@backstage/plugin-kubernetes 0.9.0-next.1 → 0.9.0-next.2

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @backstage/plugin-kubernetes
 
+## 0.9.0-next.2
+
+### Patch Changes
+
+- c7bad1005ba: The Kubernetes plugin now requests AKS access tokens from Azure when retrieving
+  objects from clusters configured with `authProvider: aks` and sets `auth.aks` in
+  its request bodies appropriately.
+- Updated dependencies
+  - @backstage/theme@0.3.0-next.0
+  - @backstage/core-components@0.13.1-next.1
+  - @backstage/plugin-kubernetes-common@0.6.3-next.0
+  - @backstage/plugin-catalog-react@1.6.0-next.2
+  - @backstage/config@1.0.7
+  - @backstage/core-plugin-api@1.5.1
+
 ## 0.9.0-next.1
 
 ### Minor Changes

package/dist/index.d.ts

@@ -75,6 +75,7 @@ interface KubernetesAuthProvidersApi {
 declare class KubernetesAuthProviders implements KubernetesAuthProvidersApi {
     private readonly kubernetesAuthProviderMap;
     constructor(options: {
+        microsoftAuthApi: OAuthApi;
         googleAuthApi: OAuthApi;
         oidcProviders?: {
             [key: string]: OpenIdConnectApi;

package/dist/index.esm.js

@@ -187,6 +187,25 @@ class OidcKubernetesAuthProvider {
   }
 }
 
+class AksKubernetesAuthProvider {
+  constructor(microsoftAuthApi) {
+    this.microsoftAuthApi = microsoftAuthApi;
+  }
+  async decorateRequestBodyForAuth(requestBody) {
+    return {
+      ...requestBody,
+      auth: { ...requestBody.auth, aks: (await this.getCredentials()).token }
+    };
+  }
+  async getCredentials() {
+    return {
+      token: await this.microsoftAuthApi.getAccessToken(
+        "6dae42f8-4368-4678-94ff-3960e28e3630/user.read"
+      )
+    };
+  }
+}
+
 class KubernetesAuthProviders {
   constructor(options) {
     this.kubernetesAuthProviderMap = /* @__PURE__ */ new Map();
@@ -214,6 +233,10 @@ class KubernetesAuthProviders {
       "localKubectlProxy",
       new ServerSideKubernetesAuthProvider()
     );
+    this.kubernetesAuthProviderMap.set(
+      "aks",
+      new AksKubernetesAuthProvider(options.microsoftAuthApi)
+    );
     if (options.oidcProviders) {
       Object.keys(options.oidcProviders).forEach((provider) => {
         this.kubernetesAuthProviderMap.set(
@@ -344,7 +367,11 @@ const kubernetesPlugin = createPlugin({
           okta: oktaAuthApi,
           onelogin: oneloginAuthApi
         };
-        return new KubernetesAuthProviders({ googleAuthApi, oidcProviders });
+        return new KubernetesAuthProviders({
+          microsoftAuthApi,
+          googleAuthApi,
+          oidcProviders
+        });
       }
     })
   ],