Merge pull request #12 from richardxz/master

add "kubeconfig" api

pkg/apis/v1alpha/install.go

@@ -17,18 +17,23 @@ limitations under the License.
 package v1alpha
 
 import (
-	"github.com/emicklei/go-restful"
+        "github.com/emicklei/go-restful"
-	"kubesphere.io/kubesphere/pkg/apis/v1alpha/nodes"
+        "kubesphere.io/kubesphere/pkg/apis/v1alpha/nodes"
+        "kubesphere.io/kubesphere/pkg/apis/v1alpha/kubeconfig"
+        "kubesphere.io/kubesphere/pkg/apis/v1alpha/kubectl"
 )
 
 func init() {
 
-	ws := new(restful.WebService)
+        ws := new(restful.WebService)
-	ws.Path("/api/v1alpha")
+        ws.Path("/api/v1alpha")
 
-	nodes.Register(ws,"/nodes")
+        nodes.Register(ws,"/nodes")
+        kubeconfig.Register(ws, "/namespaces/{namespace}/kubeconfig")
+        kubectl.Register(ws, "/namespaces/{namespace}/kubectl")
 
-	// add webservice to default container
+        // add webservice to default container
-	restful.Add(ws)
+        restful.Add(ws)
 
 }
+

pkg/apis/v1alpha/kubeconfig/kubeconfig.go

@@ -0,0 +1,50 @@
+// Copyright 2018 The Kubesphere Authors.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package kubeconfig
+
+import (
+	"github.com/emicklei/go-restful"
+	"net/http"
+	"kubesphere.io/kubesphere/pkg/models"
+)
+
+const DefaultServiceAccount = "default"
+
+type Config struct {
+	Certificate string
+	Server    string
+	User string
+	Token string
+}
+
+
+func Register(ws *restful.WebService, subPath string) {
+
+	ws.Route(ws.GET(subPath).To(handleKubeconfig))
+
+}
+
+func handleKubeconfig(req *restful.Request, resp *restful.Response) {
+
+	ns := req.PathParameter("namespace")
+
+	kubectlConfig, err := models.GetKubeConfig(ns)
+
+	if err != nil {
+		resp.WriteError(http.StatusInternalServerError, err)
+	}
+
+	resp.WriteEntity(kubectlConfig)
+}

pkg/apis/v1alpha/kubectl/kubectl.go

@@ -0,0 +1,52 @@
+/*
+Copyright 2018 The KubeSphere Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package kubectl
+
+import (
+	"github.com/emicklei/go-restful"
+	"kubesphere.io/kubesphere/pkg/models"
+	"net/http"
+)
+
+func Register(ws *restful.WebService, subPath string) {
+
+	ws.Route(ws.GET(subPath).Consumes("*/*").Produces(restful.MIME_JSON).To(handleKubectl).Doc("use to " +
+		"get a kubectl pod in specified namespaces").Param(ws.PathParameter("namespace",
+		"namespace").DataType("string")).Do(returns200,returns500))
+
+}
+
+func handleKubectl(req *restful.Request, resp *restful.Response) {
+
+	ns := req.PathParameter("namespace")
+
+	kubectlPod, err := models.GetKubectlPod(ns)
+
+	if err != nil {
+		resp.WriteError(http.StatusInternalServerError, err)
+	}
+
+	resp.WriteEntity(kubectlPod)
+}
+
+func returns200(b *restful.RouteBuilder) {
+	b.Returns(http.StatusOK, "OK", nil)
+}
+
+func returns500(b *restful.RouteBuilder) {
+	b.Returns(http.StatusInternalServerError, "fail", nil)
+}

pkg/models/kubeconfig.go

@@ -0,0 +1,100 @@
+/*
+Copyright 2018 The KubeSphere Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package models
+
+import (
+	"bytes"
+	"github.com/golang/glog"
+	"text/template"
+	"encoding/base64"
+	meta_v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	"kubesphere.io/kubesphere/pkg/client"
+	"kubesphere.io/kubesphere/pkg/options"
+)
+
+var kubeconfigTemp =
+	"apiVersion: v1\n" +
+	"clusters:\n" +
+	"- cluster:\n" +
+	"    certificate-authority-data: {{.Certificate}}\n" +
+	"    server: {{.Server}}\n" +
+	"    name: kubernetes\n" +
+	"contexts:\n" +
+	"- context:\n" +
+	"    cluster: kubernetes\n" +
+	"    user: {{.User}}\n" +
+	"    namespace: {{.User}}\n" +
+	"  name: default\n" +
+	"current-context: default\n" +
+	"kind: Config\n" +
+	"preferences: {}\n" +
+	"users:\n" +
+	"- name: {{.User}}\n" +
+	"  user:\n" +
+	"  token: {{.Token}}\n"
+
+const DefaultServiceAccount = "default"
+
+type Config struct {
+	Certificate string
+	Server    string
+	User string
+	Token string
+}
+
+func GetKubeConfig(namespace string) (string, error) {
+	tmpl, err := template.New("").Parse(kubeconfigTemp)
+	if err != nil {
+		glog.Errorln(err)
+		return "", err
+	}
+
+	kubeConfig, err := getKubeConfig(namespace, options.ServerOptions.GetApiServerHost())
+
+	buf := bytes.NewBufferString("")
+	err = tmpl.Execute(buf, kubeConfig)
+	if err != nil {
+		glog.Errorln(err)
+		return "", err
+	}
+	return buf.String(), nil
+}
+
+func getKubeConfig(namespace, apiserverHost string) (*Config, error) {
+	k8sClient := client.NewK8sClient()
+	saInfo, err := k8sClient.CoreV1().ServiceAccounts(namespace).Get(DefaultServiceAccount, meta_v1.GetOptions{})
+	if err != nil{
+		glog.Errorln(err)
+		return nil, err
+	}
+	secretName := saInfo.Secrets[0].Name
+
+	secretInfo, err := k8sClient.CoreV1().Secrets(namespace).Get(secretName, meta_v1.GetOptions{})
+	if err != nil{
+		glog.Errorln(err)
+		return nil, err
+	}
+
+	secretData := secretInfo.Data
+	certificate := string(secretData["ca.crt"])
+	certificate= base64.StdEncoding.EncodeToString([]byte(certificate))
+	server := apiserverHost
+	token := string(secretData["token"])
+	user := string(secretData["namespace"])
+
+	return &Config{Certificate:certificate, Server:server, Token:token, User:user}, nil
+}

pkg/models/kubectl.go

@@ -0,0 +1,86 @@
+/*
+Copyright 2018 The KubeSphere Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package models
+
+import (
+	"fmt"
+	"math/rand"
+	meta_v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	"k8s.io/apimachinery/pkg/labels"
+	"kubesphere.io/kubesphere/pkg/client"
+	"github.com/golang/glog"
+	"k8s.io/api/core/v1"
+)
+
+
+const (
+	deploymentName = "kubectl"
+)
+
+type kubectlPodInfo struct {
+	Namespace string `json: "namespace"`
+	Pod string `json: "podname"`
+	Container string `json: "container"`
+}
+
+func GetKubectlPod(namespace string) (kubectlPodInfo, error) {
+	k8sClient := client.NewK8sClient()
+	deploy, err := k8sClient.AppsV1beta2().Deployments(namespace).Get(deploymentName, meta_v1.GetOptions{})
+	if err != nil {
+		glog.Errorln(err)
+		return kubectlPodInfo{}, err
+	}
+
+	selectors := deploy.Spec.Selector.MatchLabels
+	labelSelector := labels.Set(selectors).AsSelector().String()
+	podList, err := k8sClient.CoreV1().Pods(namespace).List(meta_v1.ListOptions{LabelSelector:labelSelector})
+	if err != nil {
+		glog.Errorln(err)
+		return kubectlPodInfo{}, err
+	}
+
+	pod, err := selectCorrectPod(namespace, podList.Items)
+	if err != nil{
+		glog.Errorln(err)
+		return kubectlPodInfo{}, err
+	}
+
+	info := kubectlPodInfo{Namespace:pod.Namespace, Pod:pod.Name, Container:pod.Status.ContainerStatuses[0].Name}
+
+	return info, nil
+
+}
+
+
+func selectCorrectPod(namespace string, pods []v1.Pod) (kubectlPod v1.Pod, err error) {
+
+	var kubectPodList []v1.Pod
+	for _, pod := range pods{
+		for _, condition := range pod.Status.Conditions{
+			if condition.Type == "Ready" && condition.Status == "True"{
+				kubectPodList = append(kubectPodList, pod)
+			}
+		}
+	}
+	if len(kubectPodList) < 1{
+		err = fmt.Errorf("cannot find valid kubectl pod in namespace:%s", namespace)
+		return v1.Pod{}, err
+	}
+
+	random := rand.Intn(len(kubectPodList))
+	return kubectPodList[random], nil
+}