Update Cluster based on permissions

Signed-off-by: Frank Jogeleit <[email protected]>
kyverno · Oct 13, 2024 · f04ddc2 · f04ddc2
1 parent 4973ef4
commit f04ddc2
Show file tree

Hide file tree

Showing 5 changed files with 38 additions and 5 deletions.
diff --git a/backend/pkg/config/config.go b/backend/pkg/config/config.go
@@ -118,7 +118,7 @@ func (a Plugin) FromValues(values secrets.Values) Plugin {
 	return a
 }
 
-// APISetup configuration
+// Cluster configuration
 type Cluster struct {
 	Name          string        `mapstructure:"name"`
 	Host          string        `mapstructure:"host"`

diff --git a/backend/pkg/config/mapper.go b/backend/pkg/config/mapper.go
@@ -20,6 +20,9 @@ func MapConfig(c *Config) *api.Config {
 			Name:    cl.Name,
 			Slug:    slug.Make(cl.Name),
 			Plugins: plugins,
+			Permissions: auth.Permissions{
+				AccessControl: auth.AccessControl(cl.AccessControl),
+			},
 		})
 	}
 

diff --git a/backend/pkg/server/api/handler.go b/backend/pkg/server/api/handler.go
@@ -31,6 +31,35 @@ func (h *Handler) Healthz(ctx *gin.Context) {
 }
 
 func (h *Handler) Config(ctx *gin.Context) {
+	if profile := auth.ProfileFrom(ctx); profile != nil {
+		cluster := h.config.Default
+
+		clusters := make([]Cluster, 0, len(h.config.Clusters))
+		for _, cl := range h.config.Clusters {
+			access := cl.AllowedEmail(profile.Email)
+			if access {
+				clusters = append(clusters, cl)
+			}
+			if cluster == cl.Slug && !access {
+				cluster = ""
+			}
+		}
+
+		if cluster == "" && len(clusters) > 0 {
+			cluster = clusters[0].Slug
+		}
+
+		ctx.JSON(http.StatusOK, Config{
+			Clusters: clusters,
+			Default:  cluster,
+			User:     h.config.User,
+			Sources:  h.config.Sources,
+			Banner:   h.config.Banner,
+			OAuth:    h.config.OAuth,
+		})
+		return
+	}
+
 	ctx.JSON(http.StatusOK, h.config)
 }
 

diff --git a/backend/pkg/server/api/model.go b/backend/pkg/server/api/model.go
@@ -33,9 +33,10 @@ type Source struct {
 }
 
 type Cluster struct {
-	Name    string   `json:"name"`
-	Slug    string   `json:"slug"`
-	Plugins []string `json:"plugins"`
+	auth.Permissions `json:"-"`
+	Name             string   `json:"name"`
+	Slug             string   `json:"slug"`
+	Plugins          []string `json:"plugins"`
 }
 
 type PolicyReports struct {

diff --git a/frontend/modules/core/components/form/ClusterSelect.vue b/frontend/modules/core/components/form/ClusterSelect.vue
@@ -9,7 +9,7 @@
     hide-details
     density="compact"
     prepend-inner-icon="mdi-kubernetes"
-    style="max-width: 140px;"
+    style="min-width: 140px;"
     @update:model-value="input"
     v-if="clusters.length > 1"
   />