feat: add k8s provider

commit

migrations/1729241998_updated_access.go

@@ -0,0 +1,95 @@
+package migrations
+
+import (
+	"encoding/json"
+
+	"github.com/pocketbase/dbx"
+	"github.com/pocketbase/pocketbase/daos"
+	m "github.com/pocketbase/pocketbase/migrations"
+	"github.com/pocketbase/pocketbase/models/schema"
+)
+
+func init() {
+	m.Register(func(db dbx.Builder) error {
+		dao := daos.New(db);
+
+		collection, err := dao.FindCollectionByNameOrId("4yzbv8urny5ja1e")
+		if err != nil {
+			return err
+		}
+
+		// update
+		edit_configType := &schema.SchemaField{}
+		if err := json.Unmarshal([]byte(`{
+			"system": false,
+			"id": "hwy7m03o",
+			"name": "configType",
+			"type": "select",
+			"required": false,
+			"presentable": false,
+			"unique": false,
+			"options": {
+				"maxSelect": 1,
+				"values": [
+					"aliyun",
+					"tencent",
+					"huaweicloud",
+					"qiniu",
+					"aws",
+					"cloudflare",
+					"namesilo",
+					"godaddy",
+					"local",
+					"ssh",
+					"webhook",
+					"k8s"
+				]
+			}
+		}`), edit_configType); err != nil {
+			return err
+		}
+		collection.Schema.AddField(edit_configType)
+
+		return dao.SaveCollection(collection)
+	}, func(db dbx.Builder) error {
+		dao := daos.New(db);
+
+		collection, err := dao.FindCollectionByNameOrId("4yzbv8urny5ja1e")
+		if err != nil {
+			return err
+		}
+
+		// update
+		edit_configType := &schema.SchemaField{}
+		if err := json.Unmarshal([]byte(`{
+			"system": false,
+			"id": "hwy7m03o",
+			"name": "configType",
+			"type": "select",
+			"required": false,
+			"presentable": false,
+			"unique": false,
+			"options": {
+				"maxSelect": 1,
+				"values": [
+					"aliyun",
+					"tencent",
+					"huaweicloud",
+					"qiniu",
+					"aws",
+					"cloudflare",
+					"namesilo",
+					"godaddy",
+					"local",
+					"ssh",
+					"webhook"
+				]
+			}
+		}`), edit_configType); err != nil {
+			return err
+		}
+		collection.Schema.AddField(edit_configType)
+
+		return dao.SaveCollection(collection)
+	})
+}

ui/src/components/certimate/AccessEdit.tsx

@@ -17,6 +17,7 @@ import AccessGodaddyForm from "./AccessGodaddyForm";
 import AccessLocalForm from "./AccessLocalForm";
 import AccessSSHForm from "./AccessSSHForm";
 import AccessWebhookForm from "./AccessWebhookForm";
+import AccessKubernetesForm from "./AccessKubernetesForm";
 import { Access, accessTypeMap } from "@/domain/access";
 
 type AccessEditProps = {
@@ -157,6 +158,17 @@ const AccessEdit = ({ trigger, op, data, className }: AccessEditProps) => {
         />
       );
       break;
+    case "k8s":
+      form = (
+        <AccessKubernetesForm
+          data={data}
+          op={op}
+          onAfterReq={() => {
+            setOpen(false);
+          }}
+        />
+      );
+      break;
   }
 
   const getOptionCls = (val: string) => {

ui/src/components/certimate/AccessKubernetesForm.tsx

@@ -0,0 +1,195 @@
+import { useRef, useState } from "react";
+import { useTranslation } from "react-i18next";
+import { useForm } from "react-hook-form";
+import { z } from "zod";
+import { zodResolver } from "@hookform/resolvers/zod";
+import { ClientResponseError } from "pocketbase";
+
+import { Access, accessFormType, getUsageByConfigType, KubernetesConfig } from "@/domain/access";
+import { Button } from "@/components/ui/button";
+import { Form, FormControl, FormField, FormItem, FormLabel, FormMessage } from "@/components/ui/form";
+import { Input } from "@/components/ui/input";
+import { readFileContent } from "@/lib/file";
+import { PbErrorData } from "@/domain/base";
+import { save } from "@/repository/access";
+import { useConfig } from "@/providers/config";
+
+type AccessKubernetesFormProps = {
+  op: "add" | "edit" | "copy";
+  data?: Access;
+  onAfterReq: () => void;
+};
+
+const AccessKubernetesForm = ({ data, op, onAfterReq }: AccessKubernetesFormProps) => {
+  const { addAccess, updateAccess } = useConfig();
+
+  const fileInputRef = useRef<HTMLInputElement | null>(null);
+  const [fileName, setFileName] = useState("");
+
+  const { t } = useTranslation();
+
+  const formSchema = z.object({
+    id: z.string().optional(),
+    name: z
+      .string()
+      .min(1, "access.authorization.form.name.placeholder")
+      .max(64, t("common.errmsg.string_max", { max: 64 })),
+    configType: accessFormType,
+    kubeConfig: z
+      .string()
+      .min(1, "access.authorization.form.k8s_kubeconfig.placeholder")
+      .max(20480, t("common.errmsg.string_max", { max: 20480 })),
+    kubeConfigFile: z.any().optional(),
+  });
+
+  let config: KubernetesConfig & { kubeConfigFile?: string } = {
+    kubeConfig: "",
+    kubeConfigFile: "",
+  };
+  if (data) config = data.config as typeof config;
+
+  const form = useForm<z.infer<typeof formSchema>>({
+    resolver: zodResolver(formSchema),
+    defaultValues: {
+      id: data?.id,
+      name: data?.name || "",
+      configType: "k8s",
+      kubeConfig: config.kubeConfig,
+      kubeConfigFile: config.kubeConfigFile,
+    },
+  });
+
+  const onSubmit = async (data: z.infer<typeof formSchema>) => {
+    const req: Access = {
+      id: data.id as string,
+      name: data.name,
+      configType: data.configType,
+      usage: getUsageByConfigType(data.configType),
+      config: {
+        kubeConfig: data.kubeConfig,
+      },
+    };
+
+    try {
+      req.id = op == "copy" ? "" : req.id;
+      const rs = await save(req);
+
+      onAfterReq();
+
+      req.id = rs.id;
+      req.created = rs.created;
+      req.updated = rs.updated;
+      if (data.id && op == "edit") {
+        updateAccess(req);
+      } else {
+        addAccess(req);
+      }
+    } catch (e) {
+      const err = e as ClientResponseError;
+
+      Object.entries(err.response.data as PbErrorData).forEach(([key, value]) => {
+        form.setError(key as keyof z.infer<typeof formSchema>, {
+          type: "manual",
+          message: value.message,
+        });
+      });
+
+      return;
+    }
+  };
+
+  const handleFileChange = async (event: React.ChangeEvent<HTMLInputElement>) => {
+    const file = event.target.files?.[0];
+    if (!file) return;
+    const savedFile = file;
+    setFileName(savedFile.name);
+    const content = await readFileContent(savedFile);
+    form.setValue("kubeConfig", content);
+  };
+
+  const handleSelectFileClick = () => {
+    fileInputRef.current?.click();
+  };
+
+  return (
+    <>
+      <div className="max-w-[35em] mx-auto mt-10">
+        <Form {...form}>
+          <form
+            onSubmit={(e) => {
+              e.stopPropagation();
+              form.handleSubmit(onSubmit)(e);
+            }}
+            className="space-y-3"
+          >
+            <FormField
+              control={form.control}
+              name="name"
+              render={({ field }) => (
+                <FormItem>
+                  <FormLabel>{t("access.authorization.form.name.label")}</FormLabel>
+                  <FormControl>
+                    <Input placeholder={t("access.authorization.form.name.placeholder")} {...field} />
+                  </FormControl>
+
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+
+            <FormField
+              control={form.control}
+              name="kubeConfig"
+              render={({ field }) => (
+                <FormItem hidden>
+                  <FormLabel>{t("access.authorization.form.k8s_kubeconfig.label")}</FormLabel>
+                  <FormControl>
+                    <Input placeholder={t("access.authorization.form.k8s_kubeconfig.placeholder")} {...field} />
+                  </FormControl>
+
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+
+            <FormField
+              control={form.control}
+              name="kubeConfigFile"
+              render={({ field }) => (
+                <FormItem>
+                  <FormLabel>{t("access.authorization.form.k8s_kubeconfig.label")}</FormLabel>
+                  <FormControl>
+                    <div>
+                      <Button type={"button"} variant={"secondary"} size={"sm"} className="w-48" onClick={handleSelectFileClick}>
+                        {fileName ? fileName : t("access.authorization.form.k8s_kubeconfig_file.placeholder")}
+                      </Button>
+                      <Input
+                        placeholder={t("access.authorization.form.k8s_kubeconfig.placeholder")}
+                        {...field}
+                        ref={fileInputRef}
+                        className="hidden"
+                        hidden
+                        type="file"
+                        onChange={handleFileChange}
+                      />
+                    </div>
+                  </FormControl>
+
+                  <FormMessage />
+                </FormItem>
+              )}
+            />
+
+            <FormMessage />
+
+            <div className="flex justify-end">
+              <Button type="submit">{t("common.save")}</Button>
+            </div>
+          </form>
+        </Form>
+      </div>
+    </>
+  );
+};
+
+export default AccessKubernetesForm;

ui/src/domain/access.ts

@@ -12,6 +12,7 @@ export const accessTypeMap: Map<string, [string, string]> = new Map([
   ["local", ["common.provider.local", "/imgs/providers/local.svg"]],
   ["ssh", ["common.provider.ssh", "/imgs/providers/ssh.svg"]],
   ["webhook", ["common.provider.webhook", "/imgs/providers/webhook.svg"]],
+  ["k8s", ["common.provider.kubernetes", "/imgs/providers/k8s.svg"]],
 ]);
 
 export const getProviderInfo = (t: string) => {
@@ -31,6 +32,7 @@ export const accessFormType = z.union(
     z.literal("local"),
     z.literal("ssh"),
     z.literal("webhook"),
+    z.literal("k8s"),
   ],
   { message: "access.authorization.form.type.placeholder" }
 );
@@ -54,7 +56,8 @@ export type Access = {
     | GodaddyConfig
     | LocalConfig
     | SSHConfig
-    | WebhookConfig;
+    | WebhookConfig
+    | KubernetesConfig;
   deleted?: string;
   created?: string;
   updated?: string;
@@ -117,6 +120,10 @@ export type WebhookConfig = {
   url: string;
 };
 
+export type KubernetesConfig = {
+  kubeConfig: string;
+};
+
 export const getUsageByConfigType = (configType: string): AccessUsage => {
   switch (configType) {
     case "aliyun":
@@ -128,8 +135,10 @@ export const getUsageByConfigType = (configType: string): AccessUsage => {
     case "local":
     case "ssh":
     case "webhook":
+    case "k8s":
       return "deploy";
 
+    case "aws":
     case "cloudflare":
     case "namesilo":
     case "godaddy":

ui/src/i18n/locales/en/nls.access.json

@@ -69,6 +69,9 @@
   "access.authorization.form.ssh_command.placeholder": "Please enter command",
   "access.authorization.form.webhook_url.label": "Webhook URL",
   "access.authorization.form.webhook_url.placeholder": "Please enter Webhook URL",
+  "access.authorization.form.k8s_kubeconfig.label": "KubeConfig",
+  "access.authorization.form.k8s_kubeconfig.placeholder": "Please enter KubeConfig",
+  "access.authorization.form.k8s_kubeconfig_file.placeholder": "Please select file",
 
   "access.group.tab": "Authorization Group",
 

ui/src/i18n/locales/en/nls.common.json

@@ -68,6 +68,7 @@
   "common.provider.local": "Local Deployment",
   "common.provider.ssh": "SSH Deployment",
   "common.provider.webhook": "Webhook",
+  "common.provider.kubernetes": "Kubernetes",
   "common.provider.dingtalk": "DingTalk",
   "common.provider.telegram": "Telegram",
   "common.provider.lark": "Lark"

ui/src/i18n/locales/zh/nls.access.json

@@ -69,6 +69,9 @@
   "access.authorization.form.ssh_command.placeholder": "请输入要执行的命令",
   "access.authorization.form.webhook_url.label": "Webhook URL",
   "access.authorization.form.webhook_url.placeholder": "请输入 Webhook URL",
+  "access.authorization.form.k8s_kubeconfig.label": "KubeConfig",
+  "access.authorization.form.k8s_kubeconfig.placeholder": "请输入 KubeConfig",
+  "access.authorization.form.k8s_kubeconfig_file.placeholder": "请选择文件",
 
   "access.group.tab": "授权组",
 

ui/src/i18n/locales/zh/nls.common.json

@@ -68,6 +68,7 @@
   "common.provider.local": "本地部署",
   "common.provider.ssh": "SSH 部署",
   "common.provider.webhook": "Webhook",
+  "common.provider.kubernetes": "Kubernetes",
   "common.provider.dingtalk": "钉钉",
   "common.provider.telegram": "Telegram",
   "common.provider.lark": "飞书"