fix: [CDS-38863]: Use masking list for Update API call (argoproj#23)

server/repocreds/repocreds.go

@@ -1,6 +1,9 @@
 package repocreds
 
 import (
+	"github.com/argoproj/argo-cd/v2/util/grpc"
+	protov1 "github.com/golang/protobuf/proto"
+	"github.com/mennanov/fmutils"
 	"reflect"
 
 	"github.com/argoproj/argo-cd/v2/util/argo"
@@ -117,6 +120,17 @@ func (s *Server) UpdateRepositoryCredentials(ctx context.Context, q *repocredspk
 	if err := s.enf.EnforceErr(ctx.Value("claims"), rbacpolicy.ResourceRepositories, rbacpolicy.ActionUpdate, q.Creds.URL); err != nil {
 		return nil, err
 	}
+
+	if q.UpdateMask != nil && len(q.UpdateMask.Paths) != 0 {
+		existing, err := s.db.GetRepositoryCredentials(ctx, q.Creds.URL)
+		if err != nil {
+			return nil, err
+		}
+
+		grpc.Mask(protov1.MessageV2(existing), protov1.MessageV2(q.Creds), fmutils.NestedMaskFromPaths(q.UpdateMask.Paths))
+		q.Creds = existing
+	}
+
 	_, err := s.db.UpdateRepositoryCredentials(ctx, q.Creds)
 	return q.Creds, err
 }

server/repocreds/repocreds.proto

@@ -8,6 +8,7 @@ package repocreds;
 
 import "gogoproto/gogo.proto";
 import "google/api/annotations.proto";
+import "google/protobuf/field_mask.proto";
 import "k8s.io/api/core/v1/generated.proto";
 import "github.com/argoproj/argo-cd/v2/pkg/apis/application/v1alpha1/generated.proto";
 
@@ -35,6 +36,7 @@ message RepoCredsCreateRequest {
 // RepoCredsUpdateRequest is a request for updating existing repository credentials config
 message RepoCredsUpdateRequest {
 	github.com.argoproj.argo_cd.v2.pkg.apis.application.v1alpha1.RepoCreds creds = 1;
+	google.protobuf.FieldMask updateMask = 3001;
 }
 
 // RepoCredsService implements CRUD actions for managing repository credentials config