refine tenant api

Signed-off-by: hongming <talonwan@yunify.com>
2019-04-01 02:59:19 +08:00
parent 744bd053e3
commit 93ad572e19
202 changed files with 13517 additions and 7951 deletions
--- a/pkg/models/tenant/devops.go
+++ b/pkg/models/tenant/devops.go
@@ -0,0 +1,119 @@
+/*
+
+ Copyright 2019 The KubeSphere Authors.
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+*/
+package tenant
+
+import (
+	"encoding/json"
+	"fmt"
+	"io/ioutil"
+	"kubesphere.io/kubesphere/pkg/constants"
+	kserr "kubesphere.io/kubesphere/pkg/errors"
+	"kubesphere.io/kubesphere/pkg/models"
+	"kubesphere.io/kubesphere/pkg/params"
+	"kubesphere.io/kubesphere/pkg/simple/client/mysql"
+	"net/http"
+	"sort"
+	"strings"
+)
+
+func ListDevopsProjects(workspace, username string, conditions *params.Conditions, orderBy string, reverse bool, limit int, offset int) (*models.PageableResponse, error) {
+
+	db := mysql.Client()
+
+	var workspaceDOPBindings []models.WorkspaceDPBinding
+
+	if err := db.Where("workspace = ?", workspace).Find(&workspaceDOPBindings).Error; err != nil {
+		return nil, err
+	}
+
+	devOpsProjects := make([]models.DevopsProject, 0)
+
+	request, _ := http.NewRequest(http.MethodGet, fmt.Sprintf("http://%s/api/v1alpha/projects", constants.DevopsAPIServer), nil)
+	request.Header.Add(constants.UserNameHeader, username)
+
+	resp, err := http.DefaultClient.Do(request)
+	if err != nil {
+		return nil, err
+	}
+	defer resp.Body.Close()
+	data, err := ioutil.ReadAll(resp.Body)
+
+	if err != nil {
+		return nil, err
+	}
+
+	if resp.StatusCode > 200 {
+		return nil, kserr.Parse(data)
+	}
+
+	err = json.Unmarshal(data, &devOpsProjects)
+
+	if err != nil {
+		return nil, err
+	}
+
+	if keyword := conditions.Match["keyword"]; keyword != "" {
+		for i := 0; i < len(devOpsProjects); i++ {
+			if !strings.Contains(devOpsProjects[i].Name, keyword) {
+				devOpsProjects = append(devOpsProjects[:i], devOpsProjects[i+1:]...)
+				i--
+			}
+		}
+	}
+
+	sort.Slice(devOpsProjects, func(i, j int) bool {
+		switch orderBy {
+		case "name":
+			if reverse {
+				return devOpsProjects[i].Name < devOpsProjects[j].Name
+			} else {
+				return devOpsProjects[i].Name > devOpsProjects[j].Name
+			}
+		default:
+			if reverse {
+				return devOpsProjects[i].CreateTime.After(*devOpsProjects[j].CreateTime)
+			} else {
+				return devOpsProjects[i].CreateTime.Before(*devOpsProjects[j].CreateTime)
+			}
+		}
+	})
+
+	for i := 0; i < len(devOpsProjects); i++ {
+		inWorkspace := false
+
+		for _, binding := range workspaceDOPBindings {
+			if binding.DevOpsProject == *devOpsProjects[i].ProjectId {
+				inWorkspace = true
+			}
+		}
+		if !inWorkspace {
+			devOpsProjects = append(devOpsProjects[:i], devOpsProjects[i+1:]...)
+			i--
+		}
+	}
+
+	// limit offset
+	result := make([]interface{}, 0)
+	for i, v := range devOpsProjects {
+		if len(result) < limit && i >= offset {
+			result = append(result, v)
+		}
+	}
+
+	return &models.PageableResponse{Items: result, TotalCount: len(devOpsProjects)}, nil
+}
--- a/pkg/models/tenant/namespaces.go
+++ b/pkg/models/tenant/namespaces.go
@@ -0,0 +1,134 @@
+/*
+
+ Copyright 2019 The KubeSphere Authors.
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+*/
+package tenant
+
+import (
+	"k8s.io/api/core/v1"
+	rbacv1 "k8s.io/api/rbac/v1"
+	"k8s.io/apimachinery/pkg/labels"
+	"kubesphere.io/kubesphere/pkg/informers"
+	"kubesphere.io/kubesphere/pkg/models/iam"
+	"kubesphere.io/kubesphere/pkg/params"
+	"sort"
+	"strings"
+)
+
+type namespaceSearcher struct {
+}
+
+// Exactly Match
+func (*namespaceSearcher) match(match map[string]string, item *v1.Namespace) bool {
+	for k, v := range match {
+		switch k {
+		default:
+			if item.Labels[k] != v {
+				return false
+			}
+		}
+	}
+	return true
+}
+
+func (*namespaceSearcher) fuzzy(fuzzy map[string]string, item *v1.Namespace) bool {
+
+	for k, v := range fuzzy {
+		switch k {
+		case "name":
+			if !strings.Contains(item.Name, v) && !strings.Contains(item.Labels["displayName"], v) {
+				return false
+			}
+		default:
+			return false
+		}
+	}
+
+	return true
+}
+
+func (*namespaceSearcher) compare(a, b *v1.Namespace, orderBy string) bool {
+	switch orderBy {
+	case "createTime":
+		return a.CreationTimestamp.Time.Before(b.CreationTimestamp.Time)
+	case "name":
+		fallthrough
+	default:
+		return strings.Compare(a.Name, b.Name) <= 0
+	}
+}
+
+func (*namespaceSearcher) GetNamespaces(username string) ([]*v1.Namespace, error) {
+
+	roles, err := iam.GetUserRoles("", username)
+
+	if err != nil {
+		return nil, err
+	}
+
+	namespaces := make([]*v1.Namespace, 0)
+	namespaceLister := informers.SharedInformerFactory().Core().V1().Namespaces().Lister()
+	for _, role := range roles {
+		namespace, err := namespaceLister.Get(role.Namespace)
+		if err != nil {
+			return nil, err
+		}
+		namespaces = append(namespaces, namespace)
+	}
+
+	return namespaces, nil
+}
+
+func (s *namespaceSearcher) search(username string, conditions *params.Conditions, orderBy string, reverse bool) ([]*v1.Namespace, error) {
+
+	rules, err := iam.GetUserClusterRules(username)
+
+	if err != nil {
+		return nil, err
+	}
+
+	namespaces := make([]*v1.Namespace, 0)
+
+	if iam.RulesMatchesRequired(rules, rbacv1.PolicyRule{Verbs: []string{"list"}, APIGroups: []string{"tenant.kubesphere.io"}, Resources: []string{"namespaces"}}) {
+		namespaces, err = informers.SharedInformerFactory().Core().V1().Namespaces().Lister().List(labels.Everything())
+	} else {
+		namespaces, err = s.GetNamespaces(username)
+	}
+
+	if err != nil {
+		return nil, err
+	}
+
+	result := make([]*v1.Namespace, 0)
+
+	for _, namespace := range namespaces {
+		if s.match(conditions.Match, namespace) && s.fuzzy(conditions.Fuzzy, namespace) {
+			result = append(result, namespace)
+		}
+	}
+
+	// order & reverse
+	sort.Slice(result, func(i, j int) bool {
+		if reverse {
+			tmp := i
+			i = j
+			j = tmp
+		}
+		return s.compare(result[i], result[j], orderBy)
+	})
+
+	return result, nil
+}
--- a/pkg/models/tenant/tenant.go
+++ b/pkg/models/tenant/tenant.go
@@ -0,0 +1,103 @@
+/*
+
+ Copyright 2019 The KubeSphere Authors.
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+*/
+package tenant
+
+import (
+	"k8s.io/api/core/v1"
+	"kubesphere.io/kubesphere/pkg/constants"
+	"kubesphere.io/kubesphere/pkg/models"
+	ws "kubesphere.io/kubesphere/pkg/models/workspaces"
+	"kubesphere.io/kubesphere/pkg/params"
+	"kubesphere.io/kubesphere/pkg/simple/client/k8s"
+	"strconv"
+)
+
+var (
+	workspaces = workspaceSearcher{}
+	namespaces = namespaceSearcher{}
+)
+
+func CreateNamespace(workspaceName string, namespace *v1.Namespace, username string) (*v1.Namespace, error) {
+	if namespace.Labels == nil {
+		namespace.Labels = make(map[string]string, 0)
+	}
+	if username != "" {
+		namespace.Labels[constants.CreatorLabelKey] = username
+	}
+
+	namespace.Labels[constants.WorkspaceLabelKey] = workspaceName
+
+	return k8s.Client().CoreV1().Namespaces().Create(namespace)
+}
+
+func ListWorkspaces(username string, conditions *params.Conditions, orderBy string, reverse bool, limit, offset int) (*models.PageableResponse, error) {
+
+	workspaces, err := workspaces.search(username, conditions, orderBy, reverse)
+
+	if err != nil {
+		return nil, err
+	}
+
+	// limit offset
+	result := make([]interface{}, 0)
+	for i, workspace := range workspaces {
+		if len(result) < limit && i >= offset {
+			workspace := workspace.DeepCopy()
+			ns, err := ListNamespaces(username, &params.Conditions{Match: map[string]string{"kubesphere.io/workspace": workspace.Name}}, "", false, 1, 0)
+			if err != nil {
+				return nil, err
+			}
+			if workspace.Annotations == nil {
+				workspace.Annotations = make(map[string]string)
+			}
+			workspace.Annotations["kubesphere.io/namespace-count"] = strconv.Itoa(ns.TotalCount)
+			devops, err := ListDevopsProjects(workspace.Name, username, &params.Conditions{}, "", false, 1, 0)
+			if err != nil {
+				return nil, err
+			}
+			workspace.Annotations["kubesphere.io/devops-count"] = strconv.Itoa(devops.TotalCount)
+			userCount, err := ws.WorkspaceUserCount(workspace.Name)
+			if err != nil {
+				return nil, err
+			}
+			workspace.Annotations["kubesphere.io/member-count"] = strconv.Itoa(userCount)
+			result = append(result, workspace)
+		}
+	}
+
+	return &models.PageableResponse{Items: result, TotalCount: len(workspaces)}, nil
+}
+
+func ListNamespaces(username string, conditions *params.Conditions, orderBy string, reverse bool, limit, offset int) (*models.PageableResponse, error) {
+
+	namespaces, err := namespaces.search(username, conditions, orderBy, reverse)
+
+	if err != nil {
+		return nil, err
+	}
+
+	// limit offset
+	result := make([]interface{}, 0)
+	for i, v := range namespaces {
+		if len(result) < limit && i >= offset {
+			result = append(result, v)
+		}
+	}
+
+	return &models.PageableResponse{Items: result, TotalCount: len(namespaces)}, nil
+}
--- a/pkg/models/tenant/workspaces.go
+++ b/pkg/models/tenant/workspaces.go
@@ -0,0 +1,130 @@
+/*
+
+ Copyright 2019 The KubeSphere Authors.
+
+ Licensed under the Apache License, Version 2.0 (the "License");
+ you may not use this file except in compliance with the License.
+ You may obtain a copy of the License at
+
+     http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+
+*/
+package tenant
+
+import (
+	rbacv1 "k8s.io/api/rbac/v1"
+	"k8s.io/apimachinery/pkg/labels"
+	"kubesphere.io/kubesphere/pkg/apis/tenant/v1alpha1"
+	"kubesphere.io/kubesphere/pkg/constants"
+	"kubesphere.io/kubesphere/pkg/informers"
+	"kubesphere.io/kubesphere/pkg/models/iam"
+	"kubesphere.io/kubesphere/pkg/params"
+	"sort"
+	"strings"
+)
+
+type workspaceSearcher struct {
+}
+
+// Exactly Match
+func (*workspaceSearcher) match(match map[string]string, item *v1alpha1.Workspace) bool {
+	for k, v := range match {
+		switch k {
+		case "name":
+			if item.Name != v && item.Labels[constants.DisplayNameLabelKey] != v {
+				return false
+			}
+		default:
+			if item.Labels[k] != v {
+				return false
+			}
+		}
+	}
+	return true
+}
+
+func (*workspaceSearcher) fuzzy(fuzzy map[string]string, item *v1alpha1.Workspace) bool {
+
+	for k, v := range fuzzy {
+		switch k {
+		case "name":
+			if !strings.Contains(item.Name, v) && !strings.Contains(item.Labels["displayName"], v) {
+				return false
+			}
+		default:
+			return false
+		}
+	}
+
+	return true
+}
+
+func (*workspaceSearcher) compare(a, b *v1alpha1.Workspace, orderBy string) bool {
+	switch orderBy {
+	case "createTime":
+		return a.CreationTimestamp.Time.Before(b.CreationTimestamp.Time)
+	case "name":
+		fallthrough
+	default:
+		return strings.Compare(a.Name, b.Name) <= 0
+	}
+}
+
+func (s *workspaceSearcher) search(username string, conditions *params.Conditions, orderBy string, reverse bool) ([]*v1alpha1.Workspace, error) {
+	rules, err := iam.GetUserClusterRules(username)
+
+	if err != nil {
+		return nil, err
+	}
+
+	workspaces := make([]*v1alpha1.Workspace, 0)
+
+	if iam.RulesMatchesRequired(rules, rbacv1.PolicyRule{Verbs: []string{"list"}, APIGroups: []string{"tenant.kubesphere.io"}, Resources: []string{"workspaces"}}) {
+		workspaces, err = informers.KsSharedInformerFactory().Tenant().V1alpha1().Workspaces().Lister().List(labels.Everything())
+		if err != nil {
+			return nil, err
+		}
+	} else {
+		workspaceRoles, err := iam.GetUserWorkspaceRoleMap(username)
+		if err != nil {
+			return nil, err
+		}
+		for k := range workspaceRoles {
+			workspace, err := informers.KsSharedInformerFactory().Tenant().V1alpha1().Workspaces().Lister().Get(k)
+			if err != nil {
+				return nil, err
+			}
+			workspaces = append(workspaces, workspace)
+		}
+	}
+
+	result := make([]*v1alpha1.Workspace, 0)
+
+	for _, workspace := range workspaces {
+		if s.match(conditions.Match, workspace) && s.fuzzy(conditions.Fuzzy, workspace) {
+			result = append(result, workspace)
+		}
+	}
+
+	// order & reverse
+	sort.Slice(result, func(i, j int) bool {
+		if reverse {
+			tmp := i
+			i = j
+			j = tmp
+		}
+		return s.compare(result[i], result[j], orderBy)
+	})
+
+	return result, nil
+}
+
+func GetWorkspace(workspaceName string) (*v1alpha1.Workspace, error) {
+	return informers.KsSharedInformerFactory().Tenant().V1alpha1().Workspaces().Lister().Get(workspaceName)
+}