removes data from last-applied-configuration closes #27

WithSecureLabs · Oct 8, 2024 · 0f308e1 · 0f308e1
1 parent c8414be
commit 0f308e1
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/icekube/models/secret.py b/icekube/models/secret.py
@@ -21,6 +21,19 @@ def remove_secret_data(cls, v: Optional[str]) -> Optional[str]:
             if "data" in data:
                 del data["data"]
 
+            last_applied_configuration = (
+                data.get("metadata", {})
+                .get("annotations", {})
+                .get("kubectl.kubernetes.io/last-applied-configuration")
+            )
+            if last_applied_configuration:
+                last_applied_configuration = json.loads(last_applied_configuration)
+                if "data" in last_applied_configuration:
+                    del last_applied_configuration["data"]
+                data["metadata"]["annotations"][
+                    "kubectl.kubernetes.io/last-applied-configuration"
+                ] = json.dumps(last_applied_configuration)
+
             return json.dumps(data)
 
         return v