@backstage/plugin-kubernetes-node 0.1.8-next.2 → 0.1.9
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +21 -0
- package/dist/index.cjs.js +7 -9
- package/dist/index.cjs.js.map +1 -1
- package/dist/index.d.ts +1 -1
- package/package.json +9 -9
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,26 @@
|
|
|
1
1
|
# @backstage/plugin-kubernetes-node
|
|
2
2
|
|
|
3
|
+
## 0.1.9
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- Updated dependencies
|
|
8
|
+
- @backstage/backend-plugin-api@0.6.15
|
|
9
|
+
- @backstage/catalog-model@1.4.5
|
|
10
|
+
- @backstage/types@1.1.1
|
|
11
|
+
- @backstage/plugin-kubernetes-common@0.7.5
|
|
12
|
+
|
|
13
|
+
## 0.1.8
|
|
14
|
+
|
|
15
|
+
### Patch Changes
|
|
16
|
+
|
|
17
|
+
- 69d0217: Accept auth credentials to get kubernetes clusters
|
|
18
|
+
- Updated dependencies
|
|
19
|
+
- @backstage/backend-plugin-api@0.6.14
|
|
20
|
+
- @backstage/plugin-kubernetes-common@0.7.5
|
|
21
|
+
- @backstage/catalog-model@1.4.5
|
|
22
|
+
- @backstage/types@1.1.1
|
|
23
|
+
|
|
3
24
|
## 0.1.8-next.2
|
|
4
25
|
|
|
5
26
|
### Patch Changes
|
package/dist/index.cjs.js
CHANGED
|
@@ -1,16 +1,14 @@
|
|
|
1
1
|
'use strict';
|
|
2
2
|
|
|
3
|
-
Object.defineProperty(exports, '__esModule', { value: true });
|
|
4
|
-
|
|
5
3
|
var backendPluginApi = require('@backstage/backend-plugin-api');
|
|
6
4
|
var https = require('https');
|
|
7
5
|
var clientNode = require('@kubernetes/client-node');
|
|
8
6
|
var fetch = require('node-fetch');
|
|
9
7
|
|
|
10
|
-
function
|
|
8
|
+
function _interopDefaultCompat (e) { return e && typeof e === 'object' && 'default' in e ? e : { default: e }; }
|
|
11
9
|
|
|
12
|
-
function
|
|
13
|
-
if (e && e
|
|
10
|
+
function _interopNamespaceCompat(e) {
|
|
11
|
+
if (e && typeof e === 'object' && 'default' in e) return e;
|
|
14
12
|
var n = Object.create(null);
|
|
15
13
|
if (e) {
|
|
16
14
|
Object.keys(e).forEach(function (k) {
|
|
@@ -23,12 +21,12 @@ function _interopNamespace(e) {
|
|
|
23
21
|
}
|
|
24
22
|
});
|
|
25
23
|
}
|
|
26
|
-
n
|
|
24
|
+
n.default = e;
|
|
27
25
|
return Object.freeze(n);
|
|
28
26
|
}
|
|
29
27
|
|
|
30
|
-
var https__namespace = /*#__PURE__*/
|
|
31
|
-
var fetch__default = /*#__PURE__*/
|
|
28
|
+
var https__namespace = /*#__PURE__*/_interopNamespaceCompat(https);
|
|
29
|
+
var fetch__default = /*#__PURE__*/_interopDefaultCompat(fetch);
|
|
32
30
|
|
|
33
31
|
const kubernetesObjectsProviderExtensionPoint = backendPluginApi.createExtensionPoint({
|
|
34
32
|
id: "kubernetes.objects-provider"
|
|
@@ -72,7 +70,7 @@ class PinnipedHelper {
|
|
|
72
70
|
);
|
|
73
71
|
let response;
|
|
74
72
|
try {
|
|
75
|
-
response = await fetch__default
|
|
73
|
+
response = await fetch__default.default(url, requestInit);
|
|
76
74
|
} catch (error) {
|
|
77
75
|
this.logger.error("Pinniped request error", error);
|
|
78
76
|
throw error;
|
package/dist/index.cjs.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.cjs.js","sources":["../src/extensions.ts","../src/auth/PinnipedHelper.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { createExtensionPoint } from '@backstage/backend-plugin-api';\nimport {\n AuthenticationStrategy,\n KubernetesClustersSupplier,\n KubernetesFetcher,\n KubernetesObjectsProvider,\n KubernetesServiceLocator,\n} from '@backstage/plugin-kubernetes-node';\n\n/**\n * The interface for {@link kubernetesObjectsProviderExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesObjectsProviderExtensionPoint {\n addObjectsProvider(provider: KubernetesObjectsProvider): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a objects provider.\n *\n * @public\n */\nexport const kubernetesObjectsProviderExtensionPoint =\n createExtensionPoint<KubernetesObjectsProviderExtensionPoint>({\n id: 'kubernetes.objects-provider',\n });\n\n/**\n * The interface for {@link kubernetesClusterSupplierExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesClusterSupplierExtensionPoint {\n addClusterSupplier(clusterSupplier: KubernetesClustersSupplier): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a cluster supplier.\n *\n * @public\n */\nexport const kubernetesClusterSupplierExtensionPoint =\n createExtensionPoint<KubernetesClusterSupplierExtensionPoint>({\n id: 'kubernetes.cluster-supplier',\n });\n\n/**\n * The interface for {@link kubernetesAuthStrategyExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesAuthStrategyExtensionPoint {\n addAuthStrategy(key: string, strategy: AuthenticationStrategy): void;\n}\n\n/**\n * An extension point the exposes the ability to add an Auth Strategy.\n *\n * @public\n */\nexport const kubernetesAuthStrategyExtensionPoint =\n createExtensionPoint<KubernetesAuthStrategyExtensionPoint>({\n id: 'kubernetes.auth-strategy',\n });\n\n/**\n * The interface for {@link kubernetesFetcherExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesFetcherExtensionPoint {\n addFetcher(fetcher: KubernetesFetcher): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a kubernetes fetcher.\n *\n * @public\n */\nexport const kubernetesFetcherExtensionPoint =\n createExtensionPoint<KubernetesFetcherExtensionPoint>({\n id: 'kubernetes.fetcher',\n });\n\n/**\n * The interface for {@link kubernetesServiceLocatorExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesServiceLocatorExtensionPoint {\n addServiceLocator(serviceLocator: KubernetesServiceLocator): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a kubernetes service locator.\n *\n * @public\n */\nexport const kubernetesServiceLocatorExtensionPoint =\n createExtensionPoint<KubernetesServiceLocatorExtensionPoint>({\n id: 'kubernetes.service-locator',\n });\n","/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { ClusterDetails } from '@backstage/plugin-kubernetes-node';\nimport * as https from 'https';\nimport { bufferFromFileOrString } from '@kubernetes/client-node';\nimport fetch, { RequestInit } from 'node-fetch';\nimport { Logger } from 'winston';\n\n/**\n *\n * @public\n */\nexport type PinnipedClientCerts = {\n key: string;\n cert: string;\n expirationTimestamp: string;\n};\n\n/**\n *\n * @public\n */\nexport type PinnipedParameters = {\n clusterScopedIdToken: string;\n authenticator: {\n apiGroup: string;\n kind: string;\n name: string;\n };\n tokenCredentialRequest?: {\n apiGroup?: string;\n };\n};\n\n/**\n *\n * @public\n */\nexport class PinnipedHelper {\n constructor(private readonly logger: Logger) {}\n\n public async tokenCredentialRequest(\n clusterDetails: ClusterDetails,\n pinnipedParams: PinnipedParameters,\n ): Promise<PinnipedClientCerts> {\n this.logger.debug('Pinniped: Requesting client Certs to Concierge');\n return await this.exchangeClusterTokentoClientCerts(\n clusterDetails,\n pinnipedParams,\n );\n }\n\n private async exchangeClusterTokentoClientCerts(\n clusterDetails: ClusterDetails,\n pinnipedParams: PinnipedParameters,\n ): Promise<PinnipedClientCerts> {\n const url: URL = new URL(clusterDetails.url);\n const apiGroup =\n pinnipedParams.tokenCredentialRequest?.apiGroup ??\n 'login.concierge.pinniped.dev/v1alpha1';\n\n url.pathname = `/apis/${apiGroup}/tokencredentialrequests`;\n\n const requestInit: RequestInit = this.buildRequestForPinniped(\n url,\n clusterDetails,\n pinnipedParams,\n );\n\n this.logger.info(\n 'Fetching client certs for mTLS authentication on Pinniped',\n );\n let response;\n try {\n response = await fetch(url, requestInit);\n } catch (error) {\n this.logger.error('Pinniped request error', error);\n throw error;\n }\n\n const data: any = await response.json();\n\n if (data.status.credential) {\n const result = {\n key: data.status.credential.clientKeyData,\n cert: data.status.credential.clientCertificateData,\n expirationTimestamp: data.status.credential.expirationTimestamp,\n };\n return Promise.resolve(result);\n }\n\n this.logger.error('Unable to fetch client certs,', data.status);\n return Promise.reject(data.status.message);\n }\n\n private buildRequestForPinniped(\n url: URL,\n clusterDetails: ClusterDetails,\n pinnipedParams: PinnipedParameters,\n ): RequestInit {\n const body = {\n apiVersion:\n pinnipedParams.tokenCredentialRequest?.apiGroup ??\n 'login.concierge.pinniped.dev/v1alpha1',\n kind: 'TokenCredentialRequest',\n spec: {\n authenticator: pinnipedParams.authenticator,\n token: pinnipedParams.clusterScopedIdToken,\n },\n };\n const requestInit: RequestInit = {\n method: 'POST',\n headers: {\n Accept: 'application/json',\n 'Content-Type': 'application/json',\n },\n body: JSON.stringify(body),\n };\n\n if (url.protocol === 'https:') {\n requestInit.agent = new https.Agent({\n ca:\n bufferFromFileOrString(\n clusterDetails.caFile,\n clusterDetails.caData,\n ) ?? undefined,\n rejectUnauthorized: !clusterDetails.skipTLSVerify,\n });\n }\n\n return requestInit;\n }\n}\n"],"names":["createExtensionPoint","fetch","https","bufferFromFileOrString"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCO,MAAM,0CACXA,qCAA8D,CAAA;AAAA,EAC5D,EAAI,EAAA,6BAAA;AACN,CAAC,EAAA;AAgBI,MAAM,0CACXA,qCAA8D,CAAA;AAAA,EAC5D,EAAI,EAAA,6BAAA;AACN,CAAC,EAAA;AAgBI,MAAM,uCACXA,qCAA2D,CAAA;AAAA,EACzD,EAAI,EAAA,0BAAA;AACN,CAAC,EAAA;AAgBI,MAAM,kCACXA,qCAAsD,CAAA;AAAA,EACpD,EAAI,EAAA,oBAAA;AACN,CAAC,EAAA;AAgBI,MAAM,yCACXA,qCAA6D,CAAA;AAAA,EAC3D,EAAI,EAAA,4BAAA;AACN,CAAC;;ACjEI,MAAM,cAAe,CAAA;AAAA,EAC1B,YAA6B,MAAgB,EAAA;AAAhB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA,CAAA;AAAA,GAAiB;AAAA,EAE9C,MAAa,sBACX,CAAA,cAAA,EACA,cAC8B,EAAA;AAC9B,IAAK,IAAA,CAAA,MAAA,CAAO,MAAM,gDAAgD,CAAA,CAAA;AAClE,IAAA,OAAO,MAAM,IAAK,CAAA,iCAAA;AAAA,MAChB,cAAA;AAAA,MACA,cAAA;AAAA,KACF,CAAA;AAAA,GACF;AAAA,EAEA,MAAc,iCACZ,CAAA,cAAA,EACA,cAC8B,EAAA;AArElC,IAAA,IAAA,EAAA,EAAA,EAAA,CAAA;AAsEI,IAAA,MAAM,GAAW,GAAA,IAAI,GAAI,CAAA,cAAA,CAAe,GAAG,CAAA,CAAA;AAC3C,IAAA,MAAM,QACJ,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,cAAA,CAAe,sBAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAuC,aAAvC,IACA,GAAA,EAAA,GAAA,uCAAA,CAAA;AAEF,IAAI,GAAA,CAAA,QAAA,GAAW,SAAS,QAAQ,CAAA,wBAAA,CAAA,CAAA;AAEhC,IAAA,MAAM,cAA2B,IAAK,CAAA,uBAAA;AAAA,MACpC,GAAA;AAAA,MACA,cAAA;AAAA,MACA,cAAA;AAAA,KACF,CAAA;AAEA,IAAA,IAAA,CAAK,MAAO,CAAA,IAAA;AAAA,MACV,2DAAA;AAAA,KACF,CAAA;AACA,IAAI,IAAA,QAAA,CAAA;AACJ,IAAI,IAAA;AACF,MAAW,QAAA,GAAA,MAAMC,yBAAM,CAAA,GAAA,EAAK,WAAW,CAAA,CAAA;AAAA,aAChC,KAAO,EAAA;AACd,MAAK,IAAA,CAAA,MAAA,CAAO,KAAM,CAAA,wBAAA,EAA0B,KAAK,CAAA,CAAA;AACjD,MAAM,MAAA,KAAA,CAAA;AAAA,KACR;AAEA,IAAM,MAAA,IAAA,GAAY,MAAM,QAAA,CAAS,IAAK,EAAA,CAAA;AAEtC,IAAI,IAAA,IAAA,CAAK,OAAO,UAAY,EAAA;AAC1B,MAAA,MAAM,MAAS,GAAA;AAAA,QACb,GAAA,EAAK,IAAK,CAAA,MAAA,CAAO,UAAW,CAAA,aAAA;AAAA,QAC5B,IAAA,EAAM,IAAK,CAAA,MAAA,CAAO,UAAW,CAAA,qBAAA;AAAA,QAC7B,mBAAA,EAAqB,IAAK,CAAA,MAAA,CAAO,UAAW,CAAA,mBAAA;AAAA,OAC9C,CAAA;AACA,MAAO,OAAA,OAAA,CAAQ,QAAQ,MAAM,CAAA,CAAA;AAAA,KAC/B;AAEA,IAAA,IAAA,CAAK,MAAO,CAAA,KAAA,CAAM,+BAAiC,EAAA,IAAA,CAAK,MAAM,CAAA,CAAA;AAC9D,IAAA,OAAO,OAAQ,CAAA,MAAA,CAAO,IAAK,CAAA,MAAA,CAAO,OAAO,CAAA,CAAA;AAAA,GAC3C;AAAA,EAEQ,uBAAA,CACN,GACA,EAAA,cAAA,EACA,cACa,EAAA;AAjHjB,IAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,CAAA;AAkHI,IAAA,MAAM,IAAO,GAAA;AAAA,MACX,UACE,EAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,cAAA,CAAe,sBAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAuC,aAAvC,IACA,GAAA,EAAA,GAAA,uCAAA;AAAA,MACF,IAAM,EAAA,wBAAA;AAAA,MACN,IAAM,EAAA;AAAA,QACJ,eAAe,cAAe,CAAA,aAAA;AAAA,QAC9B,OAAO,cAAe,CAAA,oBAAA;AAAA,OACxB;AAAA,KACF,CAAA;AACA,IAAA,MAAM,WAA2B,GAAA;AAAA,MAC/B,MAAQ,EAAA,MAAA;AAAA,MACR,OAAS,EAAA;AAAA,QACP,MAAQ,EAAA,kBAAA;AAAA,QACR,cAAgB,EAAA,kBAAA;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAK,CAAA,SAAA,CAAU,IAAI,CAAA;AAAA,KAC3B,CAAA;AAEA,IAAI,IAAA,GAAA,CAAI,aAAa,QAAU,EAAA;AAC7B,MAAY,WAAA,CAAA,KAAA,GAAQ,IAAIC,gBAAA,CAAM,KAAM,CAAA;AAAA,QAClC,EACE,EAAA,CAAA,EAAA,GAAAC,iCAAA;AAAA,UACE,cAAe,CAAA,MAAA;AAAA,UACf,cAAe,CAAA,MAAA;AAAA,cAFjB,IAGK,GAAA,EAAA,GAAA,KAAA,CAAA;AAAA,QACP,kBAAA,EAAoB,CAAC,cAAe,CAAA,aAAA;AAAA,OACrC,CAAA,CAAA;AAAA,KACH;AAEA,IAAO,OAAA,WAAA,CAAA;AAAA,GACT;AACF;;;;;;;;;"}
|
|
1
|
+
{"version":3,"file":"index.cjs.js","sources":["../src/extensions.ts","../src/auth/PinnipedHelper.ts"],"sourcesContent":["/*\n * Copyright 2023 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { createExtensionPoint } from '@backstage/backend-plugin-api';\nimport {\n AuthenticationStrategy,\n KubernetesClustersSupplier,\n KubernetesFetcher,\n KubernetesObjectsProvider,\n KubernetesServiceLocator,\n} from '@backstage/plugin-kubernetes-node';\n\n/**\n * The interface for {@link kubernetesObjectsProviderExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesObjectsProviderExtensionPoint {\n addObjectsProvider(provider: KubernetesObjectsProvider): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a objects provider.\n *\n * @public\n */\nexport const kubernetesObjectsProviderExtensionPoint =\n createExtensionPoint<KubernetesObjectsProviderExtensionPoint>({\n id: 'kubernetes.objects-provider',\n });\n\n/**\n * The interface for {@link kubernetesClusterSupplierExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesClusterSupplierExtensionPoint {\n addClusterSupplier(clusterSupplier: KubernetesClustersSupplier): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a cluster supplier.\n *\n * @public\n */\nexport const kubernetesClusterSupplierExtensionPoint =\n createExtensionPoint<KubernetesClusterSupplierExtensionPoint>({\n id: 'kubernetes.cluster-supplier',\n });\n\n/**\n * The interface for {@link kubernetesAuthStrategyExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesAuthStrategyExtensionPoint {\n addAuthStrategy(key: string, strategy: AuthenticationStrategy): void;\n}\n\n/**\n * An extension point the exposes the ability to add an Auth Strategy.\n *\n * @public\n */\nexport const kubernetesAuthStrategyExtensionPoint =\n createExtensionPoint<KubernetesAuthStrategyExtensionPoint>({\n id: 'kubernetes.auth-strategy',\n });\n\n/**\n * The interface for {@link kubernetesFetcherExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesFetcherExtensionPoint {\n addFetcher(fetcher: KubernetesFetcher): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a kubernetes fetcher.\n *\n * @public\n */\nexport const kubernetesFetcherExtensionPoint =\n createExtensionPoint<KubernetesFetcherExtensionPoint>({\n id: 'kubernetes.fetcher',\n });\n\n/**\n * The interface for {@link kubernetesServiceLocatorExtensionPoint}.\n *\n * @public\n */\nexport interface KubernetesServiceLocatorExtensionPoint {\n addServiceLocator(serviceLocator: KubernetesServiceLocator): void;\n}\n\n/**\n * An extension point the exposes the ability to configure a kubernetes service locator.\n *\n * @public\n */\nexport const kubernetesServiceLocatorExtensionPoint =\n createExtensionPoint<KubernetesServiceLocatorExtensionPoint>({\n id: 'kubernetes.service-locator',\n });\n","/*\n * Copyright 2024 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n * http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { ClusterDetails } from '@backstage/plugin-kubernetes-node';\nimport * as https from 'https';\nimport { bufferFromFileOrString } from '@kubernetes/client-node';\nimport fetch, { RequestInit } from 'node-fetch';\nimport { Logger } from 'winston';\n\n/**\n *\n * @public\n */\nexport type PinnipedClientCerts = {\n key: string;\n cert: string;\n expirationTimestamp: string;\n};\n\n/**\n *\n * @public\n */\nexport type PinnipedParameters = {\n clusterScopedIdToken: string;\n authenticator: {\n apiGroup: string;\n kind: string;\n name: string;\n };\n tokenCredentialRequest?: {\n apiGroup?: string;\n };\n};\n\n/**\n *\n * @public\n */\nexport class PinnipedHelper {\n constructor(private readonly logger: Logger) {}\n\n public async tokenCredentialRequest(\n clusterDetails: ClusterDetails,\n pinnipedParams: PinnipedParameters,\n ): Promise<PinnipedClientCerts> {\n this.logger.debug('Pinniped: Requesting client Certs to Concierge');\n return await this.exchangeClusterTokentoClientCerts(\n clusterDetails,\n pinnipedParams,\n );\n }\n\n private async exchangeClusterTokentoClientCerts(\n clusterDetails: ClusterDetails,\n pinnipedParams: PinnipedParameters,\n ): Promise<PinnipedClientCerts> {\n const url: URL = new URL(clusterDetails.url);\n const apiGroup =\n pinnipedParams.tokenCredentialRequest?.apiGroup ??\n 'login.concierge.pinniped.dev/v1alpha1';\n\n url.pathname = `/apis/${apiGroup}/tokencredentialrequests`;\n\n const requestInit: RequestInit = this.buildRequestForPinniped(\n url,\n clusterDetails,\n pinnipedParams,\n );\n\n this.logger.info(\n 'Fetching client certs for mTLS authentication on Pinniped',\n );\n let response;\n try {\n response = await fetch(url, requestInit);\n } catch (error) {\n this.logger.error('Pinniped request error', error);\n throw error;\n }\n\n const data: any = await response.json();\n\n if (data.status.credential) {\n const result = {\n key: data.status.credential.clientKeyData,\n cert: data.status.credential.clientCertificateData,\n expirationTimestamp: data.status.credential.expirationTimestamp,\n };\n return Promise.resolve(result);\n }\n\n this.logger.error('Unable to fetch client certs,', data.status);\n return Promise.reject(data.status.message);\n }\n\n private buildRequestForPinniped(\n url: URL,\n clusterDetails: ClusterDetails,\n pinnipedParams: PinnipedParameters,\n ): RequestInit {\n const body = {\n apiVersion:\n pinnipedParams.tokenCredentialRequest?.apiGroup ??\n 'login.concierge.pinniped.dev/v1alpha1',\n kind: 'TokenCredentialRequest',\n spec: {\n authenticator: pinnipedParams.authenticator,\n token: pinnipedParams.clusterScopedIdToken,\n },\n };\n const requestInit: RequestInit = {\n method: 'POST',\n headers: {\n Accept: 'application/json',\n 'Content-Type': 'application/json',\n },\n body: JSON.stringify(body),\n };\n\n if (url.protocol === 'https:') {\n requestInit.agent = new https.Agent({\n ca:\n bufferFromFileOrString(\n clusterDetails.caFile,\n clusterDetails.caData,\n ) ?? undefined,\n rejectUnauthorized: !clusterDetails.skipTLSVerify,\n });\n }\n\n return requestInit;\n }\n}\n"],"names":["createExtensionPoint","fetch","https","bufferFromFileOrString"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCO,MAAM,0CACXA,qCAA8D,CAAA;AAAA,EAC5D,EAAI,EAAA,6BAAA;AACN,CAAC,EAAA;AAgBI,MAAM,0CACXA,qCAA8D,CAAA;AAAA,EAC5D,EAAI,EAAA,6BAAA;AACN,CAAC,EAAA;AAgBI,MAAM,uCACXA,qCAA2D,CAAA;AAAA,EACzD,EAAI,EAAA,0BAAA;AACN,CAAC,EAAA;AAgBI,MAAM,kCACXA,qCAAsD,CAAA;AAAA,EACpD,EAAI,EAAA,oBAAA;AACN,CAAC,EAAA;AAgBI,MAAM,yCACXA,qCAA6D,CAAA;AAAA,EAC3D,EAAI,EAAA,4BAAA;AACN,CAAC;;ACjEI,MAAM,cAAe,CAAA;AAAA,EAC1B,YAA6B,MAAgB,EAAA;AAAhB,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA,CAAA;AAAA,GAAiB;AAAA,EAE9C,MAAa,sBACX,CAAA,cAAA,EACA,cAC8B,EAAA;AAC9B,IAAK,IAAA,CAAA,MAAA,CAAO,MAAM,gDAAgD,CAAA,CAAA;AAClE,IAAA,OAAO,MAAM,IAAK,CAAA,iCAAA;AAAA,MAChB,cAAA;AAAA,MACA,cAAA;AAAA,KACF,CAAA;AAAA,GACF;AAAA,EAEA,MAAc,iCACZ,CAAA,cAAA,EACA,cAC8B,EAAA;AArElC,IAAA,IAAA,EAAA,EAAA,EAAA,CAAA;AAsEI,IAAA,MAAM,GAAW,GAAA,IAAI,GAAI,CAAA,cAAA,CAAe,GAAG,CAAA,CAAA;AAC3C,IAAA,MAAM,QACJ,GAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,cAAA,CAAe,sBAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAuC,aAAvC,IACA,GAAA,EAAA,GAAA,uCAAA,CAAA;AAEF,IAAI,GAAA,CAAA,QAAA,GAAW,SAAS,QAAQ,CAAA,wBAAA,CAAA,CAAA;AAEhC,IAAA,MAAM,cAA2B,IAAK,CAAA,uBAAA;AAAA,MACpC,GAAA;AAAA,MACA,cAAA;AAAA,MACA,cAAA;AAAA,KACF,CAAA;AAEA,IAAA,IAAA,CAAK,MAAO,CAAA,IAAA;AAAA,MACV,2DAAA;AAAA,KACF,CAAA;AACA,IAAI,IAAA,QAAA,CAAA;AACJ,IAAI,IAAA;AACF,MAAW,QAAA,GAAA,MAAMC,sBAAM,CAAA,GAAA,EAAK,WAAW,CAAA,CAAA;AAAA,aAChC,KAAO,EAAA;AACd,MAAK,IAAA,CAAA,MAAA,CAAO,KAAM,CAAA,wBAAA,EAA0B,KAAK,CAAA,CAAA;AACjD,MAAM,MAAA,KAAA,CAAA;AAAA,KACR;AAEA,IAAM,MAAA,IAAA,GAAY,MAAM,QAAA,CAAS,IAAK,EAAA,CAAA;AAEtC,IAAI,IAAA,IAAA,CAAK,OAAO,UAAY,EAAA;AAC1B,MAAA,MAAM,MAAS,GAAA;AAAA,QACb,GAAA,EAAK,IAAK,CAAA,MAAA,CAAO,UAAW,CAAA,aAAA;AAAA,QAC5B,IAAA,EAAM,IAAK,CAAA,MAAA,CAAO,UAAW,CAAA,qBAAA;AAAA,QAC7B,mBAAA,EAAqB,IAAK,CAAA,MAAA,CAAO,UAAW,CAAA,mBAAA;AAAA,OAC9C,CAAA;AACA,MAAO,OAAA,OAAA,CAAQ,QAAQ,MAAM,CAAA,CAAA;AAAA,KAC/B;AAEA,IAAA,IAAA,CAAK,MAAO,CAAA,KAAA,CAAM,+BAAiC,EAAA,IAAA,CAAK,MAAM,CAAA,CAAA;AAC9D,IAAA,OAAO,OAAQ,CAAA,MAAA,CAAO,IAAK,CAAA,MAAA,CAAO,OAAO,CAAA,CAAA;AAAA,GAC3C;AAAA,EAEQ,uBAAA,CACN,GACA,EAAA,cAAA,EACA,cACa,EAAA;AAjHjB,IAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA,CAAA;AAkHI,IAAA,MAAM,IAAO,GAAA;AAAA,MACX,UACE,EAAA,CAAA,EAAA,GAAA,CAAA,EAAA,GAAA,cAAA,CAAe,sBAAf,KAAA,IAAA,GAAA,KAAA,CAAA,GAAA,EAAA,CAAuC,aAAvC,IACA,GAAA,EAAA,GAAA,uCAAA;AAAA,MACF,IAAM,EAAA,wBAAA;AAAA,MACN,IAAM,EAAA;AAAA,QACJ,eAAe,cAAe,CAAA,aAAA;AAAA,QAC9B,OAAO,cAAe,CAAA,oBAAA;AAAA,OACxB;AAAA,KACF,CAAA;AACA,IAAA,MAAM,WAA2B,GAAA;AAAA,MAC/B,MAAQ,EAAA,MAAA;AAAA,MACR,OAAS,EAAA;AAAA,QACP,MAAQ,EAAA,kBAAA;AAAA,QACR,cAAgB,EAAA,kBAAA;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAK,CAAA,SAAA,CAAU,IAAI,CAAA;AAAA,KAC3B,CAAA;AAEA,IAAI,IAAA,GAAA,CAAI,aAAa,QAAU,EAAA;AAC7B,MAAY,WAAA,CAAA,KAAA,GAAQ,IAAIC,gBAAA,CAAM,KAAM,CAAA;AAAA,QAClC,EACE,EAAA,CAAA,EAAA,GAAAC,iCAAA;AAAA,UACE,cAAe,CAAA,MAAA;AAAA,UACf,cAAe,CAAA,MAAA;AAAA,cAFjB,IAGK,GAAA,EAAA,GAAA,KAAA,CAAA;AAAA,QACP,kBAAA,EAAoB,CAAC,cAAe,CAAA,aAAA;AAAA,OACrC,CAAA,CAAA;AAAA,KACH;AAEA,IAAO,OAAA,WAAA,CAAA;AAAA,GACT;AACF;;;;;;;;;"}
|
package/dist/index.d.ts
CHANGED
|
@@ -309,4 +309,4 @@ declare class PinnipedHelper {
|
|
|
309
309
|
private buildRequestForPinniped;
|
|
310
310
|
}
|
|
311
311
|
|
|
312
|
-
export { AuthMetadata, AuthenticationStrategy, ClusterDetails, CustomResource, CustomResourcesByEntity, FetchResponseWrapper, KubernetesAuthStrategyExtensionPoint, KubernetesClusterSupplierExtensionPoint, KubernetesClustersSupplier, KubernetesCredential, KubernetesFetcher, KubernetesFetcherExtensionPoint, KubernetesObjectTypes, KubernetesObjectsByEntity, KubernetesObjectsProvider, KubernetesObjectsProviderExtensionPoint, KubernetesServiceLocator, KubernetesServiceLocatorExtensionPoint, ObjectFetchParams, ObjectToFetch, PinnipedClientCerts, PinnipedHelper, PinnipedParameters, ServiceLocatorRequestContext, kubernetesAuthStrategyExtensionPoint, kubernetesClusterSupplierExtensionPoint, kubernetesFetcherExtensionPoint, kubernetesObjectsProviderExtensionPoint, kubernetesServiceLocatorExtensionPoint };
|
|
312
|
+
export { type AuthMetadata, type AuthenticationStrategy, type ClusterDetails, type CustomResource, type CustomResourcesByEntity, type FetchResponseWrapper, type KubernetesAuthStrategyExtensionPoint, type KubernetesClusterSupplierExtensionPoint, type KubernetesClustersSupplier, type KubernetesCredential, type KubernetesFetcher, type KubernetesFetcherExtensionPoint, type KubernetesObjectTypes, type KubernetesObjectsByEntity, type KubernetesObjectsProvider, type KubernetesObjectsProviderExtensionPoint, type KubernetesServiceLocator, type KubernetesServiceLocatorExtensionPoint, type ObjectFetchParams, type ObjectToFetch, type PinnipedClientCerts, PinnipedHelper, type PinnipedParameters, type ServiceLocatorRequestContext, kubernetesAuthStrategyExtensionPoint, kubernetesClusterSupplierExtensionPoint, kubernetesFetcherExtensionPoint, kubernetesObjectsProviderExtensionPoint, kubernetesServiceLocatorExtensionPoint };
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@backstage/plugin-kubernetes-node",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.9",
|
|
4
4
|
"description": "Node.js library for the kubernetes plugin",
|
|
5
5
|
"backstage": {
|
|
6
6
|
"role": "node-library"
|
|
@@ -30,20 +30,20 @@
|
|
|
30
30
|
"test": "backstage-cli package test"
|
|
31
31
|
},
|
|
32
32
|
"dependencies": {
|
|
33
|
-
"@backstage/backend-plugin-api": "^0.6.
|
|
34
|
-
"@backstage/catalog-model": "^1.4.5
|
|
35
|
-
"@backstage/plugin-kubernetes-common": "^0.7.5
|
|
33
|
+
"@backstage/backend-plugin-api": "^0.6.15",
|
|
34
|
+
"@backstage/catalog-model": "^1.4.5",
|
|
35
|
+
"@backstage/plugin-kubernetes-common": "^0.7.5",
|
|
36
36
|
"@backstage/types": "^1.1.1",
|
|
37
37
|
"@kubernetes/client-node": "^0.20.0",
|
|
38
38
|
"node-fetch": "^2.6.7",
|
|
39
39
|
"winston": "^3.2.1"
|
|
40
40
|
},
|
|
41
41
|
"devDependencies": {
|
|
42
|
-
"@backstage/backend-app-api": "^0.6.
|
|
43
|
-
"@backstage/backend-common": "^0.21.
|
|
44
|
-
"@backstage/backend-test-utils": "^0.3.
|
|
45
|
-
"@backstage/cli": "^0.
|
|
46
|
-
"@backstage/plugin-kubernetes-backend": "^0.16.
|
|
42
|
+
"@backstage/backend-app-api": "^0.6.1",
|
|
43
|
+
"@backstage/backend-common": "^0.21.5",
|
|
44
|
+
"@backstage/backend-test-utils": "^0.3.5",
|
|
45
|
+
"@backstage/cli": "^0.26.1",
|
|
46
|
+
"@backstage/plugin-kubernetes-backend": "^0.16.2",
|
|
47
47
|
"msw": "^1.3.1",
|
|
48
48
|
"supertest": "^6.1.3"
|
|
49
49
|
}
|