refine tenant api

Signed-off-by: hongming <talonwan@yunify.com>
2019-04-01 02:59:19 +08:00
parent 744bd053e3
commit 93ad572e19
202 changed files with 13517 additions and 7951 deletions
--- a/pkg/apis/addtoscheme_tenant_v1alpha1.go
+++ b/pkg/apis/addtoscheme_tenant_v1alpha1.go
@@ -0,0 +1,10 @@
+package apis
+
+import (
+	"kubesphere.io/kubesphere/pkg/apis/tenant/v1alpha1"
+)
+
+func init() {
+	// Register the types with the Scheme so the components can map objects to GroupVersionKinds and back
+	AddToSchemes = append(AddToSchemes, v1alpha1.SchemeBuilder.AddToScheme)
+}
--- a/pkg/apis/iam/v1alpha2/register.go
+++ b/pkg/apis/iam/v1alpha2/register.go
@@ -20,7 +20,6 @@ package v1alpha2
 import (
 	"github.com/emicklei/go-restful"
 	"github.com/emicklei/go-restful-openapi"
-	"k8s.io/api/core/v1"
 	"k8s.io/apimachinery/pkg/runtime/schema"
 	"kubesphere.io/kubesphere/pkg/apiserver/iam"
 	"kubesphere.io/kubesphere/pkg/apiserver/runtime"
@@ -46,6 +45,7 @@ func addWebService(c *restful.Container) error {
 		Doc("Token review").
 		Reads(iam.TokenReview{}).
 		Writes(iam.TokenReview{}).
+		Doc("k8s token review").
 		Metadata(restfulspec.KeyOpenAPITags, tags))
 	ws.Route(ws.POST("/login").
 		To(iam.LoginHandler).
@@ -53,10 +53,10 @@ func addWebService(c *restful.Container) error {
 		Reads(iam.LoginRequest{}).
 		Writes(models.Token{}).
 		Metadata(restfulspec.KeyOpenAPITags, tags))
-
-	ws.Route(ws.GET("/users/{name}").
-		To(iam.UserDetail).
+	ws.Route(ws.GET("/users/{username}").
+		To(iam.DescribeUser).
 		Doc("User detail").
+		Param(ws.PathParameter("username", "username")).
 		Writes(models.User{}).
 		Metadata(restfulspec.KeyOpenAPITags, tags))
 	ws.Route(ws.POST("/users").
@@ -67,11 +67,13 @@ func addWebService(c *restful.Container) error {
 		Metadata(restfulspec.KeyOpenAPITags, tags))
 	ws.Route(ws.DELETE("/users/{name}").
 		To(iam.DeleteUser).
+		Param(ws.PathParameter("name", "username")).
 		Doc("Delete user").
 		Writes(errors.Error{}).
 		Metadata(restfulspec.KeyOpenAPITags, tags))
 	ws.Route(ws.PUT("/users/{name}").
 		To(iam.UpdateUser).
+		Param(ws.PathParameter("name", "username")).
 		Reads(models.User{}).
 		Writes(errors.Error{}).
 		Doc("Update user").
@@ -79,26 +81,29 @@ func addWebService(c *restful.Container) error {

 	ws.Route(ws.GET("/users/{name}/log").
 		To(iam.UserLoginLog).
+		Param(ws.PathParameter("name", "username")).
 		Doc("User login log").
 		Writes([]map[string]string{}).
 		Metadata(restfulspec.KeyOpenAPITags, tags))
 	ws.Route(ws.GET("/users").
-		To(iam.UserList).
+		To(iam.ListUsers).
 		Doc("User list").
 		Writes(models.PageableResponse{}).
 		Metadata(restfulspec.KeyOpenAPITags, tags))
 	ws.Route(ws.GET("/groups").
-		To(iam.RootGroupList).
+		To(iam.ListGroups).
 		Writes([]models.Group{}).
 		Doc("User group list").
 		Metadata(restfulspec.KeyOpenAPITags, tags))

 	ws.Route(ws.GET("/groups/{path}").
-		To(iam.GroupDetail).
+		To(iam.DescribeGroup).
+		Param(ws.PathParameter("path", "group path")).
 		Doc("User group detail").
 		Metadata(restfulspec.KeyOpenAPITags, tags))
 	ws.Route(ws.GET("/groups/{path}/users").
-		To(iam.GroupUsers).
+		To(iam.ListGroupUsers).
+		Param(ws.PathParameter("path", "group path")).
 		Doc("Group user list").
 		Metadata(restfulspec.KeyOpenAPITags, tags))
 	ws.Route(ws.POST("/groups").
@@ -108,139 +113,108 @@ func addWebService(c *restful.Container) error {
 		Metadata(restfulspec.KeyOpenAPITags, tags))
 	ws.Route(ws.DELETE("/groups/{path}").
 		To(iam.DeleteGroup).
+		Param(ws.PathParameter("path", "group path")).
 		Doc("Delete user group").
 		Metadata(restfulspec.KeyOpenAPITags, tags))
 	ws.Route(ws.PUT("/groups/{path}").
 		To(iam.UpdateGroup).
+		Param(ws.PathParameter("path", "group path")).
 		Doc("Update user group").
 		Metadata(restfulspec.KeyOpenAPITags, tags))
 	ws.Route(ws.GET("/users/{username}/roles").
-		To(iam.UserRoles).
+		To(iam.ListUserRoles).
+		Param(ws.PathParameter("username", "username")).
 		Doc("Get user role list").
 		Metadata(restfulspec.KeyOpenAPITags, tags))
+	ws.Route(ws.GET("/namespaces/{namespace}/roles").
+		To(iam.ListRoles).
+		Param(ws.PathParameter("namespace", "namespace")).
+		Doc("Get role list").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
+	ws.Route(ws.GET("/clusterroles").
+		To(iam.ListClusterRoles).
+		Doc("Get cluster role list").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
 	ws.Route(ws.GET("/namespaces/{namespace}/roles/{role}/users").
-		To(iam.RoleUsers).
+		To(iam.ListRoleUsers).
+		Param(ws.PathParameter("namespace", "namespace")).
+		Param(ws.PathParameter("role", "role name")).
 		Doc("Get user list by role").
 		Metadata(restfulspec.KeyOpenAPITags, tags))
-	ws.Route(ws.GET("/namespaces/{namespace}/roles/{role}/rules").
-		To(iam.RoleRules).
-		Doc("Get role detail").
-		Metadata(restfulspec.KeyOpenAPITags, tags))
 	ws.Route(ws.GET("/namespaces/{namespace}/users").
-		To(iam.NamespaceUsers).
+		To(iam.ListNamespaceUsers).
+		Param(ws.PathParameter("namespace", "namespace")).
 		Doc("Get user list by namespace").
 		Metadata(restfulspec.KeyOpenAPITags, tags))
 	ws.Route(ws.GET("/clusterroles/{clusterrole}/users").
-		To(iam.ClusterRoleUsers).
+		To(iam.ListClusterRoleUsers).
+		Param(ws.PathParameter("clusterrole", "cluster role name")).
 		Doc("Get user list by cluster role").
 		Metadata(restfulspec.KeyOpenAPITags, tags))
 	ws.Route(ws.GET("/clusterroles/{clusterrole}/rules").
-		To(iam.ClusterRoleRules).
+		To(iam.ListClusterRoleRules).
+		Param(ws.PathParameter("clusterrole", "cluster role name")).
 		Doc("Get cluster role detail").
 		Metadata(restfulspec.KeyOpenAPITags, tags))
 	ws.Route(ws.GET("/rulesmapping/clusterroles").
-		To(iam.ClusterRulesMappingHandler).
+		To(iam.ClusterRulesMapping).
 		Doc("Get cluster role policy rules mapping").
 		Metadata(restfulspec.KeyOpenAPITags, tags))
 	ws.Route(ws.GET("/rulesmapping/roles").
-		To(iam.RulesMappingHandler).
+		To(iam.RulesMapping).
 		Doc("Get role policy rules mapping").
 		Metadata(restfulspec.KeyOpenAPITags, tags))

-	ws.Route(ws.GET("/workspaces/{workspace}/rules").
-		To(iam.WorkspaceRulesHandler).
-		Doc("Get workspace level policy rules").
+	ws.Route(ws.GET("/workspaces/{workspace}/roles").
+		To(iam.ListWorkspaceRoles).
+		Param(ws.PathParameter("workspace", "workspace name")).
+		Doc("List workspace role").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
+	ws.Route(ws.GET("/workspaces/{workspace}/roles/{role}").
+		To(iam.DescribeWorkspaceRole).
+		Param(ws.PathParameter("workspace", "workspace name")).
+		Param(ws.PathParameter("role", "workspace role name")).
+		Doc("Describe workspace role").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
+	ws.Route(ws.GET("/workspaces/{workspace}/roles/{role}/rules").
+		To(iam.ListWorkspaceRoleRules).
+		Param(ws.PathParameter("workspace", "workspace name")).
+		Param(ws.PathParameter("role", "workspace role name")).
+		Doc("Get workspace role policy rules").
 		Metadata(restfulspec.KeyOpenAPITags, tags))
 	ws.Route(ws.GET("/workspaces/{workspace}/members").
-		To(iam.WorkspaceMemberList).
+		To(iam.ListWorkspaceUsers).
+		Param(ws.PathParameter("workspace", "workspace name")).
 		Doc("Get workspace member list").
 		Metadata(restfulspec.KeyOpenAPITags, tags))
-	ws.Route(ws.GET("/namespaces/{namespace}/rules").
-		To(iam.NamespacesRulesHandler).
-		Doc("Get namespace level policy rules").
-		Metadata(restfulspec.KeyOpenAPITags, tags))
-	ws.Route(ws.GET("/devops/{devops}/rules").
-		To(iam.DevopsRulesHandler).
-		Doc("Get devops project level policy rules").
-		Metadata(restfulspec.KeyOpenAPITags, tags))
-
-	tags = []string{"Workspace"}
-
-	ws.Route(ws.GET("/workspaces").
-		To(iam.UserWorkspaceListHandler).
-		Doc("Get workspace list").
-		Metadata(restfulspec.KeyOpenAPITags, tags).
-		Writes([]models.Workspace{}))
-	ws.Route(ws.POST("/workspaces").
-		To(iam.WorkspaceCreateHandler).
-		Doc("Create workspace").
-		Metadata(restfulspec.KeyOpenAPITags, tags).
-		Writes(models.Workspace{}))
-	ws.Route(ws.DELETE("/workspaces/{name}").
-		To(iam.DeleteWorkspaceHandler).
-		Doc("Delete workspace").
-		Metadata(restfulspec.KeyOpenAPITags, tags).
-		Writes(errors.Error{}))
-	ws.Route(ws.GET("/workspaces/{name}").
-		To(iam.WorkspaceDetailHandler).
-		Doc("Get workspace detail").
-		Metadata(restfulspec.KeyOpenAPITags, tags).
-		Writes(models.Workspace{}))
-	ws.Route(ws.PUT("/workspaces/{name}").
-		To(iam.WorkspaceEditHandler).
-		Doc("Update workspace").
-		Metadata(restfulspec.KeyOpenAPITags, tags).
-		Writes(models.Workspace{}))
-
-	ws.Route(ws.GET("/workspaces/{name}/members/{member}").
-		To(iam.WorkspaceMemberDetail).
-		Doc("Get workspace member detail").
-		Metadata(restfulspec.KeyOpenAPITags, tags))
-	ws.Route(ws.GET("/workspaces/{name}/roles").
-		To(iam.WorkspaceRoles).
-		Doc("Get workspace roles").
-		Metadata(restfulspec.KeyOpenAPITags, tags))
-
-	ws.Route(ws.POST("/workspaces/{name}/members").
-		To(iam.WorkspaceMemberInvite).
+	ws.Route(ws.POST("/workspaces/{workspace}/members").
+		To(iam.InviteUser).
+		Param(ws.PathParameter("workspace", "workspace name")).
 		Doc("Add user to workspace").
 		Metadata(restfulspec.KeyOpenAPITags, tags))
-	ws.Route(ws.DELETE("/workspaces/{name}/members").
-		To(iam.WorkspaceMemberRemove).
-		Doc("Delete user from workspace").
+	ws.Route(ws.POST("/workspaces/{workspace}/members").
+		To(iam.RemoveUser).
+		Param(ws.PathParameter("workspace", "workspace name")).
+		Doc("Remove user from workspace").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
+	ws.Route(ws.GET("/workspaces/{workspace}/members/{username}").
+		To(iam.DescribeWorkspaceUser).
+		Param(ws.PathParameter("workspace", "workspace name")).
+		Param(ws.PathParameter("username", "username")).
+		Doc("Describe user in workspace").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
+	ws.Route(ws.GET("/namespaces/{namespace}/roles/{role}/rules").
+		To(iam.ListRoleRules).
+		Param(ws.PathParameter("namespace", "namespace")).
+		Param(ws.PathParameter("role", "role name")).
+		Doc("Get namespace role policy rules").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
+	ws.Route(ws.GET("/devops/{devops}/roles/{role}/rules").
+		To(iam.ListDevopsRoleRules).
+		Param(ws.PathParameter("devops", "devops project id")).
+		Param(ws.PathParameter("role", "devops role name")).
+		Doc("Get devops role policy rules").
 		Metadata(restfulspec.KeyOpenAPITags, tags))
-
-	tags = []string{"unstable"}
-
-	ws.Route(ws.GET("/workspaces/{workspace}/namespaces").
-		To(iam.UserNamespaceListHandler).
-		Doc("Get namespace list").
-		Metadata(restfulspec.KeyOpenAPITags, tags).
-		Writes(models.PageableResponse{}))
-	ws.Route(ws.POST("/workspaces/{name}/namespaces").
-		To(iam.NamespaceCreateHandler).
-		Doc("Create namespace").
-		Metadata(restfulspec.KeyOpenAPITags, tags).
-		Writes(v1.Namespace{}))
-	ws.Route(ws.DELETE("/workspaces/{name}/namespaces/{namespace}").To(iam.NamespaceDeleteHandler).Metadata(restfulspec.KeyOpenAPITags, tags))
-	ws.Route(ws.GET("/workspaces/{name}/namespaces/{namespace}").To(iam.NamespaceCheckHandler).Metadata(restfulspec.KeyOpenAPITags, tags))
-	ws.Route(ws.GET("/namespaces/{namespace}").To(iam.NamespaceCheckHandler))
-
-	// TODO move to /apis/resources.kubesphere.io/workspaces/{workspace}/members/{username}
-	ws.Route(ws.GET("/workspaces/{workspace}/members/{username}/namespaces").To(iam.NamespacesListHandler).Metadata(restfulspec.KeyOpenAPITags, tags))
-	ws.Route(ws.GET("/workspaces/{name}/members/{username}/devops").To(iam.DevOpsProjectHandler).Metadata(restfulspec.KeyOpenAPITags, tags))
-	// TODO /workspaces/{name}/roles/{role}
-	ws.Route(ws.GET("/workspaces/{name}/roles/{role}").To(iam.WorkspaceRoles).Metadata(restfulspec.KeyOpenAPITags, tags))
-	// TODO move to /apis/resources.kubesphere.io/devops
-	ws.Route(ws.GET("/workspaces/{name}/devops").To(iam.DevOpsProjectHandler).Metadata(restfulspec.KeyOpenAPITags, tags))
-	ws.Route(ws.POST("/workspaces/{name}/devops").To(iam.DevOpsProjectCreateHandler).Metadata(restfulspec.KeyOpenAPITags, tags))
-	ws.Route(ws.DELETE("/workspaces/{name}/devops/{id}").To(iam.DevOpsProjectDeleteHandler).Metadata(restfulspec.KeyOpenAPITags, tags))
-
-	// TODO  merge into /groups
-	ws.Route(ws.GET("/groups/count").To(iam.CountHandler).Metadata(restfulspec.KeyOpenAPITags, tags))
-
-	ws.Route(ws.GET("/users/{name}/namespaces").To(iam.NamespacesListHandler).Metadata(restfulspec.KeyOpenAPITags, tags))
-
 	c.Add(ws)
 	return nil
 }
--- a/pkg/apis/logging/v1alpha2/register.go
+++ b/pkg/apis/logging/v1alpha2/register.go
@@ -214,4 +214,4 @@ func addWebService(c *restful.Container) error {

 	c.Add(ws)
 	return nil
-}
+}
--- a/pkg/apis/resources/v1alpha2/register.go
+++ b/pkg/apis/resources/v1alpha2/register.go
@@ -52,7 +52,7 @@ func addWebService(c *restful.Container) error {
 	tags := []string{"Namespace resources"}

 	webservice.Route(webservice.GET("/namespaces/{namespace}/{resources}").
-		To(resources.NamespaceResourceHandler).
+		To(resources.ListResources).
 		Metadata(restfulspec.KeyOpenAPITags, tags).
 		Doc("Namespace level resource query").
 		Param(webservice.PathParameter("namespace", "which namespace")).
@@ -69,7 +69,7 @@ func addWebService(c *restful.Container) error {
 	tags = []string{"Cluster resources"}

 	webservice.Route(webservice.GET("/{resources}").
-		To(resources.ClusterResourceHandler).
+		To(resources.ListResources).
 		Writes(models.PageableResponse{}).
 		Metadata(restfulspec.KeyOpenAPITags, tags).
 		Doc("Cluster level resource query").
@@ -196,26 +196,19 @@ func addWebService(c *restful.Container) error {

 	webservice.Route(webservice.GET("/routers").
 		To(routers.GetAllRouters).
-		Doc("Get all routers").
+		Doc("List all routers").
 		Metadata(restfulspec.KeyOpenAPITags, tags).
 		Writes(corev1.Service{}))

-	webservice.Route(webservice.GET("/users/{username}/routers").
-		To(routers.GetAllRoutersOfUser).
-		Doc("Get routers for user").
-		Metadata(restfulspec.KeyOpenAPITags, tags).
-		Param(webservice.PathParameter("username", "")).
-		Writes(corev1.Service{}))
-
 	webservice.Route(webservice.GET("/namespaces/{namespace}/router").
 		To(routers.GetRouter).
-		Doc("Get router of a specified project").
+		Doc("List router of a specified project").
 		Metadata(restfulspec.KeyOpenAPITags, tags).
 		Param(webservice.PathParameter("namespace", "name of the project")))

 	webservice.Route(webservice.DELETE("/namespaces/{namespace}/router").
 		To(routers.DeleteRouter).
-		Doc("Get router of a specified project").
+		Doc("List router of a specified project").
 		Metadata(restfulspec.KeyOpenAPITags, tags).
 		Param(webservice.PathParameter("namespace", "name of the project")))

--- a/pkg/apis/tenant/group.go
+++ b/pkg/apis/tenant/group.go
@@ -0,0 +1,20 @@
+/*
+
+ Copyright 2019 The KubeSphere Authors.
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+*/
+
+// Package tenant contains tenant API versions
+package tenant
--- a/pkg/apis/tenant/install/install.go
+++ b/pkg/apis/tenant/install/install.go
@@ -0,0 +1,33 @@
+/*
+
+ Copyright 2019 The KubeSphere Authors.
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+*/
+package install
+
+import (
+	"github.com/emicklei/go-restful"
+	urlruntime "k8s.io/apimachinery/pkg/util/runtime"
+	tenantv1alpha2 "kubesphere.io/kubesphere/pkg/apis/tenant/v1alpha2"
+	"kubesphere.io/kubesphere/pkg/apiserver/runtime"
+)
+
+func init() {
+	Install(runtime.Container)
+}
+
+func Install(container *restful.Container) {
+	urlruntime.Must(tenantv1alpha2.AddToContainer(container))
+}
--- a/pkg/apis/tenant/v1alpha1/doc.go
+++ b/pkg/apis/tenant/v1alpha1/doc.go
@@ -0,0 +1,25 @@
+/*
+
+ Copyright 2019 The KubeSphere Authors.
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+*/
+
+// Package v1alpha1 contains API Schema definitions for the tenant v1alpha1 API group
+// +k8s:openapi-gen=true
+// +k8s:deepcopy-gen=package,register
+// +k8s:conversion-gen=kubesphere.io/kubesphere/pkg/apis/tenant
+// +k8s:defaulter-gen=TypeMeta
+// +groupName=tenant.kubesphere.io
+package v1alpha1
--- a/pkg/apis/tenant/v1alpha1/register.go
+++ b/pkg/apis/tenant/v1alpha1/register.go
@@ -0,0 +1,48 @@
+/*
+
+ Copyright 2019 The KubeSphere Authors.
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+*/
+
+// NOTE: Boilerplate only.  Ignore this file.
+
+// Package v1alpha1 contains API Schema definitions for the tenant v1alpha1 API group
+// +k8s:openapi-gen=true
+// +k8s:deepcopy-gen=package,register
+// +k8s:conversion-gen=kubesphere.io/kubesphere/pkg/apis/tenant
+// +k8s:defaulter-gen=TypeMeta
+// +groupName=tenant.kubesphere.io
+package v1alpha1
+
+import (
+	"k8s.io/apimachinery/pkg/runtime/schema"
+	"sigs.k8s.io/controller-runtime/pkg/runtime/scheme"
+)
+
+var (
+	// SchemeGroupVersion is group version used to register these objects
+	SchemeGroupVersion = schema.GroupVersion{Group: "tenant.kubesphere.io", Version: "v1alpha1"}
+
+	// SchemeBuilder is used to add go types to the GroupVersionKind scheme
+	SchemeBuilder = &scheme.Builder{GroupVersion: SchemeGroupVersion}
+
+	// AddToScheme is required by pkg/client/...
+	AddToScheme = SchemeBuilder.AddToScheme
+)
+
+// Resource is required by pkg/client/listers/...
+func Resource(resource string) schema.GroupResource {
+	return SchemeGroupVersion.WithResource(resource).GroupResource()
+}
--- a/pkg/apis/tenant/v1alpha1/v1alpha1_suite_test.go
+++ b/pkg/apis/tenant/v1alpha1/v1alpha1_suite_test.go
@@ -0,0 +1,57 @@
+/*
+
+ Copyright 2019 The KubeSphere Authors.
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+*/
+
+package v1alpha1
+
+import (
+	"log"
+	"os"
+	"path/filepath"
+	"testing"
+
+	"k8s.io/client-go/kubernetes/scheme"
+	"k8s.io/client-go/rest"
+	"sigs.k8s.io/controller-runtime/pkg/client"
+	"sigs.k8s.io/controller-runtime/pkg/envtest"
+)
+
+var cfg *rest.Config
+var c client.Client
+
+func TestMain(m *testing.M) {
+	t := &envtest.Environment{
+		CRDDirectoryPaths: []string{filepath.Join("..", "..", "..", "..", "config", "crds")},
+	}
+
+	err := SchemeBuilder.AddToScheme(scheme.Scheme)
+	if err != nil {
+		log.Fatal(err)
+	}
+
+	if cfg, err = t.Start(); err != nil {
+		log.Fatal(err)
+	}
+
+	if c, err = client.New(cfg, client.Options{Scheme: scheme.Scheme}); err != nil {
+		log.Fatal(err)
+	}
+
+	code := m.Run()
+	t.Stop()
+	os.Exit(code)
+}
--- a/pkg/apis/tenant/v1alpha1/workspace_types.go
+++ b/pkg/apis/tenant/v1alpha1/workspace_types.go
@@ -0,0 +1,67 @@
+/*
+
+ Copyright 2019 The KubeSphere Authors.
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+*/
+
+package v1alpha1
+
+import (
+	"k8s.io/api/core/v1"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+)
+
+// EDIT THIS FILE!  THIS IS SCAFFOLDING FOR YOU TO OWN!
+// NOTE: json tags are required.  Any new fields you add must have json tags for the fields to be serialized.
+
+// WorkspaceSpec defines the desired state of Workspace
+type WorkspaceSpec struct {
+	Manager string               `json:"manager,omitempty"`
+	Quotas  v1.ResourceQuotaSpec `json:"quotas,omitempty"`
+}
+
+// WorkspaceStatus defines the observed state of Workspace
+type WorkspaceStatus struct {
+	// INSERT ADDITIONAL STATUS FIELD - define observed state of cluster
+	// Important: Run "make" to regenerate code after modifying this file
+	Quotas v1.ResourceQuotaStatus `json:"quotas,omitempty"`
+}
+
+// +genclient
+// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
+// +genclient:nonNamespaced
+
+// Workspace is the Schema for the workspaces API
+// +k8s:openapi-gen=true
+type Workspace struct {
+	metav1.TypeMeta   `json:",inline"`
+	metav1.ObjectMeta `json:"metadata,omitempty"`
+	Spec              WorkspaceSpec   `json:"spec,omitempty"`
+	Status            WorkspaceStatus `json:"status,omitempty"`
+}
+
+// +k8s:deepcopy-gen:interfaces=k8s.io/apimachinery/pkg/runtime.Object
+// +genclient:nonNamespaced
+
+// WorkspaceList contains a list of Workspace
+type WorkspaceList struct {
+	metav1.TypeMeta `json:",inline"`
+	metav1.ListMeta `json:"metadata,omitempty"`
+	Items           []Workspace `json:"items"`
+}
+
+func init() {
+	SchemeBuilder.Register(&Workspace{}, &WorkspaceList{})
+}
--- a/pkg/apis/tenant/v1alpha1/workspace_types_test.go
+++ b/pkg/apis/tenant/v1alpha1/workspace_types_test.go
@@ -0,0 +1,58 @@
+/*
+
+ Copyright 2019 The KubeSphere Authors.
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+*/
+
+package v1alpha1
+
+import (
+	"testing"
+
+	"github.com/onsi/gomega"
+	"golang.org/x/net/context"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	"k8s.io/apimachinery/pkg/types"
+)
+
+func TestStorageWorkspace(t *testing.T) {
+	key := types.NamespacedName{
+		Name: "foo",
+	}
+	created := &Workspace{
+		ObjectMeta: metav1.ObjectMeta{
+			Name: "foo",
+		}}
+	g := gomega.NewGomegaWithT(t)
+
+	// Test Create
+	fetched := &Workspace{}
+	g.Expect(c.Create(context.TODO(), created)).NotTo(gomega.HaveOccurred())
+
+	g.Expect(c.Get(context.TODO(), key, fetched)).NotTo(gomega.HaveOccurred())
+	g.Expect(fetched).To(gomega.Equal(created))
+
+	// Test Updating the Labels
+	updated := fetched.DeepCopy()
+	updated.Labels = map[string]string{"hello": "world"}
+	g.Expect(c.Update(context.TODO(), updated)).NotTo(gomega.HaveOccurred())
+
+	g.Expect(c.Get(context.TODO(), key, fetched)).NotTo(gomega.HaveOccurred())
+	g.Expect(fetched).To(gomega.Equal(updated))
+
+	// Test Delete
+	g.Expect(c.Delete(context.TODO(), fetched)).NotTo(gomega.HaveOccurred())
+	g.Expect(c.Get(context.TODO(), key, fetched)).To(gomega.HaveOccurred())
+}
--- a/pkg/apis/tenant/v1alpha1/zz_generated.deepcopy.go
+++ b/pkg/apis/tenant/v1alpha1/zz_generated.deepcopy.go
@@ -0,0 +1,120 @@
+// +build !ignore_autogenerated
+
+/*
+Copyright The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by deepcopy-gen. DO NOT EDIT.
+
+package v1alpha1
+
+import (
+	"k8s.io/apimachinery/pkg/runtime"
+)
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *Workspace) DeepCopyInto(out *Workspace) {
+	*out = *in
+	out.TypeMeta = in.TypeMeta
+	in.ObjectMeta.DeepCopyInto(&out.ObjectMeta)
+	in.Spec.DeepCopyInto(&out.Spec)
+	in.Status.DeepCopyInto(&out.Status)
+	return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Workspace.
+func (in *Workspace) DeepCopy() *Workspace {
+	if in == nil {
+		return nil
+	}
+	out := new(Workspace)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
+func (in *Workspace) DeepCopyObject() runtime.Object {
+	if c := in.DeepCopy(); c != nil {
+		return c
+	}
+	return nil
+}
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *WorkspaceList) DeepCopyInto(out *WorkspaceList) {
+	*out = *in
+	out.TypeMeta = in.TypeMeta
+	out.ListMeta = in.ListMeta
+	if in.Items != nil {
+		in, out := &in.Items, &out.Items
+		*out = make([]Workspace, len(*in))
+		for i := range *in {
+			(*in)[i].DeepCopyInto(&(*out)[i])
+		}
+	}
+	return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new WorkspaceList.
+func (in *WorkspaceList) DeepCopy() *WorkspaceList {
+	if in == nil {
+		return nil
+	}
+	out := new(WorkspaceList)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
+func (in *WorkspaceList) DeepCopyObject() runtime.Object {
+	if c := in.DeepCopy(); c != nil {
+		return c
+	}
+	return nil
+}
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *WorkspaceSpec) DeepCopyInto(out *WorkspaceSpec) {
+	*out = *in
+	in.Quotas.DeepCopyInto(&out.Quotas)
+	return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new WorkspaceSpec.
+func (in *WorkspaceSpec) DeepCopy() *WorkspaceSpec {
+	if in == nil {
+		return nil
+	}
+	out := new(WorkspaceSpec)
+	in.DeepCopyInto(out)
+	return out
+}
+
+// DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
+func (in *WorkspaceStatus) DeepCopyInto(out *WorkspaceStatus) {
+	*out = *in
+	in.Quotas.DeepCopyInto(&out.Quotas)
+	return
+}
+
+// DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new WorkspaceStatus.
+func (in *WorkspaceStatus) DeepCopy() *WorkspaceStatus {
+	if in == nil {
+		return nil
+	}
+	out := new(WorkspaceStatus)
+	in.DeepCopyInto(out)
+	return out
+}
--- a/pkg/apis/tenant/v1alpha2/register.go
+++ b/pkg/apis/tenant/v1alpha2/register.go
@@ -0,0 +1,107 @@
+/*
+
+ Copyright 2019 The KubeSphere Authors.
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+*/
+package v1alpha2
+
+import (
+	"github.com/emicklei/go-restful"
+	"github.com/emicklei/go-restful-openapi"
+	"k8s.io/apimachinery/pkg/runtime/schema"
+	"kubesphere.io/kubesphere/pkg/apiserver/runtime"
+	"kubesphere.io/kubesphere/pkg/apiserver/tenant"
+)
+
+const GroupName = "tenant.kubesphere.io"
+
+var GroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1alpha2"}
+
+var (
+	WebServiceBuilder = runtime.NewContainerBuilder(addWebService)
+	AddToContainer    = WebServiceBuilder.AddToContainer
+)
+
+func addWebService(c *restful.Container) error {
+	tags := []string{"Tenant"}
+	ws := runtime.NewWebService(GroupVersion)
+
+	ws.Route(ws.GET("/workspaces").
+		To(tenant.ListWorkspaces).
+		Doc("List workspace by user").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
+	ws.Route(ws.GET("/workspaces/{workspace}/rules").
+		To(tenant.ListWorkspaceRules).
+		Param(ws.PathParameter("workspace", "workspace name")).
+		Doc("List the rules for the current user").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
+	ws.Route(ws.GET("/namespaces/{namespace}/rules").
+		To(tenant.ListNamespaceRules).
+		Param(ws.PathParameter("namespace", "namespace")).
+		Doc("List the rules for the current user").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
+	ws.Route(ws.GET("/devops/{devops}/rules").
+		To(tenant.ListDevopsRules).
+		Param(ws.PathParameter("devops", "devops project id")).
+		Doc("List the rules for the current user").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
+	ws.Route(ws.GET("/workspaces/{workspace}/namespaces").
+		To(tenant.ListNamespaces).
+		Param(ws.PathParameter("workspace", "workspace name")).
+		Doc("List the namespaces for the current user").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
+	ws.Route(ws.GET("/workspaces/{workspace}/members/{username}/namespaces").
+		To(tenant.ListNamespaces).
+		Param(ws.PathParameter("workspace", "workspace name")).
+		Param(ws.PathParameter("username", "workspace member's username")).
+		Doc("List the namespaces for the workspace member").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
+	ws.Route(ws.POST("/workspaces/{workspace}/namespaces").
+		To(tenant.CreateNamespace).
+		Param(ws.PathParameter("workspace", "workspace name")).
+		Doc("Create namespace").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
+	ws.Route(ws.DELETE("/workspaces/{workspace}/namespaces/{namespace}").
+		To(tenant.DeleteNamespace).
+		Param(ws.PathParameter("workspace", "workspace name")).
+		Param(ws.PathParameter("namespace", "namespace")).
+		Doc("Delete namespace").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
+
+	ws.Route(ws.GET("/workspaces/{workspace}/devops").
+		To(tenant.ListDevopsProjects).
+		Param(ws.PathParameter("workspace", "workspace name")).
+		Doc("List devops projects for the current user").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
+	ws.Route(ws.GET("/workspaces/{workspace}/members/{username}/devops").
+		To(tenant.ListDevopsProjects).
+		Param(ws.PathParameter("workspace", "workspace name")).
+		Param(ws.PathParameter("username", "workspace member's username")).
+		Doc("List the devops projects for the workspace member").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
+	ws.Route(ws.POST("/workspaces/{workspace}/devops").
+		To(tenant.CreateDevopsProject).
+		Param(ws.PathParameter("workspace", "workspace name")).
+		Doc("Create devops project").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
+	ws.Route(ws.DELETE("/workspaces/{workspace}/devops").
+		To(tenant.DeleteDevopsProject).
+		Param(ws.PathParameter("workspace", "workspace name")).
+		Doc("Delete devops project").
+		Metadata(restfulspec.KeyOpenAPITags, tags))
+
+	c.Add(ws)
+	return nil
+}
--- a/pkg/apis/terminal/install/install.go
+++ b/pkg/apis/terminal/install/install.go
@@ -0,0 +1,33 @@
+/*
+
+ Copyright 2019 The KubeSphere Authors.
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+*/
+package install
+
+import (
+	"github.com/emicklei/go-restful"
+	urlruntime "k8s.io/apimachinery/pkg/util/runtime"
+	terminalv1alpha2 "kubesphere.io/kubesphere/pkg/apis/terminal/v1alpha2"
+	"kubesphere.io/kubesphere/pkg/apiserver/runtime"
+)
+
+func init() {
+	Install(runtime.Container)
+}
+
+func Install(c *restful.Container) {
+	urlruntime.Must(terminalv1alpha2.AddToContainer(c))
+}
--- a/pkg/apis/terminal/v1alpha2/register.go
+++ b/pkg/apis/terminal/v1alpha2/register.go
@@ -0,0 +1,56 @@
+/*
+
+ Copyright 2019 The KubeSphere Authors.
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+*/
+package v1alpha2
+
+import (
+	"github.com/emicklei/go-restful"
+	"github.com/emicklei/go-restful-openapi"
+	"k8s.io/apimachinery/pkg/runtime/schema"
+	"kubesphere.io/kubesphere/pkg/apiserver/runtime"
+	"kubesphere.io/kubesphere/pkg/apiserver/terminal"
+	"kubesphere.io/kubesphere/pkg/models"
+)
+
+const GroupName = "terminal.kubesphere.io"
+
+var GroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1alpha2"}
+
+var (
+	WebServiceBuilder = runtime.NewContainerBuilder(addWebService)
+	AddToContainer    = WebServiceBuilder.AddToContainer
+)
+
+func addWebService(c *restful.Container) error {
+
+	webservice := runtime.NewWebService(GroupVersion)
+
+	tags := []string{"Terminal"}
+
+	webservice.Route(webservice.GET("/namespace/{namespace}/pods/{pods}").
+		To(terminal.CreateTerminalSession).
+		Doc("create terminal session").
+		Metadata(restfulspec.KeyOpenAPITags, tags).
+		Writes(models.PodInfo{}))
+
+	path := runtime.ApiRootPath + "/" + GroupVersion.String() + "/sockjs"
+	c.Handle(path, terminal.NewTerminalHandler(path))
+
+	c.Add(webservice)
+
+	return nil
+}