fix(resources): collect all deletion errors instead of bailing on first

internal/resources/resources.go

@@ -5,6 +5,7 @@ package resources
 
 import (
 	"context"
+	"errors"
 	"fmt"
 
 	corev1 "k8s.io/api/core/v1"
@@ -83,16 +84,18 @@ func DeleteManagedSecrets(
 	}
 
 	deleted := 0
+	var errs []error
 	for i := range secretList.Items {
 		if err := c.Delete(ctx, &secretList.Items[i]); err != nil {
 			if apierrors.IsNotFound(err) {
 				continue
 			}
-			return deleted, fmt.Errorf("deleting secret %s: %w", secretList.Items[i].Name, err)
+			errs = append(errs, fmt.Errorf("deleting secret %s: %w", secretList.Items[i].Name, err))
+			continue
 		}
 		deleted++
 	}
-	return deleted, nil
+	return deleted, errors.Join(errs...)
 }
 
 // DeleteManagedServices lists and deletes services matching the given labels in
@@ -113,14 +116,16 @@ func DeleteManagedServices(
 	}
 
 	deleted := 0
+	var errs []error
 	for i := range svcList.Items {
 		if err := c.Delete(ctx, &svcList.Items[i]); err != nil {
 			if apierrors.IsNotFound(err) {
 				continue
 			}
-			return deleted, fmt.Errorf("deleting service %s: %w", svcList.Items[i].Name, err)
+			errs = append(errs, fmt.Errorf("deleting service %s: %w", svcList.Items[i].Name, err))
+			continue
 		}
 		deleted++
 	}
-	return deleted, nil
+	return deleted, errors.Join(errs...)
 }

internal/resources/resources_test.go

@@ -326,6 +326,53 @@ var _ = Describe("DeleteManagedSecrets", func() {
 		})
 		Expect(err).To(HaveOccurred())
 	})
+
+	It("should continue deleting after a single delete error and return aggregated error", func() {
+		sec1 := &corev1.Secret{
+			ObjectMeta: metav1.ObjectMeta{
+				Name:      "sec-a",
+				Namespace: "default",
+				Labels:    map[string]string{"app.kubernetes.io/managed-by": "virtwork"},
+			},
+		}
+		sec2 := &corev1.Secret{
+			ObjectMeta: metav1.ObjectMeta{
+				Name:      "sec-b",
+				Namespace: "default",
+				Labels:    map[string]string{"app.kubernetes.io/managed-by": "virtwork"},
+			},
+		}
+		sec3 := &corev1.Secret{
+			ObjectMeta: metav1.ObjectMeta{
+				Name:      "sec-c",
+				Namespace: "default",
+				Labels:    map[string]string{"app.kubernetes.io/managed-by": "virtwork"},
+			},
+		}
+		c := fake.NewClientBuilder().
+			WithScheme(scheme).
+			WithObjects(sec1, sec2, sec3).
+			WithInterceptorFuncs(interceptor.Funcs{
+				Delete: func(ctx context.Context, cl client.WithWatch, obj client.Object, opts ...client.DeleteOption) error {
+					if obj.GetName() == "sec-b" {
+						return apierrors.NewForbidden(
+							schema.GroupResource{Group: "", Resource: "secrets"},
+							"sec-b",
+							nil,
+						)
+					}
+					return cl.Delete(ctx, obj, opts...)
+				},
+			}).
+			Build()
+
+		count, err := resources.DeleteManagedSecrets(ctx, c, "default", map[string]string{
+			"app.kubernetes.io/managed-by": "virtwork",
+		})
+		Expect(err).To(HaveOccurred())
+		Expect(err.Error()).To(ContainSubstring("sec-b"))
+		Expect(count).To(Equal(2))
+	})
 })
 
 // nolint:dupl
@@ -412,4 +459,51 @@ var _ = Describe("DeleteManagedServices", func() {
 		})
 		Expect(err).To(HaveOccurred())
 	})
+
+	It("should continue deleting after a single delete error and return aggregated error", func() {
+		svc1 := &corev1.Service{
+			ObjectMeta: metav1.ObjectMeta{
+				Name:      "svc-a",
+				Namespace: "default",
+				Labels:    map[string]string{"app.kubernetes.io/managed-by": "virtwork"},
+			},
+		}
+		svc2 := &corev1.Service{
+			ObjectMeta: metav1.ObjectMeta{
+				Name:      "svc-b",
+				Namespace: "default",
+				Labels:    map[string]string{"app.kubernetes.io/managed-by": "virtwork"},
+			},
+		}
+		svc3 := &corev1.Service{
+			ObjectMeta: metav1.ObjectMeta{
+				Name:      "svc-c",
+				Namespace: "default",
+				Labels:    map[string]string{"app.kubernetes.io/managed-by": "virtwork"},
+			},
+		}
+		c := fake.NewClientBuilder().
+			WithScheme(scheme).
+			WithObjects(svc1, svc2, svc3).
+			WithInterceptorFuncs(interceptor.Funcs{
+				Delete: func(ctx context.Context, cl client.WithWatch, obj client.Object, opts ...client.DeleteOption) error {
+					if obj.GetName() == "svc-b" {
+						return apierrors.NewForbidden(
+							schema.GroupResource{Group: "", Resource: "services"},
+							"svc-b",
+							nil,
+						)
+					}
+					return cl.Delete(ctx, obj, opts...)
+				},
+			}).
+			Build()
+
+		count, err := resources.DeleteManagedServices(ctx, c, "default", map[string]string{
+			"app.kubernetes.io/managed-by": "virtwork",
+		})
+		Expect(err).To(HaveOccurred())
+		Expect(err.Error()).To(ContainSubstring("svc-b"))
+		Expect(count).To(Equal(2))
+	})
 })