Merge pull request #128 from stackitcloud/feature/cert-manager_base-url

feat: add the possibility to set url endpoint for service account authentication

Author: PatrickKoss

README.md

@@ -185,6 +185,7 @@ spec:
             authTokenSecretKey: string
             authTokenSecretNamespace: string
             serviceAccountKeyPath: string
+            serviceAccountBaseUrl: string
             acmeTxtRecordTTL: int64
 ```
 
@@ -195,6 +196,7 @@ spec:
 - authTokenSecretKey: The key within the secret containing the STACKIT authentication token. (Default: auth-token)
 - authTokenSecretNamespace: The namespace of the secret containing the STACKIT authentication token. (Default: cert-manager)
 - serviceAccountKeyPath: The path to the service account key file. The file must be mounted into the container.
+- serviceAccountBaseUrl: The base URL for the STACKIT service account API. (Default: https://service-account.api.stackit.cloud/token)
 - acmeTxtRecordTTL: The TTL for the ACME TXT record. (Default: 600)
 
 ## Test Procedures

internal/repository/config.go

@@ -3,10 +3,11 @@ package repository
 import "net/http"
 
 type Config struct {
-	ApiBasePath string
-	AuthToken   string
-	ProjectId   string
-	HttpClient  *http.Client
-	SaKeyPath   string
-	UseSaKey    bool
+	ApiBasePath           string
+	ServiceAccountBaseUrl string
+	AuthToken             string
+	ProjectId             string
+	HttpClient            *http.Client
+	SaKeyPath             string
+	UseSaKey              bool
 }

internal/repository/dns_client.go

@@ -28,6 +28,7 @@ func newStackitDnsClientKeyPath(config Config) (*stackitdnsclient.APIClient, err
 		stackitconfig.WithServiceAccountKeyPath(config.SaKeyPath),
 		stackitconfig.WithHTTPClient(&httpClient),
 		stackitconfig.WithEndpoint(config.ApiBasePath),
+		stackitconfig.WithTokenEndpoint(config.ServiceAccountBaseUrl),
 	)
 }
 

internal/repository/mock/rrset_repository.go

@@ -25,6 +25,7 @@ type StackitDnsProviderConfig struct {
 	AuthTokenSecretKey       string `json:"authTokenSecretKey"`
 	AuthTokenSecretNamespace string `json:"authTokenSecretNamespace"`
 	ServiceAccountKeyPath    string `json:"serviceAccountKeyPath"`
+	ServiceAccountBaseUrl    string `json:"serviceAccountBaseUrl"`
 	AcmeTxtRecordTTL         int64  `json:"acmeTxtRecordTTL"`
 }