feat: kubesphere 4.0 (#6115)

* feat: kubesphere 4.0

Signed-off-by: ci-bot <ci-bot@kubesphere.io>

* feat: kubesphere 4.0

Signed-off-by: ci-bot <ci-bot@kubesphere.io>

---------

Signed-off-by: ci-bot <ci-bot@kubesphere.io>
Co-authored-by: ks-ci-bot <ks-ci-bot@example.com>
Co-authored-by: joyceliu <joyceliu@yunify.com>

pkg/apiserver/authentication/identityprovider/configuration.go

@@ -0,0 +1,120 @@
+/*
+ * Please refer to the LICENSE file in the root directory of the project.
+ * https://github.com/kubesphere/kubesphere/blob/master/LICENSE
+ */
+
+package identityprovider
+
+import (
+	"context"
+	"errors"
+
+	"gopkg.in/yaml.v3"
+	v1 "k8s.io/api/core/v1"
+	"k8s.io/klog/v2"
+	"sigs.k8s.io/controller-runtime/pkg/client"
+
+	"kubesphere.io/kubesphere/pkg/constants"
+	"kubesphere.io/kubesphere/pkg/server/options"
+)
+
+const (
+	MappingMethodManual MappingMethod = "manual"
+
+	MappingMethodAuto MappingMethod = "auto"
+
+	// MappingMethodLookup Looks up an existing identity, user identity mapping, and user, but does not automatically
+	// provision users or identities. Using this method requires you to manually provision users.
+	MappingMethodLookup MappingMethod = "lookup"
+
+	ConfigTypeIdentityProvider = "identityprovider"
+	SecretTypeIdentityProvider = "config.kubesphere.io/" + ConfigTypeIdentityProvider
+
+	SecretDataKey = "configuration.yaml"
+)
+
+var ErrorIdentityProviderNotFound = errors.New("the Identity provider was not found")
+
+type MappingMethod string
+
+type Configuration struct {
+	// The provider name.
+	Name string `json:"name" yaml:"name"`
+
+	// Defines how new identities are mapped to users when they login. Allowed values are:
+	//  - manual: The user needs to confirm the mapped username on the onboarding page.
+	//  - auto: Skip the onboarding screen, so the user cannot change its username.
+	//            Fails if a user with that username is already mapped to another identity.
+	//  - lookup: Looks up an existing identity, user identity mapping, and user, but does not automatically
+	//            provision users or identities. Using this method requires you to manually provision users.
+	MappingMethod MappingMethod `json:"mappingMethod" yaml:"mappingMethod"`
+
+	// The type of identity provider
+	Type string `json:"type" yaml:"type"`
+
+	// The options of identify provider
+	ProviderOptions options.DynamicOptions `json:"provider" yaml:"provider"`
+}
+
+type ConfigurationGetter interface {
+	GetConfiguration(ctx context.Context, name string) (*Configuration, error)
+	ListConfigurations(ctx context.Context) ([]*Configuration, error)
+}
+
+func NewConfigurationGetter(client client.Client) ConfigurationGetter {
+	return &configurationGetter{client}
+}
+
+type configurationGetter struct {
+	client.Client
+}
+
+func (o *configurationGetter) ListConfigurations(ctx context.Context) ([]*Configuration, error) {
+	configurations := make([]*Configuration, 0)
+	secrets := &v1.SecretList{}
+	if err := o.List(ctx, secrets, client.InNamespace(constants.KubeSphereNamespace), client.MatchingLabels{constants.GenericConfigTypeLabel: ConfigTypeIdentityProvider}); err != nil {
+		klog.Errorf("failed to list secrets: %v", err)
+		return nil, err
+	}
+	for _, secret := range secrets.Items {
+		if secret.Type != SecretTypeIdentityProvider {
+			continue
+		}
+		if c, err := UnmarshalFrom(&secret); err != nil {
+			klog.Errorf("failed to unmarshal secret data: %s", err)
+			continue
+		} else {
+			configurations = append(configurations, c)
+		}
+	}
+	return configurations, nil
+}
+
+func (o *configurationGetter) GetConfiguration(ctx context.Context, name string) (*Configuration, error) {
+	configurations, err := o.ListConfigurations(ctx)
+	if err != nil {
+		klog.Errorf("failed to list identity providers: %v", err)
+		return nil, err
+	}
+	for _, c := range configurations {
+		if c.Name == name {
+			return c, nil
+		}
+	}
+	return nil, ErrorIdentityProviderNotFound
+}
+
+func UnmarshalFrom(secret *v1.Secret) (*Configuration, error) {
+	c := &Configuration{}
+	if err := yaml.Unmarshal(secret.Data[SecretDataKey], c); err != nil {
+		return nil, err
+	}
+	return c, nil
+}
+
+func IsIdentityProviderConfiguration(secret *v1.Secret) bool {
+	if secret.Namespace != constants.KubeSphereNamespace {
+		return false
+	}
+	return secret.Type == SecretTypeIdentityProvider
+}