@backstage/plugin-kubernetes-react 0.1.0-next.0 → 0.1.0-next.1

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @backstage/plugin-kubernetes-react
 
+## 0.1.0-next.1
+
+### Patch Changes
+
+- 95518765ee: Add Kubernetes cluster plugin. Viewing Kubernetes clusters as an Admin from Backstage
+- 5dac12e435: The kubernetes APIs invokes Authentication Strategies when Backstage-Kubernetes-Authorization-X-X headers are provided, this enable the possibility to invoke strategies that executes additional steps to get a kubernetes token like on pinniped or custom strategies
+- Updated dependencies
+  - @backstage/core-components@0.13.6-next.2
+  - @backstage/core-plugin-api@1.7.0-next.1
+  - @backstage/catalog-model@1.4.3-next.0
+  - @backstage/errors@1.2.3-next.0
+  - @backstage/plugin-kubernetes-common@0.7.0-next.1
+  - @backstage/types@1.1.1
+
 ## 0.1.0-next.0
 
 ### Minor Changes

package/dist/index.d.ts

@@ -105,8 +105,14 @@ interface KubernetesApi {
     getClusters(): Promise<{
         name: string;
         authProvider: string;
-        oidcTokenProvider?: string | undefined;
+        oidcTokenProvider?: string;
     }[]>;
+    getCluster(clusterName: string): Promise<{
+        name: string;
+        authProvider: string;
+        oidcTokenProvider?: string;
+        dashboardUrl?: string;
+    } | undefined>;
     getWorkloadsByEntity(request: WorkloadsByEntityRequest): Promise<ObjectsByEntityResponse>;
     getCustomObjectsByEntity(request: CustomObjectsByEntityRequest): Promise<ObjectsByEntityResponse>;
     proxy(options: {
@@ -219,7 +225,11 @@ declare class KubernetesBackendClient implements KubernetesApi {
     });
     private handleResponse;
     private postRequired;
-    private getCluster;
+    getCluster(clusterName: string): Promise<{
+        name: string;
+        authProvider: string;
+        oidcTokenProvider?: string;
+    }>;
     private getCredentials;
     getObjectsByEntity(requestBody: KubernetesRequestBody): Promise<ObjectsByEntityResponse>;
     getWorkloadsByEntity(request: WorkloadsByEntityRequest): Promise<ObjectsByEntityResponse>;
@@ -233,6 +243,8 @@ declare class KubernetesBackendClient implements KubernetesApi {
         path: string;
         init?: RequestInit;
     }): Promise<Response>;
+    private static getKubernetesHeaders;
+    private static getKubernetesAuthHeaderByAuthProvider;
 }
 
 /**

package/dist/index.esm.js

@@ -453,22 +453,44 @@ class KubernetesBackendClient {
     return (await this.handleResponse(response)).items;
   }
   async proxy(options) {
-    var _a;
-    const { authProvider } = await this.getCluster(options.clusterName);
-    const { token: k8sToken } = await this.getCredentials(authProvider);
+    const { authProvider, oidcTokenProvider } = await this.getCluster(
+      options.clusterName
+    );
+    const kubernetesCredentials = await this.getCredentials(authProvider);
     const url = `${await this.discoveryApi.getBaseUrl("kubernetes")}/proxy${options.path}`;
     const identityResponse = await this.identityApi.getCredentials();
-    const headers = {
+    const headers = KubernetesBackendClient.getKubernetesHeaders(
+      options,
+      kubernetesCredentials == null ? void 0 : kubernetesCredentials.token,
+      identityResponse,
+      authProvider,
+      oidcTokenProvider
+    );
+    return await fetch(url, { ...options.init, headers });
+  }
+  static getKubernetesHeaders(options, k8sToken, identityResponse, authProvider, oidcTokenProvider) {
+    var _a;
+    const kubernetesAuthHeader = KubernetesBackendClient.getKubernetesAuthHeaderByAuthProvider(
+      authProvider,
+      oidcTokenProvider
+    );
+    return {
       ...(_a = options.init) == null ? void 0 : _a.headers,
       [`Backstage-Kubernetes-Cluster`]: options.clusterName,
       ...k8sToken && {
-        [`Backstage-Kubernetes-Authorization`]: `Bearer ${k8sToken}`
+        [kubernetesAuthHeader]: k8sToken
       },
       ...identityResponse.token && {
         Authorization: `Bearer ${identityResponse.token}`
       }
     };
-    return await fetch(url, { ...options.init, headers });
+  }
+  static getKubernetesAuthHeaderByAuthProvider(authProvider, oidcTokenProvider) {
+    let header = "Backstage-Kubernetes-Authorization";
+    header = header.concat("-", authProvider);
+    if (oidcTokenProvider)
+      header = header.concat("-", oidcTokenProvider);
+    return header;
   }
 }