[DEMO, do not merge] Generated EnsureReferences output for code-generator#738

[gustavodiaz7722]

Demonstration only — not for merge.

Opened at the request of a reviewer on aws-controllers-k8s/code-generator#738, to show what that PR emits in the context of a full service controller.

lambda-controller regenerated against code-generator#738 with no other change, so the diff is exactly the generated EnsureReferences methods and nothing else. Local build stamps (pkg/version/version.go, ack-generate-metadata.yaml) were reverted deliberately, since they would otherwise show a spurious generator downgrade.

Why lambda

It exercises all three reference shapes, so the per-shape behaviour is visible in one controller:

Resource	Shape	Emitted
function	struct-nested — Code.S3BucketRef, VPCConfig.SecurityGroupRefs, VPCConfig.SubnetRefs	yes
layer_version	struct-nested	yes
event_source_mapping	list-nested	no
alias, code_signing_config, function_url_config, version	top-level only	no

function is the shape reported in aws-controllers-k8s/community#2431.

The generated method

func (rm *resourceManager) EnsureReferences(
	desired acktypes.AWSResource,
	latest acktypes.AWSResource,
) acktypes.AWSResource {
	desiredKO := rm.concreteResource(desired).ko.DeepCopy()
	latestKO := rm.concreteResource(latest).ko.DeepCopy()
	if desiredKO.Spec.Code != nil && latestKO.Spec.Code != nil && desiredKO.Spec.Code.S3BucketRef != nil && latestKO.Spec.Code.S3BucketRef == nil {
		latestKO.Spec.Code.S3BucketRef = desiredKO.Spec.Code.S3BucketRef
	}
	if desiredKO.Spec.VPCConfig != nil && latestKO.Spec.VPCConfig != nil && len(desiredKO.Spec.VPCConfig.SecurityGroupRefs) > 0 && len(latestKO.Spec.VPCConfig.SecurityGroupRefs) == 0 {
		latestKO.Spec.VPCConfig.SecurityGroupRefs = desiredKO.Spec.VPCConfig.SecurityGroupRefs
	}
	if desiredKO.Spec.VPCConfig != nil && latestKO.Spec.VPCConfig != nil && len(desiredKO.Spec.VPCConfig.SubnetRefs) > 0 && len(latestKO.Spec.VPCConfig.SubnetRefs) == 0 {
		latestKO.Spec.VPCConfig.SubnetRefs = desiredKO.Spec.VPCConfig.SubnetRefs
	}
	return &resource{latestKO}
}

Each assignment is guarded on the container existing on both objects and on the target actually missing the reference, so it cannot clobber a reference the service did report.

Compatibility

go.mod is unchanged. The method compiles against the current runtime and stays inert until aws-controllers-k8s/runtime#267 lands, which defines the optional ReferenceEnsurer interface and invokes it after Create and after Update.

Relationship to the existing hooks

templates/hooks/function/sdk_create_post_set_output.go.tpl and sdk_read_one_post_set_output.go.tpl currently restore these same references by hand. This PR does not remove them, and they should not be removed on the strength of code-generator#738: only their create-path half is subsumed. EnsureReferences is not invoked after ReadOne, so the adoption path in Sync and deleteResource still need the read-path hook.

Related: aws-controllers-k8s/code-generator#738, aws-controllers-k8s/runtime#267, aws-controllers-k8s/community#2431.

[ack-prow]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[ack-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: gustavodiaz7722

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [gustavodiaz7722]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment