make deploykey key sensitive

config/deploykey/config.go

@@ -1,6 +1,8 @@
 package deploykey
 
-import "github.com/crossplane/upjet/pkg/config"
+import (
+	"github.com/crossplane/upjet/pkg/config"
+)
 
 // Configure github_branch resource.
 func Configure(p *config.Provider) {
@@ -16,5 +18,12 @@ func Configure(p *config.Provider) {
 		r.References["repository"] = config.Reference{
 			Type: "Repository",
 		}
+
+		r.TerraformResource.Schema["key"].Required = true
+		r.TerraformResource.Schema["read_only"].Required = true
+		r.TerraformResource.Schema["title"].Required = true
+
+		// Setting the field as sensitive to be able to pass the content from a k8s secret
+		r.TerraformResource.Schema["key"].Sensitive = true
 	})
 }

examples-generated/repo/v1alpha1/deploykey.yaml

@@ -8,7 +8,10 @@ metadata:
   name: example-repository-deploy-key
 spec:
   forProvider:
-    key: ssh-rsa AAA...
+    keySecretRef:
+      key: example-key
+      name: example-secret
+      namespace: upbound-system
     readOnly: "false"
     repositorySelector:
       matchLabels:

package/crds/repo.github.upbound.io_deploykeys.yaml

@@ -73,11 +73,25 @@ spec:
                 type: string
               forProvider:
                 properties:
-                  key:
+                  keySecretRef:
                     description: |-
                       A SSH key.
                       A SSH key.
-                    type: string
+                    properties:
+                      key:
+                        description: The key to select.
+                        type: string
+                      name:
+                        description: Name of the secret.
+                        type: string
+                      namespace:
+                        description: Namespace of the secret.
+                        type: string
+                    required:
+                    - key
+                    - name
+                    - namespace
+                    type: object
                   readOnly:
                     description: |-
                       A boolean qualifying the key to be either read only or read/write.
@@ -181,11 +195,6 @@ spec:
                   for example because of an external controller is managing them, like an
                   autoscaler.
                 properties:
-                  key:
-                    description: |-
-                      A SSH key.
-                      A SSH key.
-                    type: string
                   readOnly:
                     description: |-
                       A boolean qualifying the key to be either read only or read/write.
@@ -444,10 +453,9 @@ spec:
             - forProvider
             type: object
             x-kubernetes-validations:
-            - message: spec.forProvider.key is a required parameter
+            - message: spec.forProvider.keySecretRef is a required parameter
               rule: '!(''*'' in self.managementPolicies || ''Create'' in self.managementPolicies
-                || ''Update'' in self.managementPolicies) || has(self.forProvider.key)
-                || (has(self.initProvider) && has(self.initProvider.key))'
+                || ''Update'' in self.managementPolicies) || has(self.forProvider.keySecretRef)'
             - message: spec.forProvider.title is a required parameter
               rule: '!(''*'' in self.managementPolicies || ''Create'' in self.managementPolicies
                 || ''Update'' in self.managementPolicies) || has(self.forProvider.title)
@@ -461,11 +469,6 @@ spec:
                     type: string
                   id:
                     type: string
-                  key:
-                    description: |-
-                      A SSH key.
-                      A SSH key.
-                    type: string
                   readOnly:
                     description: |-
                       A boolean qualifying the key to be either read only or read/write.