import type { KubeConfig } from "@kubernetes/client-node"; import type { Cluster } from "./cluster"; import type { ContextHandler } from "./context-handler"; import { app } from "electron"; import path from "path"; import fs from "fs-extra"; import { dumpConfigYaml, loadConfig } from "../common/kube-helpers"; import logger from "./logger"; export class KubeconfigManager { protected configDir = app.getPath("temp"); protected tempFile: string; private constructor(protected cluster: Cluster, protected contextHandler: ContextHandler, protected port: number) { } static async create(cluster: Cluster, contextHandler: ContextHandler, port: number) { const kcm = new KubeconfigManager(cluster, contextHandler, port); await kcm.init(); return kcm; } protected async init() { try { await this.contextHandler.ensurePort(); await this.createProxyKubeconfig(); } catch (err) { logger.error(`Failed to created temp config for auth-proxy`, { err }); } } getPath() { return this.tempFile; } protected resolveProxyUrl() { return `http://127.0.0.1:${this.port}/${this.cluster.id}`; } /** * Creates new "temporary" kubeconfig that point to the kubectl-proxy. * This way any user of the config does not need to know anything about the auth etc. details. */ protected async createProxyKubeconfig(): Promise { const { configDir, cluster } = this; const { contextName, kubeConfigPath, id } = cluster; const tempFile = path.join(configDir, `kubeconfig-${id}`); const kubeConfig = loadConfig(kubeConfigPath); const proxyConfig: Partial = { currentContext: contextName, clusters: [ { name: contextName, server: this.resolveProxyUrl(), skipTLSVerify: undefined, } ], users: [ { name: "proxy" }, ], contexts: [ { user: "proxy", name: contextName, cluster: contextName, namespace: kubeConfig.getContextObject(contextName).namespace, } ] }; // write const configYaml = dumpConfigYaml(proxyConfig); fs.ensureDir(path.dirname(tempFile)); fs.writeFileSync(tempFile, configYaml, { mode: 0o600 }); this.tempFile = tempFile; logger.debug(`Created temp kubeconfig "${contextName}" at "${tempFile}": \n${configYaml}`); return tempFile; } async unlink() { if (!this.tempFile) { return; } logger.info(`Deleting temporary kubeconfig: ${this.tempFile}`); await fs.unlink(this.tempFile); this.tempFile = undefined; } }