@backstage/plugin-kubernetes-node 0.1.4-next.0 → 0.1.4-next.1

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @backstage/plugin-kubernetes-node
 
+## 0.1.4-next.1
+
+### Patch Changes
+
+- cceed8a: Introduced `PinnipedHelper` class to enable authentication to Kubernetes clusters through Pinniped
+- Updated dependencies
+  - @backstage/catalog-model@1.4.4-next.0
+  - @backstage/backend-plugin-api@0.6.10-next.1
+  - @backstage/types@1.1.1
+  - @backstage/plugin-kubernetes-common@0.7.4-next.1
+
 ## 0.1.4-next.0
 
 ### Patch Changes

package/dist/index.cjs.js

@@ -3,6 +3,32 @@
 Object.defineProperty(exports, '__esModule', { value: true });
 
 var backendPluginApi = require('@backstage/backend-plugin-api');
+var https = require('https');
+var clientNode = require('@kubernetes/client-node');
+var fetch = require('node-fetch');
+
+function _interopDefaultLegacy (e) { return e && typeof e === 'object' && 'default' in e ? e : { 'default': e }; }
+
+function _interopNamespace(e) {
+  if (e && e.__esModule) return e;
+  var n = Object.create(null);
+  if (e) {
+    Object.keys(e).forEach(function (k) {
+      if (k !== 'default') {
+        var d = Object.getOwnPropertyDescriptor(e, k);
+        Object.defineProperty(n, k, d.get ? d : {
+          enumerable: true,
+          get: function () { return e[k]; }
+        });
+      }
+    });
+  }
+  n["default"] = e;
+  return Object.freeze(n);
+}
+
+var https__namespace = /*#__PURE__*/_interopNamespace(https);
+var fetch__default = /*#__PURE__*/_interopDefaultLegacy(fetch);
 
 const kubernetesObjectsProviderExtensionPoint = backendPluginApi.createExtensionPoint({
   id: "kubernetes.objects-provider"
@@ -20,6 +46,81 @@ const kubernetesServiceLocatorExtensionPoint = backendPluginApi.createExtensionP
   id: "kubernetes.service-locator"
 });
 
+class PinnipedHelper {
+  constructor(logger) {
+    this.logger = logger;
+  }
+  async tokenCredentialRequest(clusterDetails, pinnipedParams) {
+    this.logger.debug("Pinniped: Requesting client Certs to Concierge");
+    return await this.exchangeClusterTokentoClientCerts(
+      clusterDetails,
+      pinnipedParams
+    );
+  }
+  async exchangeClusterTokentoClientCerts(clusterDetails, pinnipedParams) {
+    var _a, _b;
+    const url = new URL(clusterDetails.url);
+    const apiGroup = (_b = (_a = pinnipedParams.tokenCredentialRequest) == null ? void 0 : _a.apiGroup) != null ? _b : "login.concierge.pinniped.dev/v1alpha1";
+    url.pathname = `/apis/${apiGroup}/tokencredentialrequests`;
+    const requestInit = this.buildRequestForPinniped(
+      url,
+      clusterDetails,
+      pinnipedParams
+    );
+    this.logger.info(
+      "Fetching client certs for mTLS authentication on Pinniped"
+    );
+    let response;
+    try {
+      response = await fetch__default["default"](url, requestInit);
+    } catch (error) {
+      this.logger.error("Pinniped request error", error);
+      throw error;
+    }
+    const data = await response.json();
+    if (data.status.credential) {
+      const result = {
+        key: data.status.credential.clientKeyData,
+        cert: data.status.credential.clientCertificateData,
+        expirationTimestamp: data.status.credential.expirationTimestamp
+      };
+      return Promise.resolve(result);
+    }
+    this.logger.error("Unable to fetch client certs,", data.status);
+    return Promise.reject(data.status.message);
+  }
+  buildRequestForPinniped(url, clusterDetails, pinnipedParams) {
+    var _a, _b, _c;
+    const body = {
+      apiVersion: (_b = (_a = pinnipedParams.tokenCredentialRequest) == null ? void 0 : _a.apiGroup) != null ? _b : "login.concierge.pinniped.dev/v1alpha1",
+      kind: "TokenCredentialRequest",
+      spec: {
+        authenticator: pinnipedParams.authenticator,
+        token: pinnipedParams.clusterScopedIdToken
+      }
+    };
+    const requestInit = {
+      method: "POST",
+      headers: {
+        Accept: "application/json",
+        "Content-Type": "application/json"
+      },
+      body: JSON.stringify(body)
+    };
+    if (url.protocol === "https:") {
+      requestInit.agent = new https__namespace.Agent({
+        ca: (_c = clientNode.bufferFromFileOrString(
+          clusterDetails.caFile,
+          clusterDetails.caData
+        )) != null ? _c : void 0,
+        rejectUnauthorized: !clusterDetails.skipTLSVerify
+      });
+    }
+    return requestInit;
+  }
+}
+
+exports.PinnipedHelper = PinnipedHelper;
 exports.kubernetesAuthStrategyExtensionPoint = kubernetesAuthStrategyExtensionPoint;
 exports.kubernetesClusterSupplierExtensionPoint = kubernetesClusterSupplierExtensionPoint;
 exports.kubernetesFetcherExtensionPoint = kubernetesFetcherExtensionPoint;

package/dist/index.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs.js","sources":["../src/extensions.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { createExtensionPoint } from '@backstage/backend-plugin-api';\nimport {\n  AuthenticationStrategy,\n  KubernetesClustersSupplier,\n  KubernetesFetcher,\n  KubernetesObjectsProvider,\n  KubernetesServiceLocator,\n} from '@backstage/plugin-kubernetes-node';\n\n/**\n * The interface for {@link kubernetesObjectsProviderExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesObjectsProviderExtensionPoint {\n  addObjectsProvider(provider: KubernetesObjectsProvider): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a objects provider.\n *\n * @public\n */\nexport const kubernetesObjectsProviderExtensionPoint =\n  createExtensionPoint<KubernetesObjectsProviderExtensionPoint>({\n    id: 'kubernetes.objects-provider',\n  });\n\n/**\n * The interface for {@link kubernetesClusterSupplierExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesClusterSupplierExtensionPoint {\n  addClusterSupplier(clusterSupplier: KubernetesClustersSupplier): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a cluster supplier.\n *\n * @public\n */\nexport const kubernetesClusterSupplierExtensionPoint =\n  createExtensionPoint<KubernetesClusterSupplierExtensionPoint>({\n    id: 'kubernetes.cluster-supplier',\n  });\n\n/**\n * The interface for {@link kubernetesAuthStrategyExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesAuthStrategyExtensionPoint {\n  addAuthStrategy(key: string, strategy: AuthenticationStrategy): void;\n}\n\n/**\n * An extension point the exposes the ability to add an Auth Strategy.\n *\n * @public\n */\nexport const kubernetesAuthStrategyExtensionPoint =\n  createExtensionPoint<KubernetesAuthStrategyExtensionPoint>({\n    id: 'kubernetes.auth-strategy',\n  });\n\n/**\n * The interface for {@link kubernetesFetcherExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesFetcherExtensionPoint {\n  addFetcher(fetcher: KubernetesFetcher): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a kubernetes fetcher.\n *\n * @public\n */\nexport const kubernetesFetcherExtensionPoint =\n  createExtensionPoint<KubernetesFetcherExtensionPoint>({\n    id: 'kubernetes.fetcher',\n  });\n\n/**\n * The interface for {@link kubernetesServiceLocatorExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesServiceLocatorExtensionPoint {\n  addServiceLocator(serviceLocator: KubernetesServiceLocator): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a kubernetes service locator.\n *\n * @public\n */\nexport const kubernetesServiceLocatorExtensionPoint =\n  createExtensionPoint<KubernetesServiceLocatorExtensionPoint>({\n    id: 'kubernetes.service-locator',\n  });\n"],"names":["createExtensionPoint"],"mappings":";;;;;;AAsCO,MAAM,0CACXA,qCAA8D,CAAA;AAAA,EAC5D,EAAI,EAAA,6BAAA;AACN,CAAC,EAAA;AAgBI,MAAM,0CACXA,qCAA8D,CAAA;AAAA,EAC5D,EAAI,EAAA,6BAAA;AACN,CAAC,EAAA;AAgBI,MAAM,uCACXA,qCAA2D,CAAA;AAAA,EACzD,EAAI,EAAA,0BAAA;AACN,CAAC,EAAA;AAgBI,MAAM,kCACXA,qCAAsD,CAAA;AAAA,EACpD,EAAI,EAAA,oBAAA;AACN,CAAC,EAAA;AAgBI,MAAM,yCACXA,qCAA6D,CAAA;AAAA,EAC3D,EAAI,EAAA,4BAAA;AACN,CAAC;;;;;;;;"}
+{"version":3,"file":"index.cjs.js","sources":["../src/extensions.ts","../src/auth/PinnipedHelper.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { createExtensionPoint } from '@backstage/backend-plugin-api';\nimport {\n  AuthenticationStrategy,\n  KubernetesClustersSupplier,\n  KubernetesFetcher,\n  KubernetesObjectsProvider,\n  KubernetesServiceLocator,\n} from '@backstage/plugin-kubernetes-node';\n\n/**\n * The interface for {@link kubernetesObjectsProviderExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesObjectsProviderExtensionPoint {\n  addObjectsProvider(provider: KubernetesObjectsProvider): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a objects provider.\n *\n * @public\n */\nexport const kubernetesObjectsProviderExtensionPoint =\n  createExtensionPoint<KubernetesObjectsProviderExtensionPoint>({\n    id: 'kubernetes.objects-provider',\n  });\n\n/**\n * The interface for {@link kubernetesClusterSupplierExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesClusterSupplierExtensionPoint {\n  addClusterSupplier(clusterSupplier: KubernetesClustersSupplier): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a cluster supplier.\n *\n * @public\n */\nexport const kubernetesClusterSupplierExtensionPoint =\n  createExtensionPoint<KubernetesClusterSupplierExtensionPoint>({\n    id: 'kubernetes.cluster-supplier',\n  });\n\n/**\n * The interface for {@link kubernetesAuthStrategyExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesAuthStrategyExtensionPoint {\n  addAuthStrategy(key: string, strategy: AuthenticationStrategy): void;\n}\n\n/**\n * An extension point the exposes the ability to add an Auth Strategy.\n *\n * @public\n */\nexport const kubernetesAuthStrategyExtensionPoint =\n  createExtensionPoint<KubernetesAuthStrategyExtensionPoint>({\n    id: 'kubernetes.auth-strategy',\n  });\n\n/**\n * The interface for {@link kubernetesFetcherExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesFetcherExtensionPoint {\n  addFetcher(fetcher: KubernetesFetcher): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a kubernetes fetcher.\n *\n * @public\n */\nexport const kubernetesFetcherExtensionPoint =\n  createExtensionPoint<KubernetesFetcherExtensionPoint>({\n    id: 'kubernetes.fetcher',\n  });\n\n/**\n * The interface for {@link kubernetesServiceLocatorExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesServiceLocatorExtensionPoint {\n  addServiceLocator(serviceLocator: KubernetesServiceLocator): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a kubernetes service locator.\n *\n * @public\n */\nexport const kubernetesServiceLocatorExtensionPoint =\n  createExtensionPoint<KubernetesServiceLocatorExtensionPoint>({\n    id: 'kubernetes.service-locator',\n  });\n","/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { ClusterDetails } from '@backstage/plugin-kubernetes-node';\nimport * as https from 'https';\nimport { bufferFromFileOrString } from '@kubernetes/client-node';\nimport fetch, { RequestInit } from 'node-fetch';\nimport { Logger } from 'winston';\n\n/**\n *\n * @public\n */\nexport type PinnipedClientCerts = {\n  key: string;\n  cert: string;\n  expirationTimestamp: string;\n};\n\n/**\n *\n * @public\n */\nexport type PinnipedParameters = {\n  clusterScopedIdToken: string;\n  authenticator: {\n    apiGroup: string;\n    kind: string;\n    name: string;\n  };\n  tokenCredentialRequest?: {\n    apiGroup?: string;\n  };\n};\n\n/**\n *\n * @public\n */\nexport class PinnipedHelper {\n  constructor(private readonly logger: Logger) {}\n\n  public async tokenCredentialRequest(\n    clusterDetails: ClusterDetails,\n    pinnipedParams: PinnipedParameters,\n  ): Promise<PinnipedClientCerts> {\n    this.logger.debug('Pinniped: Requesting client Certs to Concierge');\n    return await this.exchangeClusterTokentoClientCerts(\n      clusterDetails,\n      pinnipedParams,\n    );\n  }\n\n  private async exchangeClusterTokentoClientCerts(\n    clusterDetails: ClusterDetails,\n    pinnipedParams: PinnipedParameters,\n  ): Promise<PinnipedClientCerts> {\n    const url: URL = new URL(clusterDetails.url);\n    const apiGroup =\n      pinnipedParams.tokenCredentialRequest?.apiGroup ??\n      'login.concierge.pinniped.dev/v1alpha1';\n\n    url.pathname = `/apis/${apiGroup}/tokencredentialrequests`;\n\n    const requestInit: RequestInit = this.buildRequestForPinniped(\n      url,\n      clusterDetails,\n      pinnipedParams,\n    );\n\n    this.logger.info(\n      'Fetching client certs for mTLS authentication on Pinniped',\n    );\n    let response;\n    try {\n      response = await fetch(url, requestInit);\n    } catch (error) {\n      this.logger.error('Pinniped request error', error);\n      throw error;\n    }\n\n    const data: any = await response.json();\n\n    if (data.status.credential) {\n      const result = {\n        key: data.status.credential.clientKeyData,\n        cert: data.status.credential.clientCertificateData,\n        expirationTimestamp: data.status.credential.expirationTimestamp,\n      };\n      return Promise.resolve(result);\n    }\n\n    this.logger.error('Unable to fetch client certs,', data.status);\n    return Promise.reject(data.status.message);\n  }\n\n  private buildRequestForPinniped(\n    url: URL,\n    clusterDetails: ClusterDetails,\n    pinnipedParams: PinnipedParameters,\n  ): RequestInit {\n    const body = {\n      apiVersion:\n        pinnipedParams.tokenCredentialRequest?.apiGroup ??\n        'login.concierge.pinniped.dev/v1alpha1',\n      kind: 'TokenCredentialRequest',\n      spec: {\n        authenticator: pinnipedParams.authenticator,\n        token: pinnipedParams.clusterScopedIdToken,\n      },\n    };\n    const requestInit: RequestInit = {\n      method: 'POST',\n      headers: {\n        Accept: 'application/json',\n        'Content-Type': 'application/json',\n      },\n      body: JSON.stringify(body),\n    };\n\n    if (url.protocol === 'https:') {\n      requestInit.agent = new https.Agent({\n        ca:\n          bufferFromFileOrString(\n            clusterDetails.caFile,\n            clusterDetails.caData,\n          ) ?? undefined,\n        rejectUnauthorized: !clusterDetails.skipTLSVerify,\n      });\n    }\n\n    return requestInit;\n  }\n}\n"],"names":["createExtensionPoint","fetch","https","bufferFromFileOrString"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCO,MAAM,0CACXA,qCAA8D,CAAA;AAAA,EAC5D,EAAI,EAAA,6BAAA;AACN,CAAC,EAAA;AAgBI,MAAM,0CACXA,qCAA8D,CAAA;AAAA,EAC5D,EAAI,EAAA,6BAAA;AACN,CAAC,EAAA;AAgBI,MAAM,uCACXA,qCAA2D,CAAA;AAAA,EACzD,EAAI,EAAA,0BAAA;AACN,CAAC,EAAA;AAgBI,MAAM,kCACXA,qCAAsD,CAAA;AAAA,EACpD,EAAI,EAAA,oBAAA;AACN,CAAC,EAAA;AAgBI,MAAM,yCACXA,qCAA6D,CAAA;AAAA,EAC3D,EAAI,EAAA,4BAAA;AACN,CAAC;;ACjEI,MAAM,cAAe,CAAA;AAAA,EAC1B,YAA6B,MAAgB,EAAA;AAAhB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA,CAAA;AAAA,GAAiB;AAAA,EAE9C,MAAa,sBACX,CAAA,cAAA,EACA,cAC8B,EAAA;AAC9B,IAAK,IAAA,CAAA,MAAA,CAAO,MAAM,gDAAgD,CAAA,CAAA;AAClE,IAAA,OAAO,MAAM,IAAK,CAAA,iCAAA;AAAA,MAChB,cAAA;AAAA,MACA,cAAA;AAAA,KACF,CAAA;AAAA,GACF;AAAA,EAEA,MAAc,iCACZ,CAAA,cAAA,EACA,cAC8B,EAAA;AArElC,IAAA,IAAA,EAAA,EAAA,EAAA,CAAA;AAsEI,IAAA,MAAM,GAAW,GAAA,IAAI,GAAI,CAAA,cAAA,CAAe,GAAG,CAAA,CAAA;AAC3C,IAAA,MAAM,QACJ,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,cAAA,CAAe,sBAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAuC,aAAvC,IACA,GAAA,EAAA,GAAA,uCAAA,CAAA;AAEF,IAAI,GAAA,CAAA,QAAA,GAAW,SAAS,QAAQ,CAAA,wBAAA,CAAA,CAAA;AAEhC,IAAA,MAAM,cAA2B,IAAK,CAAA,uBAAA;AAAA,MACpC,GAAA;AAAA,MACA,cAAA;AAAA,MACA,cAAA;AAAA,KACF,CAAA;AAEA,IAAA,IAAA,CAAK,MAAO,CAAA,IAAA;AAAA,MACV,2DAAA;AAAA,KACF,CAAA;AACA,IAAI,IAAA,QAAA,CAAA;AACJ,IAAI,IAAA;AACF,MAAW,QAAA,GAAA,MAAMC,yBAAM,CAAA,GAAA,EAAK,WAAW,CAAA,CAAA;AAAA,aAChC,KAAO,EAAA;AACd,MAAK,IAAA,CAAA,MAAA,CAAO,KAAM,CAAA,wBAAA,EAA0B,KAAK,CAAA,CAAA;AACjD,MAAM,MAAA,KAAA,CAAA;AAAA,KACR;AAEA,IAAM,MAAA,IAAA,GAAY,MAAM,QAAA,CAAS,IAAK,EAAA,CAAA;AAEtC,IAAI,IAAA,IAAA,CAAK,OAAO,UAAY,EAAA;AAC1B,MAAA,MAAM,MAAS,GAAA;AAAA,QACb,GAAA,EAAK,IAAK,CAAA,MAAA,CAAO,UAAW,CAAA,aAAA;AAAA,QAC5B,IAAA,EAAM,IAAK,CAAA,MAAA,CAAO,UAAW,CAAA,qBAAA;AAAA,QAC7B,mBAAA,EAAqB,IAAK,CAAA,MAAA,CAAO,UAAW,CAAA,mBAAA;AAAA,OAC9C,CAAA;AACA,MAAO,OAAA,OAAA,CAAQ,QAAQ,MAAM,CAAA,CAAA;AAAA,KAC/B;AAEA,IAAA,IAAA,CAAK,MAAO,CAAA,KAAA,CAAM,+BAAiC,EAAA,IAAA,CAAK,MAAM,CAAA,CAAA;AAC9D,IAAA,OAAO,OAAQ,CAAA,MAAA,CAAO,IAAK,CAAA,MAAA,CAAO,OAAO,CAAA,CAAA;AAAA,GAC3C;AAAA,EAEQ,uBAAA,CACN,GACA,EAAA,cAAA,EACA,cACa,EAAA;AAjHjB,IAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,CAAA;AAkHI,IAAA,MAAM,IAAO,GAAA;AAAA,MACX,UACE,EAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,cAAA,CAAe,sBAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAuC,aAAvC,IACA,GAAA,EAAA,GAAA,uCAAA;AAAA,MACF,IAAM,EAAA,wBAAA;AAAA,MACN,IAAM,EAAA;AAAA,QACJ,eAAe,cAAe,CAAA,aAAA;AAAA,QAC9B,OAAO,cAAe,CAAA,oBAAA;AAAA,OACxB;AAAA,KACF,CAAA;AACA,IAAA,MAAM,WAA2B,GAAA;AAAA,MAC/B,MAAQ,EAAA,MAAA;AAAA,MACR,OAAS,EAAA;AAAA,QACP,MAAQ,EAAA,kBAAA;AAAA,QACR,cAAgB,EAAA,kBAAA;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAK,CAAA,SAAA,CAAU,IAAI,CAAA;AAAA,KAC3B,CAAA;AAEA,IAAI,IAAA,GAAA,CAAI,aAAa,QAAU,EAAA;AAC7B,MAAY,WAAA,CAAA,KAAA,GAAQ,IAAIC,gBAAA,CAAM,KAAM,CAAA;AAAA,QAClC,EACE,EAAA,CAAA,EAAA,GAAAC,iCAAA;AAAA,UACE,cAAe,CAAA,MAAA;AAAA,UACf,cAAe,CAAA,MAAA;AAAA,cAFjB,IAGK,GAAA,EAAA,GAAA,KAAA,CAAA;AAAA,QACP,kBAAA,EAAoB,CAAC,cAAe,CAAA,aAAA;AAAA,OACrC,CAAA,CAAA;AAAA,KACH;AAEA,IAAO,OAAA,WAAA,CAAA;AAAA,GACT;AACF;;;;;;;;;"}

package/dist/index.d.ts

@@ -1,8 +1,9 @@
 import * as _backstage_backend_plugin_api from '@backstage/backend-plugin-api';
-import { KubernetesObjectsProvider as KubernetesObjectsProvider$1, KubernetesClustersSupplier as KubernetesClustersSupplier$1, AuthenticationStrategy as AuthenticationStrategy$1, KubernetesFetcher as KubernetesFetcher$1, KubernetesServiceLocator as KubernetesServiceLocator$1 } from '@backstage/plugin-kubernetes-node';
+import { KubernetesObjectsProvider as KubernetesObjectsProvider$1, KubernetesClustersSupplier as KubernetesClustersSupplier$1, AuthenticationStrategy as AuthenticationStrategy$1, KubernetesFetcher as KubernetesFetcher$1, KubernetesServiceLocator as KubernetesServiceLocator$1, ClusterDetails as ClusterDetails$1 } from '@backstage/plugin-kubernetes-node';
 import { Entity } from '@backstage/catalog-model';
 import { ObjectsByEntityResponse, KubernetesRequestAuth, CustomResourceMatcher, KubernetesFetchError, FetchResponse } from '@backstage/plugin-kubernetes-common';
 import { JsonObject } from '@backstage/types';
+import { Logger } from 'winston';
 
 /**
  * The interface for {@link kubernetesObjectsProviderExtensionPoint}.
@@ -265,4 +266,40 @@ interface KubernetesServiceLocator {
     }>;
 }
 
-export { AuthMetadata, AuthenticationStrategy, ClusterDetails, CustomResource, CustomResourcesByEntity, FetchResponseWrapper, KubernetesAuthStrategyExtensionPoint, KubernetesClusterSupplierExtensionPoint, KubernetesClustersSupplier, KubernetesCredential, KubernetesFetcher, KubernetesFetcherExtensionPoint, KubernetesObjectTypes, KubernetesObjectsByEntity, KubernetesObjectsProvider, KubernetesObjectsProviderExtensionPoint, KubernetesServiceLocator, KubernetesServiceLocatorExtensionPoint, ObjectFetchParams, ObjectToFetch, ServiceLocatorRequestContext, kubernetesAuthStrategyExtensionPoint, kubernetesClusterSupplierExtensionPoint, kubernetesFetcherExtensionPoint, kubernetesObjectsProviderExtensionPoint, kubernetesServiceLocatorExtensionPoint };
+/**
+ *
+ * @public
+ */
+type PinnipedClientCerts = {
+    key: string;
+    cert: string;
+    expirationTimestamp: string;
+};
+/**
+ *
+ * @public
+ */
+type PinnipedParameters = {
+    clusterScopedIdToken: string;
+    authenticator: {
+        apiGroup: string;
+        kind: string;
+        name: string;
+    };
+    tokenCredentialRequest?: {
+        apiGroup?: string;
+    };
+};
+/**
+ *
+ * @public
+ */
+declare class PinnipedHelper {
+    private readonly logger;
+    constructor(logger: Logger);
+    tokenCredentialRequest(clusterDetails: ClusterDetails$1, pinnipedParams: PinnipedParameters): Promise<PinnipedClientCerts>;
+    private exchangeClusterTokentoClientCerts;
+    private buildRequestForPinniped;
+}
+
+export { AuthMetadata, AuthenticationStrategy, ClusterDetails, CustomResource, CustomResourcesByEntity, FetchResponseWrapper, KubernetesAuthStrategyExtensionPoint, KubernetesClusterSupplierExtensionPoint, KubernetesClustersSupplier, KubernetesCredential, KubernetesFetcher, KubernetesFetcherExtensionPoint, KubernetesObjectTypes, KubernetesObjectsByEntity, KubernetesObjectsProvider, KubernetesObjectsProviderExtensionPoint, KubernetesServiceLocator, KubernetesServiceLocatorExtensionPoint, ObjectFetchParams, ObjectToFetch, PinnipedClientCerts, PinnipedHelper, PinnipedParameters, ServiceLocatorRequestContext, kubernetesAuthStrategyExtensionPoint, kubernetesClusterSupplierExtensionPoint, kubernetesFetcherExtensionPoint, kubernetesObjectsProviderExtensionPoint, kubernetesServiceLocatorExtensionPoint };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@backstage/plugin-kubernetes-node",
   "description": "Node.js library for the kubernetes plugin",
-  "version": "0.1.4-next.0",
+  "version": "0.1.4-next.1",
   "main": "dist/index.cjs.js",
   "types": "dist/index.d.ts",
   "license": "Apache-2.0",
@@ -22,15 +22,24 @@
     "postpack": "backstage-cli package postpack"
   },
   "devDependencies": {
-    "@backstage/cli": "^0.25.2-next.0"
+    "@backstage/backend-app-api": "^0.5.11-next.1",
+    "@backstage/backend-common": "^0.21.0-next.1",
+    "@backstage/backend-test-utils": "^0.3.0-next.1",
+    "@backstage/cli": "^0.25.2-next.1",
+    "@backstage/plugin-kubernetes-backend": "^0.14.2-next.1",
+    "msw": "^1.3.1",
+    "supertest": "^6.1.3"
   },
   "files": [
     "dist"
   ],
   "dependencies": {
-    "@backstage/backend-plugin-api": "^0.6.10-next.0",
-    "@backstage/catalog-model": "^1.4.3",
-    "@backstage/plugin-kubernetes-common": "^0.7.4-next.0",
-    "@backstage/types": "^1.1.1"
+    "@backstage/backend-plugin-api": "^0.6.10-next.1",
+    "@backstage/catalog-model": "^1.4.4-next.0",
+    "@backstage/plugin-kubernetes-common": "^0.7.4-next.1",
+    "@backstage/types": "^1.1.1",
+    "@kubernetes/client-node": "^0.20.0",
+    "node-fetch": "^2.6.7",
+    "winston": "^3.2.1"
   }
 }