mirror of
https://github.com/lensapp/lens.git
synced 2025-05-20 05:10:56 +00:00
- Check accessibleNamespaces in globalWatch handler Signed-off-by: Sebastian Malton <sebastian@malton.name>
160 lines
5.9 KiB
TypeScript
160 lines
5.9 KiB
TypeScript
/**
|
|
* Copyright (c) 2021 OpenLens Authors
|
|
*
|
|
* Permission is hereby granted, free of charge, to any person obtaining a copy of
|
|
* this software and associated documentation files (the "Software"), to deal in
|
|
* the Software without restriction, including without limitation the rights to
|
|
* use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
|
|
* the Software, and to permit persons to whom the Software is furnished to do so,
|
|
* subject to the following conditions:
|
|
*
|
|
* The above copyright notice and this permission notice shall be included in all
|
|
* copies or substantial portions of the Software.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
|
|
* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
|
|
* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
|
|
* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
|
|
* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
|
|
*/
|
|
|
|
import { ipcMain, IpcMainInvokeEvent } from "electron";
|
|
import type { KubernetesCluster } from "../../common/catalog-entities";
|
|
import { clusterFrameMap } from "../../common/cluster-frames";
|
|
import { clusterActivateHandler, clusterSetFrameIdHandler, clusterVisibilityHandler, clusterRefreshHandler, clusterDisconnectHandler, clusterKubectlApplyAllHandler, clusterKubectlDeleteAllHandler } from "../../common/cluster-ipc";
|
|
import { ClusterId, ClusterStore } from "../../common/cluster-store";
|
|
import { appEventBus } from "../../common/event-bus";
|
|
import { ClusterGetResourcesChannel, ClusterGlobalWatchChannel, ClusterResourceIsAllowedChannel, ipcMainHandle } from "../../common/ipc";
|
|
import { catalogEntityRegistry } from "../catalog";
|
|
import { ResourceApplier } from "../resource-applier";
|
|
|
|
export function initIpcMainHandlers() {
|
|
ipcMainHandle(clusterActivateHandler, (event, clusterId: ClusterId, force = false) => {
|
|
return ClusterStore.getInstance()
|
|
.getById(clusterId)
|
|
?.activate(force);
|
|
});
|
|
|
|
ipcMainHandle(clusterSetFrameIdHandler, (event: IpcMainInvokeEvent, clusterId: ClusterId) => {
|
|
const cluster = ClusterStore.getInstance().getById(clusterId);
|
|
|
|
if (cluster) {
|
|
clusterFrameMap.set(cluster.id, { frameId: event.frameId, processId: event.processId });
|
|
cluster.pushState();
|
|
}
|
|
});
|
|
|
|
ipcMainHandle(clusterVisibilityHandler, (event: IpcMainInvokeEvent, clusterId: ClusterId, visible: boolean) => {
|
|
const entity = catalogEntityRegistry.getById<KubernetesCluster>(clusterId);
|
|
|
|
for (const kubeEntity of catalogEntityRegistry.getItemsForApiKind(entity.apiVersion, entity.kind)) {
|
|
kubeEntity.status.active = false;
|
|
}
|
|
|
|
if (entity) {
|
|
entity.status.active = visible;
|
|
}
|
|
});
|
|
|
|
ipcMainHandle(clusterRefreshHandler, (event, clusterId: ClusterId) => {
|
|
return ClusterStore.getInstance()
|
|
.getById(clusterId)
|
|
?.refresh({ refreshMetadata: true });
|
|
});
|
|
|
|
ipcMainHandle(clusterDisconnectHandler, (event, clusterId: ClusterId) => {
|
|
appEventBus.emit({ name: "cluster", action: "stop" });
|
|
const cluster = ClusterStore.getInstance().getById(clusterId);
|
|
|
|
if (cluster) {
|
|
cluster.disconnect();
|
|
clusterFrameMap.delete(cluster.id);
|
|
}
|
|
});
|
|
|
|
ipcMainHandle(clusterKubectlApplyAllHandler, async (event, clusterId: ClusterId, resources: string[], extraArgs: string[]) => {
|
|
appEventBus.emit({ name: "cluster", action: "kubectl-apply-all" });
|
|
const cluster = ClusterStore.getInstance().getById(clusterId);
|
|
|
|
if (cluster) {
|
|
const applier = new ResourceApplier(cluster);
|
|
|
|
try {
|
|
const stdout = await applier.kubectlApplyAll(resources, extraArgs);
|
|
|
|
return { stdout };
|
|
} catch (error: any) {
|
|
return { stderr: error };
|
|
}
|
|
} else {
|
|
throw `${clusterId} is not a valid cluster id`;
|
|
}
|
|
});
|
|
|
|
ipcMainHandle(clusterKubectlDeleteAllHandler, async (event, clusterId: ClusterId, resources: string[], extraArgs: string[]) => {
|
|
appEventBus.emit({ name: "cluster", action: "kubectl-delete-all" });
|
|
const cluster = ClusterStore.getInstance().getById(clusterId);
|
|
|
|
if (cluster) {
|
|
const applier = new ResourceApplier(cluster);
|
|
|
|
try {
|
|
const stdout = await applier.kubectlDeleteAll(resources, extraArgs);
|
|
|
|
return { stdout };
|
|
} catch (error: any) {
|
|
return { stderr: error };
|
|
}
|
|
} else {
|
|
throw `${clusterId} is not a valid cluster id`;
|
|
}
|
|
});
|
|
|
|
ipcMain.handle(ClusterGetResourcesChannel, async (event, clusterId: ClusterId) => {
|
|
// This needs to be `ipcMain.handle` because `utils.toJS` throws on `class T extends Map`
|
|
// mobx refuses to change that: https://github.com/mobxjs/mobx/pull/2980
|
|
return ClusterStore.getInstance()
|
|
.getById(clusterId)
|
|
?.getApiResourceMap();
|
|
});
|
|
|
|
ipcMainHandle(ClusterResourceIsAllowedChannel, async (event, clusterId: ClusterId, namespaces: string[]): Promise<string[]> => {
|
|
const cluster = ClusterStore.getInstance().getById(clusterId);
|
|
|
|
if (!cluster) {
|
|
return [];
|
|
}
|
|
|
|
const isAllowed = new Set<string>();
|
|
|
|
await Promise.all(
|
|
namespaces.map(async namespace => {
|
|
for (const resource of await cluster.getIsAllowedResources(namespace)) {
|
|
isAllowed.add(resource);
|
|
}
|
|
})
|
|
);
|
|
|
|
return Array.from(isAllowed);
|
|
});
|
|
|
|
ipcMainHandle(ClusterGlobalWatchChannel, async (event, clusterId: ClusterId): Promise<boolean> => {
|
|
const cluster = ClusterStore.getInstance().getById(clusterId);
|
|
|
|
if (!cluster) {
|
|
throw `${clusterId} is not a valid cluster id`;
|
|
}
|
|
|
|
if (cluster.accessibleNamespaces.length > 0) {
|
|
/**
|
|
* Don't allow global watching when the user has specified namespaces.
|
|
* Assume that the cluster can't even list namespaces
|
|
*/
|
|
return false;
|
|
}
|
|
|
|
return cluster.canUseWatchApi({ resource: "*" });
|
|
});
|
|
}
|