lens/src/main/routes/kubeconfig.ts

import { LensApiRequest } from "../router"
import { LensApi } from "../lens-api"
import { Cluster } from "../cluster"
import { CoreV1Api, V1Secret } from "@kubernetes/client-node"

function generateKubeConfig(username: string, secret: V1Secret, cluster: Cluster) {
  const tokenData = new Buffer(secret.data["token"], "base64")
  return {
    'apiVersion': 'v1',
    'kind': 'Config',
    'clusters': [
      {
        'name': cluster.contextName,
        'cluster': {
          'server': cluster.contextHandler.kc.getCurrentCluster().server,
          'certificate-authority-data': secret.data["ca.crt"]
        }
      }
    ],
    'users': [
      {
        'name': username,
        'user': {
          'token': tokenData.toString("utf8"),
        }
      }
    ],
    'contexts': [
      {
        'name': cluster.contextName,
        'context': {
          'user': username,
          'cluster': cluster.contextName,
          'namespace': secret.metadata.namespace,
        }
      }
    ],
    'current-context': cluster.contextName
  }
}

class KubeconfigRoute extends LensApi {

  public async routeServiceAccountRoute(request: LensApiRequest) {
    const { params, response, cluster} = request

    const client = cluster.contextHandler.kc.makeApiClient(CoreV1Api);
    const secretList = await client.listNamespacedSecret(params.namespace)
    const secret = secretList.body.items.find(secret => {
      const { annotations } = secret.metadata;
      return annotations && annotations["kubernetes.io/service-account.name"] == params.account;
    });
    const data = generateKubeConfig(params.account, secret, cluster);
    this.respondJson(response, data)
  }
}

export const kubeconfigRoute = new KubeconfigRoute()