) clusterManagerOpts(timeoutOpts *ClusterManagerTimeoutOptions)
 
 // WithClusterManager builds a cluster manager based on the cluster config and timeout options.
 func (f *Factory) WithClusterManager(clusterConfig *v1alpha1.Cluster, timeoutOpts *ClusterManagerTimeoutOptions) *Factory {
-	f.WithClusterctl().WithNetworking(clusterConfig).WithWriter().WithDiagnosticBundleFactory().WithAwsIamAuth().WithFileReader().WithUnAuthKubeClient().WithKubernetesRetrierClient().WithEKSAInstaller()
+	f.WithClusterctl().WithNetworking(clusterConfig).WithWriter().WithDiagnosticBundleFactory().WithAwsIamAuth(clusterConfig).WithFileReader().WithUnAuthKubeClient().WithKubernetesRetrierClient().WithEKSAInstaller()
 
 	f.buildSteps = append(f.buildSteps, func(ctx context.Context) error {
 		if f.dependencies.ClusterManager != nil {

pkg/dependencies/factory_test.go

@@ -691,7 +691,7 @@ func TestFactoryBuildWithAwsIamAuthNoTimeout(t *testing.T) {
 	deps, err := dependencies.NewFactory().
 		WithLocalExecutables().
 		WithNoTimeouts().
-		WithAwsIamAuth().
+		WithAwsIamAuth(tt.clusterSpec.Cluster).
 		Build(context.Background())
 
 	tt.Expect(err).To(BeNil())

pkg/kubeconfig/kubeconfig.go

@@ -17,6 +17,7 @@ import (
 // Writer reads the kubeconfig secret on a cluster and copies the contents to a writer.
 type Writer interface {
 	WriteKubeconfig(ctx context.Context, clusterName, kubeconfig string, w io.Writer) error
+	WriteKubeconfigContent(ctx context.Context, clusterName string, content []byte, w io.Writer) error
 }
 
 // FromClusterFormat defines the format of the kubeconfig of the.

pkg/kubeconfig/kubeconfig_writer.go

@@ -66,7 +66,16 @@ func (kr ClusterAPIKubeconfigSecretWriter) WriteKubeconfig(ctx context.Context,
 		return err
 	}
 
-	if _, err := io.Copy(w, bytes.NewReader(rawKubeconfig)); err != nil {
+	if err := kr.WriteKubeconfigContent(ctx, clusterName, rawKubeconfig, w); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// WriteKubeconfigContent copies a raw kubeconfig to an io.Writer.
+func (kr ClusterAPIKubeconfigSecretWriter) WriteKubeconfigContent(ctx context.Context, clusterName string, content []byte, w io.Writer) error {
+	if _, err := io.Copy(w, bytes.NewReader(content)); err != nil {
 		return err
 	}
 

pkg/providers/docker/docker.go

@@ -607,14 +607,23 @@ func (kr KubeconfigWriter) WriteKubeconfig(ctx context.Context, clusterName, kub
 		return err
 	}
 
+	if err := kr.WriteKubeconfigContent(ctx, clusterName, rawkubeconfig, w); err != nil {
+		return err
+	}
+
+	return nil
+}
+
+// WriteKubeconfig retrieves the contents of the specified cluster's kubeconfig from a secret and copies it to an io.Writer.
+func (kr KubeconfigWriter) WriteKubeconfigContent(ctx context.Context, clusterName string, content []byte, w io.Writer) error {
 	port, err := kr.docker.GetDockerLBPort(ctx, clusterName)
 	if err != nil {
 		return err
 	}
 
-	updateKubeconfig(&rawkubeconfig, port)
+	updateKubeconfig(&content, port)
 
-	if _, err := io.Copy(w, bytes.NewReader(rawkubeconfig)); err != nil {
+	if _, err := io.Copy(w, bytes.NewReader(content)); err != nil {
 		return err
 	}