@skyhook-io/k8s-ui 1.0.0

package/src/components/resources/resource-utils-prometheus.ts

@@ -0,0 +1,159 @@
+// Prometheus Operator CRD utility functions
+
+import type { StatusBadge } from './resource-utils'
+import { healthColors } from './resource-utils'
+
+// ============================================================================
+// SHARED HELPERS
+// ============================================================================
+
+function getConditionStatus(resource: any): StatusBadge {
+  const conditions = resource.status?.conditions || []
+
+  const reconciledCond = conditions.find((c: any) => c.type === 'Reconciled')
+  if (reconciledCond?.status === 'True') {
+    return { text: 'Reconciled', color: healthColors.healthy, level: 'healthy' }
+  }
+  if (reconciledCond?.status === 'False') {
+    return { text: reconciledCond.reason || 'Not Reconciled', color: healthColors.unhealthy, level: 'unhealthy' }
+  }
+
+  const availableCond = conditions.find((c: any) => c.type === 'Available')
+  if (availableCond?.status === 'True') {
+    return { text: 'Available', color: healthColors.healthy, level: 'healthy' }
+  }
+  if (availableCond?.status === 'False') {
+    return { text: availableCond.reason || 'Unavailable', color: healthColors.unhealthy, level: 'unhealthy' }
+  }
+
+  // Fallback: if resource exists but has no conditions, it's likely active
+  if (resource.spec) {
+    return { text: 'Active', color: healthColors.healthy, level: 'healthy' }
+  }
+
+  return { text: 'Unknown', color: healthColors.unknown, level: 'unknown' }
+}
+
+function formatMatchLabels(selector: any): string {
+  const matchLabels = selector?.matchLabels
+  if (!matchLabels || Object.keys(matchLabels).length === 0) return '-'
+  return Object.entries(matchLabels).map(([k, v]) => `${k}=${v}`).join(', ')
+}
+
+// ============================================================================
+// SERVICEMONITOR UTILITIES
+// ============================================================================
+
+export function getServiceMonitorStatus(resource: any): StatusBadge {
+  return getConditionStatus(resource)
+}
+
+export function getServiceMonitorEndpointCount(resource: any): number {
+  return (resource.spec?.endpoints || []).length
+}
+
+export function getServiceMonitorJobLabel(resource: any): string {
+  return resource.spec?.jobLabel || '-'
+}
+
+export function getServiceMonitorSelector(resource: any): string {
+  return formatMatchLabels(resource.spec?.selector)
+}
+
+export function getServiceMonitorEndpoints(resource: any): Array<{
+  port?: string
+  path?: string
+  interval?: string
+  scheme?: string
+}> {
+  return (resource.spec?.endpoints || []).map((ep: any) => ({
+    port: ep.port || ep.targetPort,
+    path: ep.path || '/metrics',
+    interval: ep.interval,
+    scheme: ep.scheme,
+  }))
+}
+
+export function getServiceMonitorNamespaceSelector(resource: any): string {
+  const ns = resource.spec?.namespaceSelector
+  if (!ns) return 'Same namespace'
+  if (ns.any) return 'All namespaces'
+  if (ns.matchNames?.length) return ns.matchNames.join(', ')
+  return 'Same namespace'
+}
+
+// ============================================================================
+// PROMETHEUSRULE UTILITIES
+// ============================================================================
+
+export function getPrometheusRuleStatus(resource: any): StatusBadge {
+  return getConditionStatus(resource)
+}
+
+export function getPrometheusRuleGroupCount(resource: any): number {
+  return (resource.spec?.groups || []).length
+}
+
+export function getPrometheusRuleTotalRules(resource: any): number {
+  const groups = resource.spec?.groups || []
+  return groups.reduce((sum: number, g: any) => sum + (g.rules?.length || 0), 0)
+}
+
+export function getPrometheusRuleGroups(resource: any): Array<{
+  name: string
+  interval?: string
+  ruleCount: number
+  alertCount: number
+  recordCount: number
+}> {
+  return (resource.spec?.groups || []).map((g: any) => {
+    const rules = g.rules || []
+    const alertCount = rules.filter((r: any) => r.alert).length
+    const recordCount = rules.filter((r: any) => r.record).length
+    return {
+      name: g.name,
+      interval: g.interval,
+      ruleCount: rules.length,
+      alertCount,
+      recordCount,
+    }
+  })
+}
+
+// ============================================================================
+// PODMONITOR UTILITIES
+// ============================================================================
+
+export function getPodMonitorStatus(resource: any): StatusBadge {
+  return getConditionStatus(resource)
+}
+
+export function getPodMonitorEndpointCount(resource: any): number {
+  return (resource.spec?.podMetricsEndpoints || []).length
+}
+
+export function getPodMonitorSelector(resource: any): string {
+  return formatMatchLabels(resource.spec?.selector)
+}
+
+export function getPodMonitorEndpoints(resource: any): Array<{
+  port?: string
+  path?: string
+  interval?: string
+  scheme?: string
+}> {
+  return (resource.spec?.podMetricsEndpoints || []).map((ep: any) => ({
+    port: ep.port || ep.targetPort,
+    path: ep.path || '/metrics',
+    interval: ep.interval,
+    scheme: ep.scheme,
+  }))
+}
+
+export function getPodMonitorNamespaceSelector(resource: any): string {
+  const ns = resource.spec?.namespaceSelector
+  if (!ns) return 'Same namespace'
+  if (ns.any) return 'All namespaces'
+  if (ns.matchNames?.length) return ns.matchNames.join(', ')
+  return 'Same namespace'
+}

package/src/components/resources/resource-utils-traefik.ts

@@ -0,0 +1,180 @@
+// Traefik CRD utility functions for resource list cells and detail renderers
+
+// ============================================================================
+// INGRESSROUTE UTILITIES
+// ============================================================================
+
+export function getIngressRouteEntryPoints(resource: any): string {
+  const eps = resource.spec?.entryPoints || []
+  if (eps.length === 0) return '-'
+  if (eps.length <= 3) return eps.join(', ')
+  return `${eps.slice(0, 2).join(', ')} +${eps.length - 2} more`
+}
+
+export function getIngressRouteHosts(resource: any): string {
+  const routes = resource.spec?.routes || []
+  const hosts = new Set<string>()
+  for (const route of routes) {
+    const match = route.match || ''
+    // Extract Host(`...`) patterns from Traefik match expressions
+    const hostMatches = match.matchAll(/Host\(`([^`]+)`\)/gi)
+    for (const m of hostMatches) {
+      m[1].split(',').forEach((h: string) => {
+        const trimmed = h.trim()
+        if (trimmed) hosts.add(trimmed)
+      })
+    }
+    // Also extract HostSNI(`...`) for TCP/TLS
+    const sniMatches = match.matchAll(/HostSNI\(`([^`]+)`\)/gi)
+    for (const m of sniMatches) {
+      m[1].split(',').forEach((h: string) => {
+        const trimmed = h.trim()
+        if (trimmed && trimmed !== '*') hosts.add(trimmed)
+      })
+    }
+  }
+  const arr = Array.from(hosts)
+  if (arr.length === 0) return '*'
+  if (arr.length <= 2) return arr.join(', ')
+  return `${arr[0]} +${arr.length - 1} more`
+}
+
+export function getIngressRouteRoutesSummary(resource: any): string {
+  const routes = resource.spec?.routes || []
+  if (routes.length === 0) return 'No routes'
+
+  const summaries: string[] = []
+  for (const route of routes) {
+    const services = route.services || []
+    const svcNames = services.map((s: any) => {
+      const kind = s.kind && s.kind !== 'Service' ? `${s.kind}/` : ''
+      const port = s.port ? `:${s.port}` : ''
+      return `${kind}${s.name}${port}`
+    })
+    if (svcNames.length > 0) {
+      summaries.push(svcNames.join(', '))
+    }
+  }
+
+  if (summaries.length === 0) return `${routes.length} route(s)`
+  if (summaries.length === 1) return summaries[0]
+  return `${summaries[0]}; +${summaries.length - 1} more`
+}
+
+export function hasIngressRouteTLS(resource: any): boolean {
+  return !!resource.spec?.tls
+}
+
+export function getIngressRouteMiddlewareCount(resource: any): number {
+  const routes = resource.spec?.routes || []
+  const seen = new Set<string>()
+  for (const route of routes) {
+    for (const mw of route.middlewares || []) {
+      const ns = mw.namespace || ''
+      seen.add(`${ns}/${mw.name}`)
+    }
+  }
+  return seen.size
+}
+
+export function getIngressRouteServiceCount(resource: any): number {
+  const routes = resource.spec?.routes || []
+  const seen = new Set<string>()
+  for (const route of routes) {
+    for (const svc of route.services || []) {
+      const kind = svc.kind || 'Service'
+      const ns = svc.namespace || ''
+      seen.add(`${kind}/${ns}/${svc.name}`)
+    }
+  }
+  return seen.size
+}
+
+// ============================================================================
+// MIDDLEWARE UTILITIES
+// ============================================================================
+
+export function getMiddlewareType(resource: any): string {
+  const spec = resource.spec || {}
+  // Each middleware has exactly one spec key indicating its type
+  const types = [
+    'addPrefix', 'basicAuth', 'buffering', 'chain', 'circuitBreaker',
+    'compress', 'contentType', 'digestAuth', 'errors', 'forwardAuth',
+    'grpcWeb', 'headers', 'inFlightReq', 'ipAllowList', 'ipWhiteList',
+    'passTLSClientCert', 'plugin', 'rateLimit', 'redirectRegex',
+    'redirectScheme', 'replacePath', 'replacePathRegex', 'retry',
+    'stripPrefix', 'stripPrefixRegex',
+  ]
+  for (const t of types) {
+    if (spec[t]) return t
+  }
+  return 'unknown'
+}
+
+export function getMiddlewareChainMembers(resource: any): string[] {
+  return (resource.spec?.chain?.middlewares || []).map((m: any) => m.name)
+}
+
+// ============================================================================
+// TRAEFIKSERVICE UTILITIES
+// ============================================================================
+
+export function getTraefikServiceType(resource: any): string {
+  const spec = resource.spec || {}
+  if (spec.weighted) return 'Weighted Round Robin'
+  if (spec.mirroring) return 'Mirroring'
+  if (spec.highestRandomWeight) return 'Highest Random Weight'
+  return 'Unknown'
+}
+
+export function getTraefikServiceTargets(resource: any): string {
+  const spec = resource.spec || {}
+  if (spec.weighted) {
+    const svcs = spec.weighted.services || []
+    if (svcs.length === 0) return '-'
+    return svcs.map((s: any) => {
+      const w = s.weight !== undefined ? ` (${s.weight}%)` : ''
+      return `${s.name}${w}`
+    }).join(', ')
+  }
+  if (spec.mirroring) {
+    const primary = spec.mirroring.name || '-'
+    const mirrors = spec.mirroring.mirrors || []
+    if (mirrors.length === 0) return primary
+    return `${primary} + ${mirrors.length} mirror(s)`
+  }
+  if (spec.highestRandomWeight) {
+    const svcs = spec.highestRandomWeight.services || []
+    if (svcs.length === 0) return '-'
+    return svcs.map((s: any) => s.name).join(', ')
+  }
+  return '-'
+}
+
+// ============================================================================
+// SERVERSTRANSPORT UTILITIES
+// ============================================================================
+
+export function getServersTransportInsecure(resource: any): boolean {
+  return !!resource.spec?.insecureSkipVerify
+}
+
+export function getServersTransportServerName(resource: any): string | null {
+  return resource.spec?.serverName || null
+}
+
+// ============================================================================
+// TLSOPTION UTILITIES
+// ============================================================================
+
+export function getTLSOptionMinVersion(resource: any): string | null {
+  return resource.spec?.minVersion || null
+}
+
+export function getTLSOptionMaxVersion(resource: any): string | null {
+  return resource.spec?.maxVersion || null
+}
+
+export function getTLSOptionCipherSuites(resource: any): string[] {
+  return resource.spec?.cipherSuites || []
+}

package/src/components/resources/resource-utils-trivy.ts

@@ -0,0 +1,146 @@
+// Trivy Operator CRD utility functions — extracted from resource-utils.ts
+
+import type { StatusBadge } from './resource-utils'
+import { healthColors } from './resource-utils'
+
+// ============================================================================
+// TRIVY OPERATOR — VULNERABILITY REPORT UTILITIES
+// ============================================================================
+
+export interface VulnerabilitySummary {
+  critical: number
+  high: number
+  medium: number
+  low: number
+  unknown: number
+}
+
+export function getVulnerabilityReportSummary(report: any): VulnerabilitySummary {
+  const summary = report.report?.summary || {}
+  return {
+    critical: summary.criticalCount || 0,
+    high: summary.highCount || 0,
+    medium: summary.mediumCount || 0,
+    low: summary.lowCount || 0,
+    unknown: summary.unknownCount || 0,
+  }
+}
+
+export function getVulnerabilityReportStatus(report: any): StatusBadge {
+  const summary = getVulnerabilityReportSummary(report)
+  if (summary.critical > 0) {
+    return { text: `${summary.critical} Critical`, color: healthColors.unhealthy, level: 'unhealthy' }
+  }
+  if (summary.high > 0) {
+    return { text: `${summary.high} High`, color: healthColors.degraded, level: 'degraded' }
+  }
+  if (summary.medium > 0) {
+    return { text: `${summary.medium} Medium`, color: healthColors.degraded, level: 'degraded' }
+  }
+  if (summary.low > 0 || summary.unknown > 0) {
+    return { text: 'Low', color: healthColors.neutral, level: 'neutral' }
+  }
+  return { text: 'Clean', color: healthColors.healthy, level: 'healthy' }
+}
+
+export function getVulnerabilityReportImage(report: any): string {
+  const artifact = report.report?.artifact || {}
+  const registry = report.report?.registry?.server || ''
+  if (!artifact.repository) return '-'
+  const repo = registry ? `${registry}/${artifact.repository}` : artifact.repository
+  return artifact.tag ? `${repo}:${artifact.tag}` : repo
+}
+
+export function getVulnerabilityReportContainer(report: any): string {
+  return report.metadata?.labels?.['trivy-operator.container.name'] || '-'
+}
+
+// ============================================================================
+// TRIVY OPERATOR — CONFIG AUDIT REPORT UTILITIES
+// ============================================================================
+
+export interface ConfigAuditSummary {
+  critical: number
+  high: number
+  medium: number
+  low: number
+}
+
+export function getConfigAuditReportSummary(report: any): ConfigAuditSummary {
+  const summary = report.report?.summary || {}
+  return {
+    critical: summary.criticalCount || 0,
+    high: summary.highCount || 0,
+    medium: summary.mediumCount || 0,
+    low: summary.lowCount || 0,
+  }
+}
+
+export function getConfigAuditReportStatus(report: any): StatusBadge {
+  const summary = getConfigAuditReportSummary(report)
+  if (summary.critical > 0) {
+    return { text: `${summary.critical} Critical`, color: healthColors.unhealthy, level: 'unhealthy' }
+  }
+  if (summary.high > 0) {
+    return { text: `${summary.high} High`, color: healthColors.degraded, level: 'degraded' }
+  }
+  if (summary.medium > 0) {
+    return { text: `${summary.medium} Medium`, color: healthColors.degraded, level: 'degraded' }
+  }
+  if (summary.low > 0) {
+    return { text: 'Low', color: healthColors.neutral, level: 'neutral' }
+  }
+  return { text: 'Pass', color: healthColors.healthy, level: 'healthy' }
+}
+
+// ============================================================================
+// TRIVY OPERATOR — EXPOSED SECRET REPORT UTILITIES
+// ============================================================================
+
+// ExposedSecretReport has the same summary/label structure as VulnerabilityReport
+export const getExposedSecretReportSummary = getVulnerabilityReportSummary
+export const getExposedSecretReportContainer = getVulnerabilityReportContainer
+export const getExposedSecretReportImage = getVulnerabilityReportImage
+
+export const getExposedSecretReportStatus = getVulnerabilityReportStatus
+
+// ============================================================================
+// TRIVY OPERATOR — RBAC ASSESSMENT REPORT UTILITIES
+// ============================================================================
+
+// RbacAssessmentReport and ClusterRbacAssessmentReport have the same
+// report.summary + report.checks[] structure as ConfigAuditReport
+export const getRbacAssessmentReportSummary = getConfigAuditReportSummary
+export const getRbacAssessmentReportStatus = getConfigAuditReportStatus
+
+// ============================================================================
+// TRIVY OPERATOR — CLUSTER COMPLIANCE REPORT UTILITIES
+// ============================================================================
+
+export function getClusterComplianceReportStatus(report: any): StatusBadge {
+  const summary = report.status?.summary || {}
+  const fail = summary.failCount || 0
+  const pass = summary.passCount || 0
+  if (fail > 0) {
+    return { text: `${fail} Fail`, color: healthColors.unhealthy, level: 'unhealthy' }
+  }
+  if (pass > 0) {
+    return { text: 'Pass', color: healthColors.healthy, level: 'healthy' }
+  }
+  return { text: 'Pending', color: healthColors.neutral, level: 'neutral' }
+}
+
+// ============================================================================
+// TRIVY OPERATOR — SBOM REPORT UTILITIES
+// ============================================================================
+
+export function getSbomReportStatus(report: any): StatusBadge {
+  const summary = report.report?.summary
+  if (summary == null) {
+    return { text: 'Pending', color: healthColors.neutral, level: 'neutral' }
+  }
+  const count = summary.componentsCount ?? 0
+  return { text: `${count} components`, color: healthColors.neutral, level: 'neutral' }
+}
+
+export const getSbomReportContainer = getVulnerabilityReportContainer