@backstage/plugin-kubernetes-node 0.1.19 → 0.1.20-next.1

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # @backstage/plugin-kubernetes-node
 
+## 0.1.20-next.1
+
+### Patch Changes
+
+- Updated dependencies
+  - @backstage/backend-plugin-api@1.0.1-next.1
+  - @backstage/catalog-model@1.7.0
+  - @backstage/types@1.1.1
+  - @backstage/plugin-kubernetes-common@0.8.3
+
+## 0.1.20-next.0
+
+### Patch Changes
+
+- 094eaa3: Remove references to in-repo backend-common
+- Updated dependencies
+  - @backstage/backend-plugin-api@1.0.1-next.0
+  - @backstage/catalog-model@1.7.0
+  - @backstage/types@1.1.1
+  - @backstage/plugin-kubernetes-common@0.8.3
+
 ## 0.1.19
 
 ### Patch Changes

package/dist/auth/PinnipedHelper.cjs.js

@@ -0,0 +1,103 @@
+'use strict';
+
+var https = require('https');
+var clientNode = require('@kubernetes/client-node');
+var fetch = require('node-fetch');
+
+function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e : { default: e }; }
+
+function _interopNamespaceCompat(e) {
+  if (e && typeof e === 'object' && 'default' in e) return e;
+  var n = Object.create(null);
+  if (e) {
+    Object.keys(e).forEach(function (k) {
+      if (k !== 'default') {
+        var d = Object.getOwnPropertyDescriptor(e, k);
+        Object.defineProperty(n, k, d.get ? d : {
+          enumerable: true,
+          get: function () { return e[k]; }
+        });
+      }
+    });
+  }
+  n.default = e;
+  return Object.freeze(n);
+}
+
+var https__namespace = /*#__PURE__*/_interopNamespaceCompat(https);
+var fetch__default = /*#__PURE__*/_interopDefaultCompat(fetch);
+
+class PinnipedHelper {
+  constructor(logger) {
+    this.logger = logger;
+  }
+  async tokenCredentialRequest(clusterDetails, pinnipedParams) {
+    this.logger.debug("Pinniped: Requesting client Certs to Concierge");
+    return await this.exchangeClusterTokentoClientCerts(
+      clusterDetails,
+      pinnipedParams
+    );
+  }
+  async exchangeClusterTokentoClientCerts(clusterDetails, pinnipedParams) {
+    const url = new URL(clusterDetails.url);
+    const apiGroup = pinnipedParams.tokenCredentialRequest?.apiGroup ?? "login.concierge.pinniped.dev/v1alpha1";
+    url.pathname = `/apis/${apiGroup}/tokencredentialrequests`;
+    const requestInit = this.buildRequestForPinniped(
+      url,
+      clusterDetails,
+      pinnipedParams
+    );
+    this.logger.info(
+      "Fetching client certs for mTLS authentication on Pinniped"
+    );
+    let response;
+    try {
+      response = await fetch__default.default(url, requestInit);
+    } catch (error) {
+      this.logger.error("Pinniped request error", error);
+      throw error;
+    }
+    const data = await response.json();
+    if (data.status.credential) {
+      const result = {
+        key: data.status.credential.clientKeyData,
+        cert: data.status.credential.clientCertificateData,
+        expirationTimestamp: data.status.credential.expirationTimestamp
+      };
+      return Promise.resolve(result);
+    }
+    this.logger.error("Unable to fetch client certs,", data.status);
+    return Promise.reject(data.status.message);
+  }
+  buildRequestForPinniped(url, clusterDetails, pinnipedParams) {
+    const body = {
+      apiVersion: pinnipedParams.tokenCredentialRequest?.apiGroup ?? "login.concierge.pinniped.dev/v1alpha1",
+      kind: "TokenCredentialRequest",
+      spec: {
+        authenticator: pinnipedParams.authenticator,
+        token: pinnipedParams.clusterScopedIdToken
+      }
+    };
+    const requestInit = {
+      method: "POST",
+      headers: {
+        Accept: "application/json",
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify(body)
+    };
+    if (url.protocol === "https:") {
+      requestInit.agent = new https__namespace.Agent({
+        ca: clientNode.bufferFromFileOrString(
+          clusterDetails.caFile,
+          clusterDetails.caData
+        ) ?? void 0,
+        rejectUnauthorized: !clusterDetails.skipTLSVerify
+      });
+    }
+    return requestInit;
+  }
+}
+
+exports.PinnipedHelper = PinnipedHelper;
+//# sourceMappingURL=PinnipedHelper.cjs.js.map

package/dist/auth/PinnipedHelper.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PinnipedHelper.cjs.js","sources":["../../src/auth/PinnipedHelper.ts"],"sourcesContent":["/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { ClusterDetails } from '@backstage/plugin-kubernetes-node';\nimport * as https from 'https';\nimport { bufferFromFileOrString } from '@kubernetes/client-node';\nimport fetch, { RequestInit } from 'node-fetch';\nimport { Logger } from 'winston';\n\n/**\n *\n * @public\n */\nexport type PinnipedClientCerts = {\n  key: string;\n  cert: string;\n  expirationTimestamp: string;\n};\n\n/**\n *\n * @public\n */\nexport type PinnipedParameters = {\n  clusterScopedIdToken: string;\n  authenticator: {\n    apiGroup: string;\n    kind: string;\n    name: string;\n  };\n  tokenCredentialRequest?: {\n    apiGroup?: string;\n  };\n};\n\n/**\n *\n * @public\n */\nexport class PinnipedHelper {\n  constructor(private readonly logger: Logger) {}\n\n  public async tokenCredentialRequest(\n    clusterDetails: ClusterDetails,\n    pinnipedParams: PinnipedParameters,\n  ): Promise<PinnipedClientCerts> {\n    this.logger.debug('Pinniped: Requesting client Certs to Concierge');\n    return await this.exchangeClusterTokentoClientCerts(\n      clusterDetails,\n      pinnipedParams,\n    );\n  }\n\n  private async exchangeClusterTokentoClientCerts(\n    clusterDetails: ClusterDetails,\n    pinnipedParams: PinnipedParameters,\n  ): Promise<PinnipedClientCerts> {\n    const url: URL = new URL(clusterDetails.url);\n    const apiGroup =\n      pinnipedParams.tokenCredentialRequest?.apiGroup ??\n      'login.concierge.pinniped.dev/v1alpha1';\n\n    url.pathname = `/apis/${apiGroup}/tokencredentialrequests`;\n\n    const requestInit: RequestInit = this.buildRequestForPinniped(\n      url,\n      clusterDetails,\n      pinnipedParams,\n    );\n\n    this.logger.info(\n      'Fetching client certs for mTLS authentication on Pinniped',\n    );\n    let response;\n    try {\n      response = await fetch(url, requestInit);\n    } catch (error) {\n      this.logger.error('Pinniped request error', error);\n      throw error;\n    }\n\n    const data: any = await response.json();\n\n    if (data.status.credential) {\n      const result = {\n        key: data.status.credential.clientKeyData,\n        cert: data.status.credential.clientCertificateData,\n        expirationTimestamp: data.status.credential.expirationTimestamp,\n      };\n      return Promise.resolve(result);\n    }\n\n    this.logger.error('Unable to fetch client certs,', data.status);\n    return Promise.reject(data.status.message);\n  }\n\n  private buildRequestForPinniped(\n    url: URL,\n    clusterDetails: ClusterDetails,\n    pinnipedParams: PinnipedParameters,\n  ): RequestInit {\n    const body = {\n      apiVersion:\n        pinnipedParams.tokenCredentialRequest?.apiGroup ??\n        'login.concierge.pinniped.dev/v1alpha1',\n      kind: 'TokenCredentialRequest',\n      spec: {\n        authenticator: pinnipedParams.authenticator,\n        token: pinnipedParams.clusterScopedIdToken,\n      },\n    };\n    const requestInit: RequestInit = {\n      method: 'POST',\n      headers: {\n        Accept: 'application/json',\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify(body),\n    };\n\n    if (url.protocol === 'https:') {\n      requestInit.agent = new https.Agent({\n        ca:\n          bufferFromFileOrString(\n            clusterDetails.caFile,\n            clusterDetails.caData,\n          ) ?? undefined,\n        rejectUnauthorized: !clusterDetails.skipTLSVerify,\n      });\n    }\n\n    return requestInit;\n  }\n}\n"],"names":["fetch","https","bufferFromFileOrString"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoDO,MAAM,cAAe,CAAA;AAAA,EAC1B,YAA6B,MAAgB,EAAA;AAAhB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA,CAAA;AAAA,GAAiB;AAAA,EAE9C,MAAa,sBACX,CAAA,cAAA,EACA,cAC8B,EAAA;AAC9B,IAAK,IAAA,CAAA,MAAA,CAAO,MAAM,gDAAgD,CAAA,CAAA;AAClE,IAAA,OAAO,MAAM,IAAK,CAAA,iCAAA;AAAA,MAChB,cAAA;AAAA,MACA,cAAA;AAAA,KACF,CAAA;AAAA,GACF;AAAA,EAEA,MAAc,iCACZ,CAAA,cAAA,EACA,cAC8B,EAAA;AAC9B,IAAA,MAAM,GAAW,GAAA,IAAI,GAAI,CAAA,cAAA,CAAe,GAAG,CAAA,CAAA;AAC3C,IAAM,MAAA,QAAA,GACJ,cAAe,CAAA,sBAAA,EAAwB,QACvC,IAAA,uCAAA,CAAA;AAEF,IAAI,GAAA,CAAA,QAAA,GAAW,SAAS,QAAQ,CAAA,wBAAA,CAAA,CAAA;AAEhC,IAAA,MAAM,cAA2B,IAAK,CAAA,uBAAA;AAAA,MACpC,GAAA;AAAA,MACA,cAAA;AAAA,MACA,cAAA;AAAA,KACF,CAAA;AAEA,IAAA,IAAA,CAAK,MAAO,CAAA,IAAA;AAAA,MACV,2DAAA;AAAA,KACF,CAAA;AACA,IAAI,IAAA,QAAA,CAAA;AACJ,IAAI,IAAA;AACF,MAAW,QAAA,GAAA,MAAMA,sBAAM,CAAA,GAAA,EAAK,WAAW,CAAA,CAAA;AAAA,aAChC,KAAO,EAAA;AACd,MAAK,IAAA,CAAA,MAAA,CAAO,KAAM,CAAA,wBAAA,EAA0B,KAAK,CAAA,CAAA;AACjD,MAAM,MAAA,KAAA,CAAA;AAAA,KACR;AAEA,IAAM,MAAA,IAAA,GAAY,MAAM,QAAA,CAAS,IAAK,EAAA,CAAA;AAEtC,IAAI,IAAA,IAAA,CAAK,OAAO,UAAY,EAAA;AAC1B,MAAA,MAAM,MAAS,GAAA;AAAA,QACb,GAAA,EAAK,IAAK,CAAA,MAAA,CAAO,UAAW,CAAA,aAAA;AAAA,QAC5B,IAAA,EAAM,IAAK,CAAA,MAAA,CAAO,UAAW,CAAA,qBAAA;AAAA,QAC7B,mBAAA,EAAqB,IAAK,CAAA,MAAA,CAAO,UAAW,CAAA,mBAAA;AAAA,OAC9C,CAAA;AACA,MAAO,OAAA,OAAA,CAAQ,QAAQ,MAAM,CAAA,CAAA;AAAA,KAC/B;AAEA,IAAA,IAAA,CAAK,MAAO,CAAA,KAAA,CAAM,+BAAiC,EAAA,IAAA,CAAK,MAAM,CAAA,CAAA;AAC9D,IAAA,OAAO,OAAQ,CAAA,MAAA,CAAO,IAAK,CAAA,MAAA,CAAO,OAAO,CAAA,CAAA;AAAA,GAC3C;AAAA,EAEQ,uBAAA,CACN,GACA,EAAA,cAAA,EACA,cACa,EAAA;AACb,IAAA,MAAM,IAAO,GAAA;AAAA,MACX,UAAA,EACE,cAAe,CAAA,sBAAA,EAAwB,QACvC,IAAA,uCAAA;AAAA,MACF,IAAM,EAAA,wBAAA;AAAA,MACN,IAAM,EAAA;AAAA,QACJ,eAAe,cAAe,CAAA,aAAA;AAAA,QAC9B,OAAO,cAAe,CAAA,oBAAA;AAAA,OACxB;AAAA,KACF,CAAA;AACA,IAAA,MAAM,WAA2B,GAAA;AAAA,MAC/B,MAAQ,EAAA,MAAA;AAAA,MACR,OAAS,EAAA;AAAA,QACP,MAAQ,EAAA,kBAAA;AAAA,QACR,cAAgB,EAAA,kBAAA;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAK,CAAA,SAAA,CAAU,IAAI,CAAA;AAAA,KAC3B,CAAA;AAEA,IAAI,IAAA,GAAA,CAAI,aAAa,QAAU,EAAA;AAC7B,MAAY,WAAA,CAAA,KAAA,GAAQ,IAAIC,gBAAA,CAAM,KAAM,CAAA;AAAA,QAClC,EACE,EAAAC,iCAAA;AAAA,UACE,cAAe,CAAA,MAAA;AAAA,UACf,cAAe,CAAA,MAAA;AAAA,SACZ,IAAA,KAAA,CAAA;AAAA,QACP,kBAAA,EAAoB,CAAC,cAAe,CAAA,aAAA;AAAA,OACrC,CAAA,CAAA;AAAA,KACH;AAEA,IAAO,OAAA,WAAA,CAAA;AAAA,GACT;AACF;;;;"}

package/dist/extensions.cjs.js

@@ -0,0 +1,26 @@
+'use strict';
+
+var backendPluginApi = require('@backstage/backend-plugin-api');
+
+const kubernetesObjectsProviderExtensionPoint = backendPluginApi.createExtensionPoint({
+  id: "kubernetes.objects-provider"
+});
+const kubernetesClusterSupplierExtensionPoint = backendPluginApi.createExtensionPoint({
+  id: "kubernetes.cluster-supplier"
+});
+const kubernetesAuthStrategyExtensionPoint = backendPluginApi.createExtensionPoint({
+  id: "kubernetes.auth-strategy"
+});
+const kubernetesFetcherExtensionPoint = backendPluginApi.createExtensionPoint({
+  id: "kubernetes.fetcher"
+});
+const kubernetesServiceLocatorExtensionPoint = backendPluginApi.createExtensionPoint({
+  id: "kubernetes.service-locator"
+});
+
+exports.kubernetesAuthStrategyExtensionPoint = kubernetesAuthStrategyExtensionPoint;
+exports.kubernetesClusterSupplierExtensionPoint = kubernetesClusterSupplierExtensionPoint;
+exports.kubernetesFetcherExtensionPoint = kubernetesFetcherExtensionPoint;
+exports.kubernetesObjectsProviderExtensionPoint = kubernetesObjectsProviderExtensionPoint;
+exports.kubernetesServiceLocatorExtensionPoint = kubernetesServiceLocatorExtensionPoint;
+//# sourceMappingURL=extensions.cjs.js.map

package/dist/extensions.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions.cjs.js","sources":["../src/extensions.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { createExtensionPoint } from '@backstage/backend-plugin-api';\nimport {\n  AuthenticationStrategy,\n  KubernetesClustersSupplier,\n  KubernetesFetcher,\n  KubernetesObjectsProvider,\n  KubernetesServiceLocator,\n} from '@backstage/plugin-kubernetes-node';\n\n/**\n * The interface for {@link kubernetesObjectsProviderExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesObjectsProviderExtensionPoint {\n  addObjectsProvider(provider: KubernetesObjectsProvider): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a objects provider.\n *\n * @public\n */\nexport const kubernetesObjectsProviderExtensionPoint =\n  createExtensionPoint<KubernetesObjectsProviderExtensionPoint>({\n    id: 'kubernetes.objects-provider',\n  });\n\n/**\n * The interface for {@link kubernetesClusterSupplierExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesClusterSupplierExtensionPoint {\n  addClusterSupplier(clusterSupplier: KubernetesClustersSupplier): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a cluster supplier.\n *\n * @public\n */\nexport const kubernetesClusterSupplierExtensionPoint =\n  createExtensionPoint<KubernetesClusterSupplierExtensionPoint>({\n    id: 'kubernetes.cluster-supplier',\n  });\n\n/**\n * The interface for {@link kubernetesAuthStrategyExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesAuthStrategyExtensionPoint {\n  addAuthStrategy(key: string, strategy: AuthenticationStrategy): void;\n}\n\n/**\n * An extension point the exposes the ability to add an Auth Strategy.\n *\n * @public\n */\nexport const kubernetesAuthStrategyExtensionPoint =\n  createExtensionPoint<KubernetesAuthStrategyExtensionPoint>({\n    id: 'kubernetes.auth-strategy',\n  });\n\n/**\n * The interface for {@link kubernetesFetcherExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesFetcherExtensionPoint {\n  addFetcher(fetcher: KubernetesFetcher): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a kubernetes fetcher.\n *\n * @public\n */\nexport const kubernetesFetcherExtensionPoint =\n  createExtensionPoint<KubernetesFetcherExtensionPoint>({\n    id: 'kubernetes.fetcher',\n  });\n\n/**\n * The interface for {@link kubernetesServiceLocatorExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesServiceLocatorExtensionPoint {\n  addServiceLocator(serviceLocator: KubernetesServiceLocator): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a kubernetes service locator.\n *\n * @public\n */\nexport const kubernetesServiceLocatorExtensionPoint =\n  createExtensionPoint<KubernetesServiceLocatorExtensionPoint>({\n    id: 'kubernetes.service-locator',\n  });\n"],"names":["createExtensionPoint"],"mappings":";;;;AAsCO,MAAM,0CACXA,qCAA8D,CAAA;AAAA,EAC5D,EAAI,EAAA,6BAAA;AACN,CAAC,EAAA;AAgBI,MAAM,0CACXA,qCAA8D,CAAA;AAAA,EAC5D,EAAI,EAAA,6BAAA;AACN,CAAC,EAAA;AAgBI,MAAM,uCACXA,qCAA2D,CAAA;AAAA,EACzD,EAAI,EAAA,0BAAA;AACN,CAAC,EAAA;AAgBI,MAAM,kCACXA,qCAAsD,CAAA;AAAA,EACpD,EAAI,EAAA,oBAAA;AACN,CAAC,EAAA;AAgBI,MAAM,yCACXA,qCAA6D,CAAA;AAAA,EAC3D,EAAI,EAAA,4BAAA;AACN,CAAC;;;;;;;;"}

package/dist/index.cjs.js

@@ -1,125 +1,14 @@
 'use strict';
 
-var backendPluginApi = require('@backstage/backend-plugin-api');
-var https = require('https');
-var clientNode = require('@kubernetes/client-node');
-var fetch = require('node-fetch');
+var extensions = require('./extensions.cjs.js');
+var PinnipedHelper = require('./auth/PinnipedHelper.cjs.js');
 
-function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e : { default: e }; }
 
-function _interopNamespaceCompat(e) {
-  if (e && typeof e === 'object' && 'default' in e) return e;
-  var n = Object.create(null);
-  if (e) {
-    Object.keys(e).forEach(function (k) {
-      if (k !== 'default') {
-        var d = Object.getOwnPropertyDescriptor(e, k);
-        Object.defineProperty(n, k, d.get ? d : {
-          enumerable: true,
-          get: function () { return e[k]; }
-        });
-      }
-    });
-  }
-  n.default = e;
-  return Object.freeze(n);
-}
 
-var https__namespace = /*#__PURE__*/_interopNamespaceCompat(https);
-var fetch__default = /*#__PURE__*/_interopDefaultCompat(fetch);
-
-const kubernetesObjectsProviderExtensionPoint = backendPluginApi.createExtensionPoint({
-  id: "kubernetes.objects-provider"
-});
-const kubernetesClusterSupplierExtensionPoint = backendPluginApi.createExtensionPoint({
-  id: "kubernetes.cluster-supplier"
-});
-const kubernetesAuthStrategyExtensionPoint = backendPluginApi.createExtensionPoint({
-  id: "kubernetes.auth-strategy"
-});
-const kubernetesFetcherExtensionPoint = backendPluginApi.createExtensionPoint({
-  id: "kubernetes.fetcher"
-});
-const kubernetesServiceLocatorExtensionPoint = backendPluginApi.createExtensionPoint({
-  id: "kubernetes.service-locator"
-});
-
-class PinnipedHelper {
-  constructor(logger) {
-    this.logger = logger;
-  }
-  async tokenCredentialRequest(clusterDetails, pinnipedParams) {
-    this.logger.debug("Pinniped: Requesting client Certs to Concierge");
-    return await this.exchangeClusterTokentoClientCerts(
-      clusterDetails,
-      pinnipedParams
-    );
-  }
-  async exchangeClusterTokentoClientCerts(clusterDetails, pinnipedParams) {
-    const url = new URL(clusterDetails.url);
-    const apiGroup = pinnipedParams.tokenCredentialRequest?.apiGroup ?? "login.concierge.pinniped.dev/v1alpha1";
-    url.pathname = `/apis/${apiGroup}/tokencredentialrequests`;
-    const requestInit = this.buildRequestForPinniped(
-      url,
-      clusterDetails,
-      pinnipedParams
-    );
-    this.logger.info(
-      "Fetching client certs for mTLS authentication on Pinniped"
-    );
-    let response;
-    try {
-      response = await fetch__default.default(url, requestInit);
-    } catch (error) {
-      this.logger.error("Pinniped request error", error);
-      throw error;
-    }
-    const data = await response.json();
-    if (data.status.credential) {
-      const result = {
-        key: data.status.credential.clientKeyData,
-        cert: data.status.credential.clientCertificateData,
-        expirationTimestamp: data.status.credential.expirationTimestamp
-      };
-      return Promise.resolve(result);
-    }
-    this.logger.error("Unable to fetch client certs,", data.status);
-    return Promise.reject(data.status.message);
-  }
-  buildRequestForPinniped(url, clusterDetails, pinnipedParams) {
-    const body = {
-      apiVersion: pinnipedParams.tokenCredentialRequest?.apiGroup ?? "login.concierge.pinniped.dev/v1alpha1",
-      kind: "TokenCredentialRequest",
-      spec: {
-        authenticator: pinnipedParams.authenticator,
-        token: pinnipedParams.clusterScopedIdToken
-      }
-    };
-    const requestInit = {
-      method: "POST",
-      headers: {
-        Accept: "application/json",
-        "Content-Type": "application/json"
-      },
-      body: JSON.stringify(body)
-    };
-    if (url.protocol === "https:") {
-      requestInit.agent = new https__namespace.Agent({
-        ca: clientNode.bufferFromFileOrString(
-          clusterDetails.caFile,
-          clusterDetails.caData
-        ) ?? void 0,
-        rejectUnauthorized: !clusterDetails.skipTLSVerify
-      });
-    }
-    return requestInit;
-  }
-}
-
-exports.PinnipedHelper = PinnipedHelper;
-exports.kubernetesAuthStrategyExtensionPoint = kubernetesAuthStrategyExtensionPoint;
-exports.kubernetesClusterSupplierExtensionPoint = kubernetesClusterSupplierExtensionPoint;
-exports.kubernetesFetcherExtensionPoint = kubernetesFetcherExtensionPoint;
-exports.kubernetesObjectsProviderExtensionPoint = kubernetesObjectsProviderExtensionPoint;
-exports.kubernetesServiceLocatorExtensionPoint = kubernetesServiceLocatorExtensionPoint;
+exports.kubernetesAuthStrategyExtensionPoint = extensions.kubernetesAuthStrategyExtensionPoint;
+exports.kubernetesClusterSupplierExtensionPoint = extensions.kubernetesClusterSupplierExtensionPoint;
+exports.kubernetesFetcherExtensionPoint = extensions.kubernetesFetcherExtensionPoint;
+exports.kubernetesObjectsProviderExtensionPoint = extensions.kubernetesObjectsProviderExtensionPoint;
+exports.kubernetesServiceLocatorExtensionPoint = extensions.kubernetesServiceLocatorExtensionPoint;
+exports.PinnipedHelper = PinnipedHelper.PinnipedHelper;
 //# sourceMappingURL=index.cjs.js.map

package/dist/index.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs.js","sources":["../src/extensions.ts","../src/auth/PinnipedHelper.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { createExtensionPoint } from '@backstage/backend-plugin-api';\nimport {\n  AuthenticationStrategy,\n  KubernetesClustersSupplier,\n  KubernetesFetcher,\n  KubernetesObjectsProvider,\n  KubernetesServiceLocator,\n} from '@backstage/plugin-kubernetes-node';\n\n/**\n * The interface for {@link kubernetesObjectsProviderExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesObjectsProviderExtensionPoint {\n  addObjectsProvider(provider: KubernetesObjectsProvider): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a objects provider.\n *\n * @public\n */\nexport const kubernetesObjectsProviderExtensionPoint =\n  createExtensionPoint<KubernetesObjectsProviderExtensionPoint>({\n    id: 'kubernetes.objects-provider',\n  });\n\n/**\n * The interface for {@link kubernetesClusterSupplierExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesClusterSupplierExtensionPoint {\n  addClusterSupplier(clusterSupplier: KubernetesClustersSupplier): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a cluster supplier.\n *\n * @public\n */\nexport const kubernetesClusterSupplierExtensionPoint =\n  createExtensionPoint<KubernetesClusterSupplierExtensionPoint>({\n    id: 'kubernetes.cluster-supplier',\n  });\n\n/**\n * The interface for {@link kubernetesAuthStrategyExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesAuthStrategyExtensionPoint {\n  addAuthStrategy(key: string, strategy: AuthenticationStrategy): void;\n}\n\n/**\n * An extension point the exposes the ability to add an Auth Strategy.\n *\n * @public\n */\nexport const kubernetesAuthStrategyExtensionPoint =\n  createExtensionPoint<KubernetesAuthStrategyExtensionPoint>({\n    id: 'kubernetes.auth-strategy',\n  });\n\n/**\n * The interface for {@link kubernetesFetcherExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesFetcherExtensionPoint {\n  addFetcher(fetcher: KubernetesFetcher): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a kubernetes fetcher.\n *\n * @public\n */\nexport const kubernetesFetcherExtensionPoint =\n  createExtensionPoint<KubernetesFetcherExtensionPoint>({\n    id: 'kubernetes.fetcher',\n  });\n\n/**\n * The interface for {@link kubernetesServiceLocatorExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesServiceLocatorExtensionPoint {\n  addServiceLocator(serviceLocator: KubernetesServiceLocator): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a kubernetes service locator.\n *\n * @public\n */\nexport const kubernetesServiceLocatorExtensionPoint =\n  createExtensionPoint<KubernetesServiceLocatorExtensionPoint>({\n    id: 'kubernetes.service-locator',\n  });\n","/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { ClusterDetails } from '@backstage/plugin-kubernetes-node';\nimport * as https from 'https';\nimport { bufferFromFileOrString } from '@kubernetes/client-node';\nimport fetch, { RequestInit } from 'node-fetch';\nimport { Logger } from 'winston';\n\n/**\n *\n * @public\n */\nexport type PinnipedClientCerts = {\n  key: string;\n  cert: string;\n  expirationTimestamp: string;\n};\n\n/**\n *\n * @public\n */\nexport type PinnipedParameters = {\n  clusterScopedIdToken: string;\n  authenticator: {\n    apiGroup: string;\n    kind: string;\n    name: string;\n  };\n  tokenCredentialRequest?: {\n    apiGroup?: string;\n  };\n};\n\n/**\n *\n * @public\n */\nexport class PinnipedHelper {\n  constructor(private readonly logger: Logger) {}\n\n  public async tokenCredentialRequest(\n    clusterDetails: ClusterDetails,\n    pinnipedParams: PinnipedParameters,\n  ): Promise<PinnipedClientCerts> {\n    this.logger.debug('Pinniped: Requesting client Certs to Concierge');\n    return await this.exchangeClusterTokentoClientCerts(\n      clusterDetails,\n      pinnipedParams,\n    );\n  }\n\n  private async exchangeClusterTokentoClientCerts(\n    clusterDetails: ClusterDetails,\n    pinnipedParams: PinnipedParameters,\n  ): Promise<PinnipedClientCerts> {\n    const url: URL = new URL(clusterDetails.url);\n    const apiGroup =\n      pinnipedParams.tokenCredentialRequest?.apiGroup ??\n      'login.concierge.pinniped.dev/v1alpha1';\n\n    url.pathname = `/apis/${apiGroup}/tokencredentialrequests`;\n\n    const requestInit: RequestInit = this.buildRequestForPinniped(\n      url,\n      clusterDetails,\n      pinnipedParams,\n    );\n\n    this.logger.info(\n      'Fetching client certs for mTLS authentication on Pinniped',\n    );\n    let response;\n    try {\n      response = await fetch(url, requestInit);\n    } catch (error) {\n      this.logger.error('Pinniped request error', error);\n      throw error;\n    }\n\n    const data: any = await response.json();\n\n    if (data.status.credential) {\n      const result = {\n        key: data.status.credential.clientKeyData,\n        cert: data.status.credential.clientCertificateData,\n        expirationTimestamp: data.status.credential.expirationTimestamp,\n      };\n      return Promise.resolve(result);\n    }\n\n    this.logger.error('Unable to fetch client certs,', data.status);\n    return Promise.reject(data.status.message);\n  }\n\n  private buildRequestForPinniped(\n    url: URL,\n    clusterDetails: ClusterDetails,\n    pinnipedParams: PinnipedParameters,\n  ): RequestInit {\n    const body = {\n      apiVersion:\n        pinnipedParams.tokenCredentialRequest?.apiGroup ??\n        'login.concierge.pinniped.dev/v1alpha1',\n      kind: 'TokenCredentialRequest',\n      spec: {\n        authenticator: pinnipedParams.authenticator,\n        token: pinnipedParams.clusterScopedIdToken,\n      },\n    };\n    const requestInit: RequestInit = {\n      method: 'POST',\n      headers: {\n        Accept: 'application/json',\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify(body),\n    };\n\n    if (url.protocol === 'https:') {\n      requestInit.agent = new https.Agent({\n        ca:\n          bufferFromFileOrString(\n            clusterDetails.caFile,\n            clusterDetails.caData,\n          ) ?? undefined,\n        rejectUnauthorized: !clusterDetails.skipTLSVerify,\n      });\n    }\n\n    return requestInit;\n  }\n}\n"],"names":["createExtensionPoint","fetch","https","bufferFromFileOrString"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCO,MAAM,0CACXA,qCAA8D,CAAA;AAAA,EAC5D,EAAI,EAAA,6BAAA;AACN,CAAC,EAAA;AAgBI,MAAM,0CACXA,qCAA8D,CAAA;AAAA,EAC5D,EAAI,EAAA,6BAAA;AACN,CAAC,EAAA;AAgBI,MAAM,uCACXA,qCAA2D,CAAA;AAAA,EACzD,EAAI,EAAA,0BAAA;AACN,CAAC,EAAA;AAgBI,MAAM,kCACXA,qCAAsD,CAAA;AAAA,EACpD,EAAI,EAAA,oBAAA;AACN,CAAC,EAAA;AAgBI,MAAM,yCACXA,qCAA6D,CAAA;AAAA,EAC3D,EAAI,EAAA,4BAAA;AACN,CAAC;;ACjEI,MAAM,cAAe,CAAA;AAAA,EAC1B,YAA6B,MAAgB,EAAA;AAAhB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA,CAAA;AAAA,GAAiB;AAAA,EAE9C,MAAa,sBACX,CAAA,cAAA,EACA,cAC8B,EAAA;AAC9B,IAAK,IAAA,CAAA,MAAA,CAAO,MAAM,gDAAgD,CAAA,CAAA;AAClE,IAAA,OAAO,MAAM,IAAK,CAAA,iCAAA;AAAA,MAChB,cAAA;AAAA,MACA,cAAA;AAAA,KACF,CAAA;AAAA,GACF;AAAA,EAEA,MAAc,iCACZ,CAAA,cAAA,EACA,cAC8B,EAAA;AAC9B,IAAA,MAAM,GAAW,GAAA,IAAI,GAAI,CAAA,cAAA,CAAe,GAAG,CAAA,CAAA;AAC3C,IAAM,MAAA,QAAA,GACJ,cAAe,CAAA,sBAAA,EAAwB,QACvC,IAAA,uCAAA,CAAA;AAEF,IAAI,GAAA,CAAA,QAAA,GAAW,SAAS,QAAQ,CAAA,wBAAA,CAAA,CAAA;AAEhC,IAAA,MAAM,cAA2B,IAAK,CAAA,uBAAA;AAAA,MACpC,GAAA;AAAA,MACA,cAAA;AAAA,MACA,cAAA;AAAA,KACF,CAAA;AAEA,IAAA,IAAA,CAAK,MAAO,CAAA,IAAA;AAAA,MACV,2DAAA;AAAA,KACF,CAAA;AACA,IAAI,IAAA,QAAA,CAAA;AACJ,IAAI,IAAA;AACF,MAAW,QAAA,GAAA,MAAMC,sBAAM,CAAA,GAAA,EAAK,WAAW,CAAA,CAAA;AAAA,aAChC,KAAO,EAAA;AACd,MAAK,IAAA,CAAA,MAAA,CAAO,KAAM,CAAA,wBAAA,EAA0B,KAAK,CAAA,CAAA;AACjD,MAAM,MAAA,KAAA,CAAA;AAAA,KACR;AAEA,IAAM,MAAA,IAAA,GAAY,MAAM,QAAA,CAAS,IAAK,EAAA,CAAA;AAEtC,IAAI,IAAA,IAAA,CAAK,OAAO,UAAY,EAAA;AAC1B,MAAA,MAAM,MAAS,GAAA;AAAA,QACb,GAAA,EAAK,IAAK,CAAA,MAAA,CAAO,UAAW,CAAA,aAAA;AAAA,QAC5B,IAAA,EAAM,IAAK,CAAA,MAAA,CAAO,UAAW,CAAA,qBAAA;AAAA,QAC7B,mBAAA,EAAqB,IAAK,CAAA,MAAA,CAAO,UAAW,CAAA,mBAAA;AAAA,OAC9C,CAAA;AACA,MAAO,OAAA,OAAA,CAAQ,QAAQ,MAAM,CAAA,CAAA;AAAA,KAC/B;AAEA,IAAA,IAAA,CAAK,MAAO,CAAA,KAAA,CAAM,+BAAiC,EAAA,IAAA,CAAK,MAAM,CAAA,CAAA;AAC9D,IAAA,OAAO,OAAQ,CAAA,MAAA,CAAO,IAAK,CAAA,MAAA,CAAO,OAAO,CAAA,CAAA;AAAA,GAC3C;AAAA,EAEQ,uBAAA,CACN,GACA,EAAA,cAAA,EACA,cACa,EAAA;AACb,IAAA,MAAM,IAAO,GAAA;AAAA,MACX,UAAA,EACE,cAAe,CAAA,sBAAA,EAAwB,QACvC,IAAA,uCAAA;AAAA,MACF,IAAM,EAAA,wBAAA;AAAA,MACN,IAAM,EAAA;AAAA,QACJ,eAAe,cAAe,CAAA,aAAA;AAAA,QAC9B,OAAO,cAAe,CAAA,oBAAA;AAAA,OACxB;AAAA,KACF,CAAA;AACA,IAAA,MAAM,WAA2B,GAAA;AAAA,MAC/B,MAAQ,EAAA,MAAA;AAAA,MACR,OAAS,EAAA;AAAA,QACP,MAAQ,EAAA,kBAAA;AAAA,QACR,cAAgB,EAAA,kBAAA;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAK,CAAA,SAAA,CAAU,IAAI,CAAA;AAAA,KAC3B,CAAA;AAEA,IAAI,IAAA,GAAA,CAAI,aAAa,QAAU,EAAA;AAC7B,MAAY,WAAA,CAAA,KAAA,GAAQ,IAAIC,gBAAA,CAAM,KAAM,CAAA;AAAA,QAClC,EACE,EAAAC,iCAAA;AAAA,UACE,cAAe,CAAA,MAAA;AAAA,UACf,cAAe,CAAA,MAAA;AAAA,SACZ,IAAA,KAAA,CAAA;AAAA,QACP,kBAAA,EAAoB,CAAC,cAAe,CAAA,aAAA;AAAA,OACrC,CAAA,CAAA;AAAA,KACH;AAEA,IAAO,OAAA,WAAA,CAAA;AAAA,GACT;AACF;;;;;;;;;"}
+{"version":3,"file":"index.cjs.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@backstage/plugin-kubernetes-node",
-  "version": "0.1.19",
+  "version": "0.1.20-next.1",
   "description": "Node.js library for the kubernetes plugin",
   "backstage": {
     "role": "node-library",
@@ -38,21 +38,21 @@
     "test": "backstage-cli package test"
   },
   "dependencies": {
-    "@backstage/backend-plugin-api": "^1.0.0",
-    "@backstage/catalog-model": "^1.7.0",
-    "@backstage/plugin-kubernetes-common": "^0.8.3",
-    "@backstage/types": "^1.1.1",
+    "@backstage/backend-plugin-api": "1.0.1-next.1",
+    "@backstage/catalog-model": "1.7.0",
+    "@backstage/plugin-kubernetes-common": "0.8.3",
+    "@backstage/types": "1.1.1",
     "@kubernetes/client-node": "^0.20.0",
     "node-fetch": "^2.7.0",
     "winston": "^3.2.1"
   },
   "devDependencies": {
-    "@backstage/backend-app-api": "^1.0.0",
+    "@backstage/backend-app-api": "1.0.1-next.1",
     "@backstage/backend-common": "^0.25.0",
-    "@backstage/backend-defaults": "^0.5.0",
-    "@backstage/backend-test-utils": "^1.0.0",
-    "@backstage/cli": "^0.27.1",
-    "@backstage/plugin-kubernetes-backend": "^0.18.6",
+    "@backstage/backend-defaults": "0.5.1-next.2",
+    "@backstage/backend-test-utils": "1.0.1-next.2",
+    "@backstage/cli": "0.28.0-next.2",
+    "@backstage/plugin-kubernetes-backend": "0.18.7-next.1",
     "msw": "^1.3.1",
     "supertest": "^7.0.0"
   }