Filter AWS injected tags

We are adding a new generated code that handles the filtering of tags.
These tags may be injected AWS resources during creation, or are added
to resources managed by cloudformation for example, and the controller
would see them in the diff and attempt to remove them. With these changes
we ensure that any tag that has `aws:` prefix will be filtered out after
the Find operation. Doing so will ensure that we don't attempt to remove
these tags.

Author: michaelhtm

templates/pkg/resource/manager.go.tpl

@@ -140,6 +140,7 @@ func (rm *resourceManager) Update(
 		// Should never happen... if it does, it's buggy code.
 		panic("resource manager's Update() method received resource with nil CR object")
 	}
+	syncAWSTags(desired, latest)
 	updated, err := rm.sdkUpdate(ctx, desired, latest, delta)
 	if err != nil {
 	    if updated != nil {
@@ -311,6 +312,92 @@ func (rm *resourceManager) EnsureTags(
 {{- end }}
 }
 
+// filterAWSTags ignores tags that have keys that start with "aws:"
+// is needed to ensure the controller does not attempt to remove
+// tags set by AWS. This function needs to be called after each Read
+// operation.
+// Eg. resources created with cloudformation have tags that cannot be
+//removed by an ACK controller
+func (rm *resourceManager) FilterAWSTags(res acktypes.AWSResource) {
+{{- if $hookCode := Hook .CRD "filter_tags" }}
+{{ $hookCode }}
+{{ else }}
+{{ $tagField := .CRD.GetTagField -}}
+{{ if $tagField -}}
+{{ $tagFieldShapeType := $tagField.ShapeRef.Shape.Type -}}
+{{ $tagFieldGoType := $tagField.GoType -}}
+{{ if eq "list" $tagFieldShapeType -}}
+{{ $tagFieldGoType = (print "[]*svcapitypes." $tagField.GoTypeElem) -}}
+{{ end -}}
+	r := rm.concreteResource(res)
+	if r == nil || r.ko == nil {
+		return
+	}
+	var existingTags {{ $tagFieldGoType }}
+{{ $nilCheck := CheckNilFieldPath $tagField "r.ko.Spec" -}}
+{{ if not (eq $nilCheck "") -}}
+    if {{ $nilCheck }} {
+        return
+    }
+{{ end -}}
+    existingTags = r.ko.Spec.{{ $tagField.Path }}
+	resourceTags := ToACKTags(existingTags)
+	acktags.IgnoreAWSTags(resourceTags)
+{{ GoCodeInitializeNestedStructField .CRD "r.ko" $tagField "svcapitypes" 1 -}}
+	r.ko.Spec.{{ $tagField.Path }} = FromACKTags(resourceTags)
+{{- end }}
+{{- end }}
+}
+
+
+// syncAWSTags ignores tags that have keys that start with "aws:"
+// is needed to ensure the controller does not attempt to remove
+// tags set by AWS. This function needs to be called after each Read
+// operation.
+// Eg. resources created with cloudformation have tags that cannot be
+//removed by an ACK controller
+func syncAWSTags(a *resource, b *resource) {
+{{- if $hookCode := Hook .CRD "sync_tags" }}
+{{ $hookCode }}
+{{ else }}
+{{ $tagField := .CRD.GetTagField -}}
+{{ if $tagField -}}
+{{ $tagFieldShapeType := $tagField.ShapeRef.Shape.Type -}}
+{{ $tagFieldGoType := $tagField.GoType -}}
+{{ if eq "list" $tagFieldShapeType -}}
+{{ $tagFieldGoType = (print "[]*svcapitypes." $tagField.GoTypeElem) -}}
+{{ end -}}
+	if a == nil || a.ko == nil || b == nil || b.ko == nil {
+		return
+	}
+	var existingLatestTags []*svcapitypes.Tag
+	var existingDesiredTags []*svcapitypes.Tag
+{{ $nilCheck := CheckNilFieldPath $tagField "b.ko.Spec" -}}
+{{ if not (eq $nilCheck "") -}}
+    if {{ $nilCheck }} {
+        return
+    }
+{{ end -}}
+{{ $nilCheck = CheckNilFieldPath $tagField "a.ko.Spec" -}}
+{{if not (eq $nilCheck "") -}}
+	if {{ $nilCheck }} {
+		existingDesiredTags = nil
+	} else {
+		existingDesiredTags = a.ko.Spec.{{ $tagField.Path }}
+	}
+{{ else -}}
+	existingDesiredTags = a.ko.Spec.{{ $tagField.Path }}
+{{ end -}}
+    existingLatestTags = b.ko.Spec.{{ $tagField.Path }}
+	desiredTags := ToACKTags(existingDesiredTags)
+	latestTags := ToACKTags(existingLatestTags)
+	acktags.SyncAWSTags(desiredTags, latestTags)
+{{ GoCodeInitializeNestedStructField .CRD "a.ko" $tagField "svcapitypes" 1 -}}
+	a.ko.Spec.{{ $tagField.Path }} = FromACKTags(desiredTags)
+{{- end }}
+{{- end }}
+}
+
 // newResourceManager returns a new struct implementing
 // acktypes.AWSResourceManager
 // This is for AWS-SDK-GO-V2 - Created newResourceManager With AWS sdk-Go-ClientV2