import { LensApiRequest } from "../router" import { LensApi } from "../lens-api" import { Cluster } from "../cluster" import { CoreV1Api, V1Secret } from "@kubernetes/client-node" function generateKubeConfig(username: string, secret: V1Secret, cluster: Cluster) { const tokenData = new Buffer(secret.data["token"], "base64") return { 'apiVersion': 'v1', 'kind': 'Config', 'clusters': [ { 'name': cluster.contextName, 'cluster': { 'server': cluster.contextHandler.kc.getCurrentCluster().server, 'certificate-authority-data': secret.data["ca.crt"] } } ], 'users': [ { 'name': username, 'user': { 'token': tokenData.toString("utf8"), } } ], 'contexts': [ { 'name': cluster.contextName, 'context': { 'user': username, 'cluster': cluster.contextName, 'namespace': secret.metadata.namespace, } } ], 'current-context': cluster.contextName } } class KubeconfigRoute extends LensApi { public async routeServiceAccountRoute(request: LensApiRequest) { const { params, response, cluster} = request const client = cluster.contextHandler.kc.makeApiClient(CoreV1Api); const secretList = await client.listNamespacedSecret(params.namespace) const secret = secretList.body.items.find(secret => { const { annotations } = secret.metadata; return annotations && annotations["kubernetes.io/service-account.name"] == params.account; }); const data = generateKubeConfig(params.account, secret, cluster); this.respondJson(response, data) } } export const kubeconfigRoute = new KubeconfigRoute()