akv-manager 0.1.0 → 0.1.1

package/README.md

@@ -56,6 +56,11 @@ AZBO_AKS_CLUSTERS_FILE=./aks-clusters.json npx akv-manager
 Each entry needs `name`, `resourceGroup`, `subscription` (name or id); `env` and
 `label` are optional. The console never bundles any cluster list — it's yours to provide.
 
+You can also **paste the list in the UI** instead of using a file: open **Clusters →
+✎ Edit cluster list**, paste the same JSON array, and Save. It's kept in your browser's
+`localStorage` and registered with the local server for the session — no file needed.
+File/env clusters and pasted clusters are merged.
+
 ## Configuration (all optional, via environment variables)
 
 | Variable | Default | Purpose |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "akv-manager",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Local web console to browse and manage Azure Key Vaults — secrets, keys, certificates, expiry — using your own az login. No credentials are stored.",
   "type": "commonjs",
   "main": "server.js",

package/public/index.html

@@ -220,7 +220,7 @@ async function boot(){
   renderSidebar();
   router();
   kickExpiryScan();   // warm the dashboard's lifecycle numbers in the background
-  loadClustersCache(); // so ⌘K can jump to clusters without visiting the section first
+  registerSessionClusters().then(loadClustersCache); // register pasted clusters, then warm ⌘K
 }
 
 async function loadSubs(){
@@ -980,32 +980,100 @@ function clErr(r){
 }
 async function loadClustersCache(){ const r=await api('/api/aks/clusters'); if(r.ok) CL.all=r.data.clusters||[]; return CL.all; }
 
+// Clusters the user pasted, kept in this browser. Registered with the local server each
+// load so the data-plane endpoints (which validate the cluster) accept them.
+function lsAks(){ try{ return localStorage.getItem('akv.aksClusters')||''; }catch{ return ''; } }
+function setLsAks(t){ try{ if(t) localStorage.setItem('akv.aksClusters',t); else localStorage.removeItem('akv.aksClusters'); }catch{} }
+async function registerSessionClusters(){
+  const txt=lsAks().trim(); if(!txt) return;
+  let arr; try{ arr=JSON.parse(txt); }catch{ return; }
+  if(!Array.isArray(arr)||!arr.length) return;
+  try{ await api('/api/aks/clusters',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({clusters:arr})}); }catch{}
+}
+
 async function viewClusters(){
   $('#route').innerHTML = `<div class="panel"><div class="empty"><span class="spin"></span> loading clusters…</div></div>`;
+  await registerSessionClusters();
   const r = await api('/api/aks/clusters');
   if(STATE.route!=='clusters') return;
   if(!r.ok){ $('#route').innerHTML = `<div class="panel">${clErr(r)}</div>`; return; }
   CL.all = r.data.clusters||[];
+  CL.configuredCount = r.data.configured;
+  const envs=[...new Set(CL.all.map(c=>c.env).filter(Boolean))].sort();
+  const envSeg = envs.length>1 ? `<div class="seg" id="clEnvSeg">
+    <button data-e="all" class="${CL.clEnv==='all'||!CL.clEnv?'active':''}">All</button>
+    ${envs.map(e=>`<button data-e="${esc(e)}" class="${CL.clEnv===e?'active':''}">${esc(e)}</button>`).join('')}</div>` : '';
+  $('#route').innerHTML = `
+    <div class="cmctl" style="margin-bottom:12px">
+      <input class="search" id="clqIn" placeholder="filter clusters by name, env or resource group…" value="${esc(CL.clq||'')}" autocomplete="off" style="min-width:280px">
+      ${envSeg}
+      <button class="btn sm" id="clEdit">＋ Add / edit clusters</button>
+      <span class="faint mono" id="clqCount" style="margin-left:auto"></span></div>
+    <div class="createp hide" id="clEditor"></div>
+    <div id="clTable"></div>`;
+  $('#clqIn').oninput=e=>{ CL.clq=e.target.value; renderClusterRows(); };
+  if($('#clEnvSeg')) $('#clEnvSeg').querySelectorAll('button').forEach(b=>b.onclick=()=>{ CL.clEnv=b.dataset.e;
+    $('#clEnvSeg').querySelectorAll('button').forEach(x=>x.classList.toggle('active',x===b)); renderClusterRows(); });
+  $('#clEdit').onclick=()=>{ const el=$('#clEditor'); el.classList.contains('hide')?openClusterEditor():el.classList.add('hide'); };
+  renderClusterRows();
+}
+function openClusterEditor(){
+  const el=$('#clEditor');
+  const stored=lsAks();
+  const seed = stored || JSON.stringify((CL.all||[]).filter(c=>c.source==='session').map(c=>({name:c.name,resourceGroup:c.resourceGroup,subscription:c.subscription,env:c.env,label:c.label})),null,2);
+  el.innerHTML = `<h4>Your cluster list · saved in this browser</h4>
+    <div class="sub" style="margin-bottom:10px">Paste a JSON array of <code>{ name, resourceGroup, subscription, env?, label? }</code>. It's stored in this browser's localStorage and registered with the local server — no file needed. Clusters from <code>AZBO_AKS_CLUSTERS(_FILE)</code> still work and are merged in.</div>
+    <div class="fld" style="align-items:flex-start"><textarea id="clJson" spellcheck="false" placeholder='[\n  { "name": "my-aks", "resourceGroup": "my-rg", "subscription": "My Sub", "env": "Dev", "label": "My cluster" }\n]' style="min-height:230px">${esc(seed)}</textarea></div>
+    <div class="actions"><button class="btn sm" onclick="saveClusterList()">Save</button>
+      <button class="btn sm ghost" onclick="document.getElementById('clEditor').classList.add('hide')">Cancel</button>
+      <button class="btn sm ghost" onclick="clearClusterList()">Clear stored</button>
+      <span class="hint" id="clJsonMsg"></span></div>`;
+  el.classList.remove('hide');
+}
+async function saveClusterList(){
+  const msg=$('#clJsonMsg'), raw=$('#clJson').value.trim();
+  let arr=[];
+  if(raw){ try{ arr=JSON.parse(raw); }catch(e){ msg.textContent='Invalid JSON: '+e.message; return; } }
+  if(!Array.isArray(arr)){ msg.textContent='Must be a JSON array'; return; }
+  for(const c of arr){ if(!c||!c.name||!c.resourceGroup||!c.subscription){ msg.textContent='Each entry needs name, resourceGroup, subscription'; return; } }
+  msg.textContent='saving…';
+  const r=await api('/api/aks/clusters',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({clusters:arr})});
+  if(!r.ok){ msg.textContent=r.error||'failed'; return; }
+  setLsAks(raw); CL.all=null; toast(`Saved ${r.data.count} cluster${r.data.count!==1?'s':''}`);
+  loadClustersCache(); viewClusters();
+}
+function clearClusterList(){
+  if(!confirm('Remove the clusters stored in this browser? (file / env clusters stay.)')) return;
+  setLsAks('');
+  api('/api/aks/clusters',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({clusters:[]})})
+    .then(()=>{ toast('Cleared stored clusters'); CL.all=null; loadClustersCache(); viewClusters(); });
+}
+function renderClusterRows(){
   if(!CL.all.length){
-    $('#route').innerHTML = `<div class="panel"><div class="empty" style="padding:42px;line-height:1.8">
-      No AKS clusters configured or visible to you.<br>
-      <span class="faint mono" style="font-size:12px">Set <b>AZBO_AKS_CLUSTERS</b> (JSON) or <b>AZBO_AKS_CLUSTERS_FILE</b> to a list of<br>
-      <code>{ name, resourceGroup, subscription, env, label }</code> and restart.</span></div></div>`;
+    $('#clqCount').textContent='';
+    $('#clTable').innerHTML=`<div class="panel"><div class="empty" style="padding:38px;line-height:1.8">No AKS clusters yet.<br>
+      <span class="faint mono" style="font-size:12px">Click <b>✎ Edit cluster list</b> to paste them, or set <b>AZBO_AKS_CLUSTERS(_FILE)</b>.</span></div></div>`;
     return;
   }
-  $('#route').innerHTML = `
-    <div class="panel"><div class="scroll"><table>
+  const q=(CL.clq||'').toLowerCase(), env=CL.clEnv||'all';
+  const list=CL.all.filter(c=>{
+    if(env!=='all' && c.env!==env) return false;
+    return !q || [c.label,c.name,c.env,c.resourceGroup,c.subscription].filter(Boolean).some(s=>String(s).toLowerCase().includes(q));
+  });
+  $('#clqCount').textContent = `${list.length}${list.length!==CL.all.length?' / '+CL.all.length:''} cluster${CL.all.length!==1?'s':''}`;
+  if(!list.length){ $('#clTable').innerHTML=`<div class="empty">No clusters match your filter.</div>`; return; }
+  $('#clTable').innerHTML = `<div class="panel"><div class="scroll"><table>
       <thead><tr><th>Cluster</th><th>Env</th><th>Version</th><th>Network</th><th>Source</th><th class="right">Actions</th></tr></thead>
-      <tbody>${CL.all.map(c=>`<tr>
+      <tbody>${list.map(c=>`<tr>
         <td class="mono"><b>${esc(c.label||c.name)}</b>${c.label&&c.label!==c.name?`<br><span class="faint" style="font-size:11px">${esc(c.name)}</span>`:''}</td>
         <td>${c.env?`<span class="tag ${envClass(c.env)}">${esc(c.env)}</span>`:'<span class="faint">—</span>'}</td>
         <td class="mono muted">${esc(c.version||'—')}</td>
         <td>${c.private?'<span class="pill policy">private · VPN</span>':c.private===false?'<span class="pill rbac">public</span>':'<span class="faint mono">?</span>'}</td>
-        <td><span class="pill">${c.configured?'configured':'discovered'}</span></td>
+        <td><span class="pill">${c.source==='session'?'pasted':c.source==='file'?'file':'discovered'}</span></td>
         <td class="right"><button class="iconbtn" onclick="openCluster('${esc(c.name)}')">Open</button></td>
       </tr>`).join('')}</tbody>
     </table></div></div>
-    <div class="tablenote">${CL.all.length} cluster${CL.all.length!==1?'s':''} · ${r.data.configured} configured locally</div>`;
+    <div class="tablenote">${CL.all.length} cluster${CL.all.length!==1?'s':''} · ${CL.configuredCount} configured locally</div>`;
 }
 function openCluster(name){ navigate('cluster/'+encodeURIComponent(name)); }
 

package/server.js

@@ -612,8 +612,19 @@ const getAksToken = () => getToken(AKS_AAD_SERVER_APP);
 const K8S_NAME = /^[a-z0-9]([a-z0-9.-]{0,251}[a-z0-9])?$/; // DNS-1123-ish (namespaces, pods, cms)
 const isK8sName = (v) => typeof v === 'string' && K8S_NAME.test(v);
 
-// Operator-supplied cluster list — NEVER baked in. JSON via AZBO_AKS_CLUSTERS, or a
-// path via AZBO_AKS_CLUSTERS_FILE. Each: { name, resourceGroup, subscription, env?, label? }.
+// Cluster list — NEVER baked in. Two sources, merged: (1) the operator's file/env
+// (AZBO_AKS_CLUSTERS / AZBO_AKS_CLUSTERS_FILE), and (2) a list the user pastes in the
+// UI, persisted in their browser's localStorage and registered with this local server
+// for the session. Each entry: { name, resourceGroup, subscription, env?, label? }.
+const RG_RE = /^[\w.()-]{1,90}$/;
+function clusterValid(c) {
+  return c && isValidName(c.name) && RG_RE.test(c.resourceGroup || '') && SUB_RE.test(c.subscription || '');
+}
+function normalizeClusters(arr, source) {
+  return (Array.isArray(arr) ? arr : []).filter((c) => c && c.name && c.resourceGroup && c.subscription)
+    .map((c) => ({ name: String(c.name), resourceGroup: String(c.resourceGroup), subscription: String(c.subscription),
+      env: c.env ? String(c.env) : '', label: c.label ? String(c.label) : String(c.name), configured: true, source }));
+}
 const AKS_CLUSTERS = (() => {
   let raw = process.env.AZBO_AKS_CLUSTERS;
   if (!raw && process.env.AZBO_AKS_CLUSTERS_FILE) {
@@ -621,13 +632,10 @@ const AKS_CLUSTERS = (() => {
     catch (e) { console.warn('  AZBO_AKS_CLUSTERS_FILE could not be read:', e.message); }
   }
   if (!raw) return [];
-  try {
-    const arr = JSON.parse(raw);
-    return (Array.isArray(arr) ? arr : []).filter((c) => c && c.name && c.resourceGroup && c.subscription)
-      .map((c) => ({ name: c.name, resourceGroup: c.resourceGroup, subscription: c.subscription,
-        env: c.env || '', label: c.label || c.name, configured: true }));
-  } catch { console.warn('  AZBO_AKS_CLUSTERS is not valid JSON — ignoring.'); return []; }
+  try { return normalizeClusters(JSON.parse(raw), 'file'); }
+  catch { console.warn('  AZBO_AKS_CLUSTERS is not valid JSON — ignoring.'); return []; }
 })();
+let SESSION_CLUSTERS = [];   // set by the client via POST /api/aks/clusters (from its localStorage)
 
 async function resolveSubId(nameOrId) {
   if (/^[0-9a-fA-F-]{36}$/.test(nameOrId)) return nameOrId;
@@ -728,7 +736,7 @@ async function aksList() {
   const discovered = await discoverClusters();
   const byKey = new Map();
   for (const c of discovered) byKey.set(c.name.toLowerCase(), c);
-  for (const c of AKS_CLUSTERS) {                 // configured entries win + carry their label/env
+  for (const c of [...AKS_CLUSTERS, ...SESSION_CLUSTERS]) {   // configured (file then session) win + carry label/env
     const prev = byKey.get(c.name.toLowerCase()) || {};
     byKey.set(c.name.toLowerCase(), { ...prev, ...c });
   }
@@ -736,7 +744,23 @@ async function aksList() {
 }
 
 app.get('/api/aks/clusters', (req, res) =>
-  send(res, aksList().then((clusters) => ({ clusters, configured: AKS_CLUSTERS.length }))));
+  send(res, aksList().then((clusters) => ({ clusters,
+    configured: AKS_CLUSTERS.length + SESSION_CLUSTERS.length, file: AKS_CLUSTERS.length, session: SESSION_CLUSTERS.length }))));
+
+// Register the user's pasted cluster list for this session (from their localStorage).
+// Replaces the previous session list; validated; localhost-only like the rest of the API.
+app.post('/api/aks/clusters', (req, res) => {
+  const { clusters } = req.body || {};
+  if (!Array.isArray(clusters)) return res.status(400).json({ ok: false, error: 'clusters must be a JSON array' });
+  if (clusters.length > 200) return res.status(400).json({ ok: false, error: 'Too many clusters (max 200)' });
+  for (const c of clusters) {
+    if (!c || !c.name || !c.resourceGroup || !c.subscription) return res.status(400).json({ ok: false, error: `Each entry needs name, resourceGroup, subscription (got: ${JSON.stringify(c).slice(0, 60)})` });
+    if (!clusterValid(c)) return res.status(400).json({ ok: false, error: `Invalid cluster entry "${c.name}" — check name / resourceGroup / subscription` });
+  }
+  SESSION_CLUSTERS = normalizeClusters(clusters, 'session');
+  aksCredCache.clear();                              // coordinates may have changed
+  res.json({ ok: true, data: { count: SESSION_CLUSTERS.length } });
+});
 
 // Resolve a :cluster route param to a known cluster, or throw a typed 400/404.
 async function getClusterChecked(name) {