fix: default region required for IAM service endpoint resolution

Author: TylerGillson

api/v1alpha1/awsvalidator_types.go

@@ -26,6 +26,7 @@ import (
 // AwsValidatorSpec defines the desired state of AwsValidator
 type AwsValidatorSpec struct {
 	Auth              AwsAuth            `json:"auth"`
+	DefaultRegion     string             `json:"defaultRegion"`
 	IamRoleRules      []IamRoleRule      `json:"iamRoleRules,omitempty"`
 	IamUserRules      []IamUserRule      `json:"iamUserRules,omitempty"`
 	IamGroupRules     []IamGroupRule     `json:"iamGroupRules,omitempty"`

chart/valid8or-plugin-aws/crds/awsvalidator-crd.yaml

@@ -42,6 +42,8 @@ spec:
                     description: 'Option 2: specify a service account (EKS)'
                     type: string
                 type: object
+              defaultRegion:
+                type: string
               iamGroupRules:
                 items:
                   properties:
@@ -320,6 +322,7 @@ spec:
                 type: array
             required:
             - auth
+            - defaultRegion
             type: object
           status:
             description: AwsValidatorStatus defines the observed state of AwsValidator

config/crd/bases/validation.spectrocloud.labs_awsvalidators.yaml

@@ -43,6 +43,8 @@ spec:
                     description: 'Option 2: specify a service account (EKS)'
                     type: string
                 type: object
+              defaultRegion:
+                type: string
               iamGroupRules:
                 items:
                   properties:
@@ -321,6 +323,7 @@ spec:
                 type: array
             required:
             - auth
+            - defaultRegion
             type: object
           status:
             description: AwsValidatorStatus defines the observed state of AwsValidator

internal/controller/awsvalidator_controller.go

@@ -88,7 +88,7 @@ func (r *AwsValidatorReconciler) Reconcile(ctx context.Context, req ctrl.Request
 	failed := &types.MonotonicBool{}
 
 	// IAM rules
-	awsApi, err := aws_utils.NewAwsApi("")
+	awsApi, err := aws_utils.NewAwsApi(validator.Spec.DefaultRegion)
 	if err != nil {
 		r.Log.V(0).Error(err, "failed to get AWS client")
 	} else {