@backstage/plugin-kubernetes-backend 0.20.4-next.2 → 0.20.5-next.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,44 @@
|
|
|
1
1
|
# @backstage/plugin-kubernetes-backend
|
|
2
2
|
|
|
3
|
+
## 0.20.5-next.0
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- e9589d9: Replace `@aws-sdk/signature-v4` with `@smithy/signature-v4`,
|
|
8
|
+
as stated in the [package documentation](https://www.npmjs.com/package/@aws-sdk/signature-v4?activeTab=readme)
|
|
9
|
+
- Updated dependencies
|
|
10
|
+
- @backstage/backend-plugin-api@1.5.1-next.0
|
|
11
|
+
- @backstage/plugin-permission-node@0.10.7-next.0
|
|
12
|
+
- @backstage/plugin-kubernetes-node@0.3.7-next.0
|
|
13
|
+
- @backstage/plugin-catalog-node@1.20.1-next.0
|
|
14
|
+
- @backstage/config@1.3.6
|
|
15
|
+
- @backstage/integration-aws-node@0.1.19
|
|
16
|
+
- @backstage/catalog-client@1.12.1
|
|
17
|
+
- @backstage/catalog-model@1.7.6
|
|
18
|
+
- @backstage/errors@1.2.7
|
|
19
|
+
- @backstage/types@1.2.2
|
|
20
|
+
- @backstage/plugin-kubernetes-common@0.9.8
|
|
21
|
+
- @backstage/plugin-permission-common@0.9.3
|
|
22
|
+
|
|
23
|
+
## 0.20.4
|
|
24
|
+
|
|
25
|
+
### Patch Changes
|
|
26
|
+
|
|
27
|
+
- 71c22f3: Removed/moved unused dependencies
|
|
28
|
+
- 1906d37: Updated dependency `@kubernetes/client-node` to `1.4.0`.
|
|
29
|
+
- 05f60e1: Refactored constructor parameter properties to explicit property declarations for compatibility with TypeScript's `erasableSyntaxOnly` setting. This internal refactoring maintains all existing functionality while ensuring TypeScript compilation compatibility.
|
|
30
|
+
- Updated dependencies
|
|
31
|
+
- @backstage/plugin-catalog-node@1.20.0
|
|
32
|
+
- @backstage/backend-plugin-api@1.5.0
|
|
33
|
+
- @backstage/plugin-kubernetes-common@0.9.8
|
|
34
|
+
- @backstage/plugin-kubernetes-node@0.3.6
|
|
35
|
+
- @backstage/plugin-permission-common@0.9.3
|
|
36
|
+
- @backstage/config@1.3.6
|
|
37
|
+
- @backstage/catalog-model@1.7.6
|
|
38
|
+
- @backstage/integration-aws-node@0.1.19
|
|
39
|
+
- @backstage/catalog-client@1.12.1
|
|
40
|
+
- @backstage/plugin-permission-node@0.10.6
|
|
41
|
+
|
|
3
42
|
## 0.20.4-next.2
|
|
4
43
|
|
|
5
44
|
### Patch Changes
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
'use strict';
|
|
2
2
|
|
|
3
3
|
var credentialProviders = require('@aws-sdk/credential-providers');
|
|
4
|
-
var signatureV4 = require('@
|
|
4
|
+
var signatureV4 = require('@smithy/signature-v4');
|
|
5
5
|
var sha256Js = require('@aws-crypto/sha256-js');
|
|
6
6
|
var integrationAwsNode = require('@backstage/integration-aws-node');
|
|
7
7
|
var pluginKubernetesCommon = require('@backstage/plugin-kubernetes-common');
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"AwsIamStrategy.cjs.js","sources":["../../src/auth/AwsIamStrategy.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { fromTemporaryCredentials } from '@aws-sdk/credential-providers';\nimport { SignatureV4 } from '@
|
|
1
|
+
{"version":3,"file":"AwsIamStrategy.cjs.js","sources":["../../src/auth/AwsIamStrategy.ts"],"sourcesContent":["/*\n * Copyright 2020 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { fromTemporaryCredentials } from '@aws-sdk/credential-providers';\nimport { SignatureV4 } from '@smithy/signature-v4';\nimport { Sha256 } from '@aws-crypto/sha256-js';\nimport {\n AwsCredentialsManager,\n DefaultAwsCredentialsManager,\n} from '@backstage/integration-aws-node';\nimport { Config } from '@backstage/config';\nimport {\n ANNOTATION_KUBERNETES_AWS_ASSUME_ROLE,\n ANNOTATION_KUBERNETES_AWS_CLUSTER_ID,\n ANNOTATION_KUBERNETES_AWS_EXTERNAL_ID,\n} from '@backstage/plugin-kubernetes-common';\nimport {\n AuthMetadata,\n AuthenticationStrategy,\n ClusterDetails,\n KubernetesCredential,\n} from '@backstage/plugin-kubernetes-node';\n\n/**\n *\n * @public\n */\nexport type SigningCreds = {\n accessKeyId: string | undefined;\n secretAccessKey: string | undefined;\n sessionToken: string | undefined;\n};\n\nconst defaultRegion = 'us-east-1';\n\n/**\n *\n * @public\n */\nexport class AwsIamStrategy implements AuthenticationStrategy {\n private readonly credsManager: AwsCredentialsManager;\n\n constructor(opts: { config: Config }) {\n this.credsManager = DefaultAwsCredentialsManager.fromConfig(opts.config);\n }\n\n public async getCredential(\n clusterDetails: ClusterDetails,\n ): Promise<KubernetesCredential> {\n return {\n type: 'bearer token',\n token: await this.getBearerToken(\n clusterDetails.authMetadata[ANNOTATION_KUBERNETES_AWS_CLUSTER_ID] ??\n clusterDetails.name,\n clusterDetails.authMetadata[ANNOTATION_KUBERNETES_AWS_ASSUME_ROLE],\n clusterDetails.authMetadata[ANNOTATION_KUBERNETES_AWS_EXTERNAL_ID],\n ),\n };\n }\n\n public validateCluster(): Error[] {\n return [];\n }\n\n private async getBearerToken(\n clusterId: string,\n assumeRole?: string,\n externalId?: string,\n ): Promise<string> {\n const region = process.env.AWS_REGION ?? defaultRegion;\n\n let credentials = (await this.credsManager.getCredentialProvider())\n .sdkCredentialProvider;\n if (assumeRole) {\n credentials = fromTemporaryCredentials({\n masterCredentials: credentials,\n clientConfig: {\n region,\n },\n params: {\n RoleArn: assumeRole,\n ExternalId: externalId,\n },\n });\n }\n\n const signer = new SignatureV4({\n credentials,\n region,\n service: 'sts',\n sha256: Sha256,\n });\n\n const request = await signer.presign(\n {\n headers: {\n host: `sts.${region}.amazonaws.com`,\n 'x-k8s-aws-id': clusterId,\n },\n hostname: `sts.${region}.amazonaws.com`,\n method: 'GET',\n path: '/',\n protocol: 'https:',\n query: {\n Action: 'GetCallerIdentity',\n Version: '2011-06-15',\n },\n },\n { expiresIn: 0 },\n );\n\n const query = Object.keys(request?.query ?? {})\n .map(\n q =>\n `${encodeURIComponent(q)}=${encodeURIComponent(\n request.query?.[q] as string,\n )}`,\n )\n .join('&');\n\n const url = `https://${request.hostname}${request.path}?${query}`;\n\n return `k8s-aws-v1.${Buffer.from(url).toString('base64url')}`;\n }\n\n public presentAuthMetadata(_authMetadata: AuthMetadata): AuthMetadata {\n return {};\n }\n}\n"],"names":["DefaultAwsCredentialsManager","ANNOTATION_KUBERNETES_AWS_CLUSTER_ID","ANNOTATION_KUBERNETES_AWS_ASSUME_ROLE","ANNOTATION_KUBERNETES_AWS_EXTERNAL_ID","fromTemporaryCredentials","SignatureV4","Sha256"],"mappings":";;;;;;;;AA6CA,MAAM,aAAA,GAAgB,WAAA;AAMf,MAAM,cAAA,CAAiD;AAAA,EAC3C,YAAA;AAAA,EAEjB,YAAY,IAAA,EAA0B;AACpC,IAAA,IAAA,CAAK,YAAA,GAAeA,+CAAA,CAA6B,UAAA,CAAW,IAAA,CAAK,MAAM,CAAA;AAAA,EACzE;AAAA,EAEA,MAAa,cACX,cAAA,EAC+B;AAC/B,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,cAAA;AAAA,MACN,KAAA,EAAO,MAAM,IAAA,CAAK,cAAA;AAAA,QAChB,cAAA,CAAe,YAAA,CAAaC,2DAAoC,CAAA,IAC9D,cAAA,CAAe,IAAA;AAAA,QACjB,cAAA,CAAe,aAAaC,4DAAqC,CAAA;AAAA,QACjE,cAAA,CAAe,aAAaC,4DAAqC;AAAA;AACnE,KACF;AAAA,EACF;AAAA,EAEO,eAAA,GAA2B;AAChC,IAAA,OAAO,EAAC;AAAA,EACV;AAAA,EAEA,MAAc,cAAA,CACZ,SAAA,EACA,UAAA,EACA,UAAA,EACiB;AACjB,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,UAAA,IAAc,aAAA;AAEzC,IAAA,IAAI,WAAA,GAAA,CAAe,MAAM,IAAA,CAAK,YAAA,CAAa,uBAAsB,EAC9D,qBAAA;AACH,IAAA,IAAI,UAAA,EAAY;AACd,MAAA,WAAA,GAAcC,4CAAA,CAAyB;AAAA,QACrC,iBAAA,EAAmB,WAAA;AAAA,QACnB,YAAA,EAAc;AAAA,UACZ;AAAA,SACF;AAAA,QACA,MAAA,EAAQ;AAAA,UACN,OAAA,EAAS,UAAA;AAAA,UACT,UAAA,EAAY;AAAA;AACd,OACD,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,MAAA,GAAS,IAAIC,uBAAA,CAAY;AAAA,MAC7B,WAAA;AAAA,MACA,MAAA;AAAA,MACA,OAAA,EAAS,KAAA;AAAA,MACT,MAAA,EAAQC;AAAA,KACT,CAAA;AAED,IAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,OAAA;AAAA,MAC3B;AAAA,QACE,OAAA,EAAS;AAAA,UACP,IAAA,EAAM,OAAO,MAAM,CAAA,cAAA,CAAA;AAAA,UACnB,cAAA,EAAgB;AAAA,SAClB;AAAA,QACA,QAAA,EAAU,OAAO,MAAM,CAAA,cAAA,CAAA;AAAA,QACvB,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM,GAAA;AAAA,QACN,QAAA,EAAU,QAAA;AAAA,QACV,KAAA,EAAO;AAAA,UACL,MAAA,EAAQ,mBAAA;AAAA,UACR,OAAA,EAAS;AAAA;AACX,OACF;AAAA,MACA,EAAE,WAAW,CAAA;AAAE,KACjB;AAEA,IAAA,MAAM,QAAQ,MAAA,CAAO,IAAA,CAAK,SAAS,KAAA,IAAS,EAAE,CAAA,CAC3C,GAAA;AAAA,MACC,CAAA,CAAA,KACE,CAAA,EAAG,kBAAA,CAAmB,CAAC,CAAC,CAAA,CAAA,EAAI,kBAAA;AAAA,QAC1B,OAAA,CAAQ,QAAQ,CAAC;AAAA,OAClB,CAAA;AAAA,KACL,CACC,KAAK,GAAG,CAAA;AAEX,IAAA,MAAM,GAAA,GAAM,WAAW,OAAA,CAAQ,QAAQ,GAAG,OAAA,CAAQ,IAAI,IAAI,KAAK,CAAA,CAAA;AAE/D,IAAA,OAAO,cAAc,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,CAAE,QAAA,CAAS,WAAW,CAAC,CAAA,CAAA;AAAA,EAC7D;AAAA,EAEO,oBAAoB,aAAA,EAA2C;AACpE,IAAA,OAAO,EAAC;AAAA,EACV;AACF;;;;"}
|
package/dist/package.json.cjs.js
CHANGED
|
@@ -5,7 +5,7 @@ var pluginPermissionNode = require('@backstage/plugin-permission-node');
|
|
|
5
5
|
var express = require('express');
|
|
6
6
|
var Router = require('express-promise-router');
|
|
7
7
|
require('@aws-sdk/credential-providers');
|
|
8
|
-
require('@
|
|
8
|
+
require('@smithy/signature-v4');
|
|
9
9
|
require('@aws-crypto/sha256-js');
|
|
10
10
|
require('@backstage/integration-aws-node');
|
|
11
11
|
require('@azure/identity');
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@backstage/plugin-kubernetes-backend",
|
|
3
|
-
"version": "0.20.
|
|
3
|
+
"version": "0.20.5-next.0",
|
|
4
4
|
"description": "A Backstage backend plugin that integrates towards Kubernetes",
|
|
5
5
|
"backstage": {
|
|
6
6
|
"role": "backend-plugin",
|
|
@@ -48,23 +48,23 @@
|
|
|
48
48
|
"dependencies": {
|
|
49
49
|
"@aws-crypto/sha256-js": "^5.0.0",
|
|
50
50
|
"@aws-sdk/credential-providers": "^3.350.0",
|
|
51
|
-
"@aws-sdk/signature-v4": "^3.347.0",
|
|
52
51
|
"@azure/identity": "^4.0.0",
|
|
53
|
-
"@backstage/backend-plugin-api": "1.5.
|
|
54
|
-
"@backstage/catalog-client": "1.12.1
|
|
55
|
-
"@backstage/catalog-model": "1.7.6
|
|
56
|
-
"@backstage/config": "1.3.6
|
|
52
|
+
"@backstage/backend-plugin-api": "1.5.1-next.0",
|
|
53
|
+
"@backstage/catalog-client": "1.12.1",
|
|
54
|
+
"@backstage/catalog-model": "1.7.6",
|
|
55
|
+
"@backstage/config": "1.3.6",
|
|
57
56
|
"@backstage/errors": "1.2.7",
|
|
58
|
-
"@backstage/integration-aws-node": "0.1.19
|
|
59
|
-
"@backstage/plugin-catalog-node": "1.20.
|
|
60
|
-
"@backstage/plugin-kubernetes-common": "0.9.8
|
|
61
|
-
"@backstage/plugin-kubernetes-node": "0.3.
|
|
62
|
-
"@backstage/plugin-permission-common": "0.9.3
|
|
63
|
-
"@backstage/plugin-permission-node": "0.10.
|
|
57
|
+
"@backstage/integration-aws-node": "0.1.19",
|
|
58
|
+
"@backstage/plugin-catalog-node": "1.20.1-next.0",
|
|
59
|
+
"@backstage/plugin-kubernetes-common": "0.9.8",
|
|
60
|
+
"@backstage/plugin-kubernetes-node": "0.3.7-next.0",
|
|
61
|
+
"@backstage/plugin-permission-common": "0.9.3",
|
|
62
|
+
"@backstage/plugin-permission-node": "0.10.7-next.0",
|
|
64
63
|
"@backstage/types": "1.2.2",
|
|
65
64
|
"@google-cloud/container": "^5.0.0",
|
|
66
65
|
"@jest-mock/express": "^2.0.1",
|
|
67
66
|
"@kubernetes/client-node": "1.4.0",
|
|
67
|
+
"@smithy/signature-v4": "^4.1.0",
|
|
68
68
|
"@types/http-proxy-middleware": "^1.0.0",
|
|
69
69
|
"express": "^4.17.1",
|
|
70
70
|
"express-promise-router": "^4.1.0",
|
|
@@ -75,11 +75,11 @@
|
|
|
75
75
|
"node-fetch": "^2.7.0"
|
|
76
76
|
},
|
|
77
77
|
"devDependencies": {
|
|
78
|
-
"@backstage/backend-defaults": "0.
|
|
79
|
-
"@backstage/backend-test-utils": "1.10.
|
|
80
|
-
"@backstage/cli": "0.34.
|
|
81
|
-
"@backstage/plugin-permission-backend": "0.7.
|
|
82
|
-
"@backstage/plugin-permission-backend-module-allow-all-policy": "0.2.
|
|
78
|
+
"@backstage/backend-defaults": "0.14.0-next.0",
|
|
79
|
+
"@backstage/backend-test-utils": "1.10.1-next.0",
|
|
80
|
+
"@backstage/cli": "0.34.6-next.0",
|
|
81
|
+
"@backstage/plugin-permission-backend": "0.7.7-next.0",
|
|
82
|
+
"@backstage/plugin-permission-backend-module-allow-all-policy": "0.2.15-next.0",
|
|
83
83
|
"@types/express": "^4.17.6",
|
|
84
84
|
"@types/luxon": "^3.0.0",
|
|
85
85
|
"msw": "^1.0.0",
|