555 lines
14 KiB
Go
555 lines
14 KiB
Go
/*
|
|
Copyright 2020 KubeSphere Authors
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package v1alpha2
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
|
|
"github.com/emicklei/go-restful"
|
|
corev1 "k8s.io/api/core/v1"
|
|
"k8s.io/apimachinery/pkg/api/errors"
|
|
"k8s.io/apiserver/pkg/authentication/user"
|
|
"k8s.io/client-go/kubernetes"
|
|
"k8s.io/klog"
|
|
"kubesphere.io/kubesphere/pkg/api"
|
|
auditingv1alpha1 "kubesphere.io/kubesphere/pkg/api/auditing/v1alpha1"
|
|
eventsv1alpha1 "kubesphere.io/kubesphere/pkg/api/events/v1alpha1"
|
|
loggingv1alpha2 "kubesphere.io/kubesphere/pkg/api/logging/v1alpha2"
|
|
tenantv1alpha2 "kubesphere.io/kubesphere/pkg/apis/tenant/v1alpha2"
|
|
"kubesphere.io/kubesphere/pkg/apiserver/authorization/authorizer"
|
|
"kubesphere.io/kubesphere/pkg/apiserver/query"
|
|
"kubesphere.io/kubesphere/pkg/apiserver/request"
|
|
kubesphere "kubesphere.io/kubesphere/pkg/client/clientset/versioned"
|
|
"kubesphere.io/kubesphere/pkg/informers"
|
|
"kubesphere.io/kubesphere/pkg/models/iam/am"
|
|
resourcev1alpha3 "kubesphere.io/kubesphere/pkg/models/resources/v1alpha3/resource"
|
|
"kubesphere.io/kubesphere/pkg/models/tenant"
|
|
servererr "kubesphere.io/kubesphere/pkg/server/errors"
|
|
"kubesphere.io/kubesphere/pkg/simple/client/auditing"
|
|
"kubesphere.io/kubesphere/pkg/simple/client/events"
|
|
"kubesphere.io/kubesphere/pkg/simple/client/logging"
|
|
monitoringclient "kubesphere.io/kubesphere/pkg/simple/client/monitoring"
|
|
opclient "kubesphere.io/kubesphere/pkg/simple/client/openpitrix"
|
|
)
|
|
|
|
type tenantHandler struct {
|
|
tenant tenant.Interface
|
|
}
|
|
|
|
func newTenantHandler(factory informers.InformerFactory, k8sclient kubernetes.Interface, ksclient kubesphere.Interface,
|
|
evtsClient events.Client, loggingClient logging.Client, auditingclient auditing.Client,
|
|
am am.AccessManagementInterface, authorizer authorizer.Authorizer,
|
|
monitoringclient monitoringclient.Interface, opClient opclient.Client,
|
|
resourceGetter *resourcev1alpha3.ResourceGetter) *tenantHandler {
|
|
|
|
return &tenantHandler{
|
|
tenant: tenant.New(factory, k8sclient, ksclient, evtsClient, loggingClient, auditingclient, am, authorizer, monitoringclient, opClient, resourceGetter),
|
|
}
|
|
}
|
|
|
|
func (h *tenantHandler) ListWorkspaces(req *restful.Request, resp *restful.Response) {
|
|
user, ok := request.UserFrom(req.Request.Context())
|
|
queryParam := query.ParseQueryParameter(req)
|
|
|
|
if !ok {
|
|
err := fmt.Errorf("cannot obtain user info")
|
|
klog.Errorln(err)
|
|
api.HandleForbidden(resp, nil, err)
|
|
return
|
|
}
|
|
|
|
result, err := h.tenant.ListWorkspaces(user, queryParam)
|
|
|
|
if err != nil {
|
|
api.HandleInternalError(resp, nil, err)
|
|
return
|
|
}
|
|
|
|
resp.WriteEntity(result)
|
|
}
|
|
|
|
func (h *tenantHandler) ListFederatedNamespaces(req *restful.Request, resp *restful.Response) {
|
|
workspace := req.PathParameter("workspace")
|
|
queryParam := query.ParseQueryParameter(req)
|
|
|
|
workspaceMember, ok := request.UserFrom(req.Request.Context())
|
|
if !ok {
|
|
err := fmt.Errorf("cannot obtain user info")
|
|
klog.Errorln(err)
|
|
api.HandleForbidden(resp, nil, err)
|
|
return
|
|
}
|
|
|
|
result, err := h.tenant.ListFederatedNamespaces(workspaceMember, workspace, queryParam)
|
|
if err != nil {
|
|
api.HandleInternalError(resp, nil, err)
|
|
return
|
|
}
|
|
|
|
resp.WriteEntity(result)
|
|
}
|
|
|
|
func (h *tenantHandler) ListNamespaces(req *restful.Request, resp *restful.Response) {
|
|
workspace := req.PathParameter("workspace")
|
|
queryParam := query.ParseQueryParameter(req)
|
|
|
|
var workspaceMember user.Info
|
|
if username := req.PathParameter("workspacemember"); username != "" {
|
|
workspaceMember = &user.DefaultInfo{
|
|
Name: username,
|
|
}
|
|
} else {
|
|
requestUser, ok := request.UserFrom(req.Request.Context())
|
|
if !ok {
|
|
err := fmt.Errorf("cannot obtain user info")
|
|
klog.Errorln(err)
|
|
api.HandleForbidden(resp, nil, err)
|
|
return
|
|
}
|
|
workspaceMember = requestUser
|
|
}
|
|
|
|
result, err := h.tenant.ListNamespaces(workspaceMember, workspace, queryParam)
|
|
if err != nil {
|
|
api.HandleInternalError(resp, nil, err)
|
|
return
|
|
}
|
|
|
|
resp.WriteEntity(result)
|
|
}
|
|
|
|
func (h *tenantHandler) ListDevOpsProjects(req *restful.Request, resp *restful.Response) {
|
|
workspace := req.PathParameter("workspace")
|
|
queryParam := query.ParseQueryParameter(req)
|
|
|
|
var workspaceMember user.Info
|
|
if username := req.PathParameter("workspacemember"); username != "" {
|
|
workspaceMember = &user.DefaultInfo{
|
|
Name: username,
|
|
}
|
|
} else {
|
|
requestUser, ok := request.UserFrom(req.Request.Context())
|
|
if !ok {
|
|
err := fmt.Errorf("cannot obtain user info")
|
|
klog.Errorln(err)
|
|
api.HandleForbidden(resp, nil, err)
|
|
return
|
|
}
|
|
workspaceMember = requestUser
|
|
}
|
|
|
|
result, err := h.tenant.ListDevOpsProjects(workspaceMember, workspace, queryParam)
|
|
|
|
if err != nil {
|
|
api.HandleInternalError(resp, nil, err)
|
|
return
|
|
}
|
|
|
|
resp.WriteEntity(result)
|
|
}
|
|
|
|
func (h *tenantHandler) CreateNamespace(request *restful.Request, response *restful.Response) {
|
|
workspace := request.PathParameter("workspace")
|
|
var namespace corev1.Namespace
|
|
|
|
err := request.ReadEntity(&namespace)
|
|
|
|
if err != nil {
|
|
klog.Error(err)
|
|
api.HandleBadRequest(response, request, err)
|
|
return
|
|
}
|
|
|
|
created, err := h.tenant.CreateNamespace(workspace, &namespace)
|
|
|
|
if err != nil {
|
|
klog.Error(err)
|
|
if errors.IsNotFound(err) {
|
|
api.HandleNotFound(response, request, err)
|
|
return
|
|
}
|
|
api.HandleBadRequest(response, request, err)
|
|
return
|
|
}
|
|
|
|
response.WriteEntity(created)
|
|
}
|
|
|
|
func (h *tenantHandler) CreateWorkspace(request *restful.Request, response *restful.Response) {
|
|
var workspace tenantv1alpha2.WorkspaceTemplate
|
|
|
|
err := request.ReadEntity(&workspace)
|
|
|
|
if err != nil {
|
|
klog.Error(err)
|
|
api.HandleBadRequest(response, request, err)
|
|
return
|
|
}
|
|
|
|
created, err := h.tenant.CreateWorkspace(&workspace)
|
|
|
|
if err != nil {
|
|
klog.Error(err)
|
|
if errors.IsNotFound(err) {
|
|
api.HandleNotFound(response, request, err)
|
|
return
|
|
}
|
|
api.HandleBadRequest(response, request, err)
|
|
return
|
|
}
|
|
|
|
response.WriteEntity(created)
|
|
}
|
|
|
|
func (h *tenantHandler) DeleteWorkspace(request *restful.Request, response *restful.Response) {
|
|
workspace := request.PathParameter("workspace")
|
|
|
|
err := h.tenant.DeleteWorkspace(workspace)
|
|
|
|
if err != nil {
|
|
klog.Error(err)
|
|
if errors.IsNotFound(err) {
|
|
api.HandleNotFound(response, request, err)
|
|
return
|
|
}
|
|
api.HandleBadRequest(response, request, err)
|
|
return
|
|
}
|
|
|
|
response.WriteEntity(servererr.None)
|
|
}
|
|
|
|
func (h *tenantHandler) UpdateWorkspace(request *restful.Request, response *restful.Response) {
|
|
workspaceName := request.PathParameter("workspace")
|
|
var workspace tenantv1alpha2.WorkspaceTemplate
|
|
|
|
err := request.ReadEntity(&workspace)
|
|
|
|
if err != nil {
|
|
klog.Error(err)
|
|
api.HandleBadRequest(response, request, err)
|
|
return
|
|
}
|
|
|
|
if workspaceName != workspace.Name {
|
|
err := fmt.Errorf("the name of the object (%s) does not match the name on the URL (%s)", workspace.Name, workspaceName)
|
|
klog.Errorf("%+v", err)
|
|
api.HandleBadRequest(response, request, err)
|
|
return
|
|
}
|
|
|
|
updated, err := h.tenant.UpdateWorkspace(&workspace)
|
|
|
|
if err != nil {
|
|
klog.Error(err)
|
|
if errors.IsNotFound(err) {
|
|
api.HandleNotFound(response, request, err)
|
|
return
|
|
}
|
|
if errors.IsBadRequest(err) {
|
|
api.HandleBadRequest(response, request, err)
|
|
return
|
|
}
|
|
api.HandleInternalError(response, request, err)
|
|
return
|
|
}
|
|
|
|
response.WriteEntity(updated)
|
|
}
|
|
|
|
func (h *tenantHandler) DescribeWorkspace(request *restful.Request, response *restful.Response) {
|
|
workspaceName := request.PathParameter("workspace")
|
|
|
|
workspace, err := h.tenant.DescribeWorkspace(workspaceName)
|
|
|
|
if err != nil {
|
|
klog.Error(err)
|
|
if errors.IsNotFound(err) {
|
|
api.HandleNotFound(response, request, err)
|
|
return
|
|
}
|
|
api.HandleInternalError(response, request, err)
|
|
return
|
|
}
|
|
|
|
response.WriteEntity(workspace)
|
|
}
|
|
|
|
func (h *tenantHandler) ListWorkspaceClusters(request *restful.Request, response *restful.Response) {
|
|
workspaceName := request.PathParameter("workspace")
|
|
|
|
result, err := h.tenant.ListWorkspaceClusters(workspaceName)
|
|
|
|
if err != nil {
|
|
klog.Error(err)
|
|
if errors.IsNotFound(err) {
|
|
api.HandleNotFound(response, request, err)
|
|
return
|
|
}
|
|
api.HandleInternalError(response, request, err)
|
|
return
|
|
}
|
|
|
|
response.WriteEntity(result)
|
|
}
|
|
|
|
func (h *tenantHandler) Events(req *restful.Request, resp *restful.Response) {
|
|
user, ok := request.UserFrom(req.Request.Context())
|
|
if !ok {
|
|
err := fmt.Errorf("cannot obtain user info")
|
|
klog.Errorln(err)
|
|
api.HandleForbidden(resp, req, err)
|
|
return
|
|
}
|
|
queryParam, err := eventsv1alpha1.ParseQueryParameter(req)
|
|
if err != nil {
|
|
klog.Errorln(err)
|
|
api.HandleInternalError(resp, req, err)
|
|
return
|
|
}
|
|
|
|
result, err := h.tenant.Events(user, queryParam)
|
|
if err != nil {
|
|
klog.Errorln(err)
|
|
api.HandleInternalError(resp, req, err)
|
|
return
|
|
}
|
|
|
|
resp.WriteEntity(result)
|
|
|
|
}
|
|
|
|
func (h *tenantHandler) QueryLogs(req *restful.Request, resp *restful.Response) {
|
|
user, ok := request.UserFrom(req.Request.Context())
|
|
if !ok {
|
|
err := fmt.Errorf("cannot obtain user info")
|
|
klog.Errorln(err)
|
|
api.HandleForbidden(resp, req, err)
|
|
return
|
|
}
|
|
queryParam, err := loggingv1alpha2.ParseQueryParameter(req)
|
|
if err != nil {
|
|
klog.Errorln(err)
|
|
api.HandleInternalError(resp, req, err)
|
|
return
|
|
}
|
|
|
|
if queryParam.Operation == loggingv1alpha2.OperationExport {
|
|
resp.Header().Set(restful.HEADER_ContentType, "text/plain")
|
|
resp.Header().Set("Content-Disposition", "attachment")
|
|
err := h.tenant.ExportLogs(user, queryParam, resp)
|
|
if err != nil {
|
|
klog.Errorln(err)
|
|
api.HandleInternalError(resp, req, err)
|
|
return
|
|
}
|
|
} else {
|
|
result, err := h.tenant.QueryLogs(user, queryParam)
|
|
if err != nil {
|
|
klog.Errorln(err)
|
|
api.HandleInternalError(resp, req, err)
|
|
return
|
|
}
|
|
resp.WriteAsJson(result)
|
|
}
|
|
}
|
|
|
|
func (h *tenantHandler) Auditing(req *restful.Request, resp *restful.Response) {
|
|
user, ok := request.UserFrom(req.Request.Context())
|
|
if !ok {
|
|
err := fmt.Errorf("cannot obtain user info")
|
|
klog.Errorln(err)
|
|
api.HandleForbidden(resp, req, err)
|
|
return
|
|
}
|
|
queryParam, err := auditingv1alpha1.ParseQueryParameter(req)
|
|
if err != nil {
|
|
klog.Errorln(err)
|
|
api.HandleInternalError(resp, req, err)
|
|
return
|
|
}
|
|
|
|
result, err := h.tenant.Auditing(user, queryParam)
|
|
if err != nil {
|
|
klog.Errorln(err)
|
|
api.HandleInternalError(resp, req, err)
|
|
return
|
|
}
|
|
|
|
_ = resp.WriteEntity(result)
|
|
|
|
}
|
|
|
|
func (h *tenantHandler) DescribeNamespace(request *restful.Request, response *restful.Response) {
|
|
workspaceName := request.PathParameter("workspace")
|
|
namespaceName := request.PathParameter("namespace")
|
|
ns, err := h.tenant.DescribeNamespace(workspaceName, namespaceName)
|
|
|
|
if err != nil {
|
|
if errors.IsNotFound(err) {
|
|
api.HandleNotFound(response, request, err)
|
|
return
|
|
}
|
|
api.HandleInternalError(response, request, err)
|
|
return
|
|
}
|
|
|
|
response.WriteEntity(ns)
|
|
}
|
|
|
|
func (h *tenantHandler) DeleteNamespace(request *restful.Request, response *restful.Response) {
|
|
workspaceName := request.PathParameter("workspace")
|
|
namespaceName := request.PathParameter("namespace")
|
|
|
|
err := h.tenant.DeleteNamespace(workspaceName, namespaceName)
|
|
|
|
if err != nil {
|
|
if errors.IsNotFound(err) {
|
|
api.HandleNotFound(response, request, err)
|
|
return
|
|
}
|
|
api.HandleInternalError(response, request, err)
|
|
return
|
|
}
|
|
|
|
response.WriteEntity(servererr.None)
|
|
}
|
|
|
|
func (h *tenantHandler) UpdateNamespace(request *restful.Request, response *restful.Response) {
|
|
workspaceName := request.PathParameter("workspace")
|
|
namespaceName := request.PathParameter("namespace")
|
|
|
|
var namespace corev1.Namespace
|
|
err := request.ReadEntity(&namespace)
|
|
if err != nil {
|
|
klog.Error(err)
|
|
api.HandleBadRequest(response, request, err)
|
|
return
|
|
}
|
|
|
|
if namespaceName != namespace.Name {
|
|
err := fmt.Errorf("the name of the object (%s) does not match the name on the URL (%s)", namespace.Name, namespaceName)
|
|
klog.Errorf("%+v", err)
|
|
api.HandleBadRequest(response, request, err)
|
|
return
|
|
}
|
|
|
|
updated, err := h.tenant.UpdateNamespace(workspaceName, &namespace)
|
|
|
|
if err != nil {
|
|
klog.Error(err)
|
|
if errors.IsNotFound(err) {
|
|
api.HandleNotFound(response, request, err)
|
|
return
|
|
}
|
|
if errors.IsBadRequest(err) {
|
|
api.HandleBadRequest(response, request, err)
|
|
return
|
|
}
|
|
api.HandleInternalError(response, request, err)
|
|
return
|
|
}
|
|
|
|
response.WriteEntity(updated)
|
|
}
|
|
|
|
func (h *tenantHandler) PatchNamespace(request *restful.Request, response *restful.Response) {
|
|
workspaceName := request.PathParameter("workspace")
|
|
namespaceName := request.PathParameter("namespace")
|
|
|
|
var namespace corev1.Namespace
|
|
err := request.ReadEntity(&namespace)
|
|
if err != nil {
|
|
klog.Error(err)
|
|
api.HandleBadRequest(response, request, err)
|
|
return
|
|
}
|
|
|
|
namespace.Name = namespaceName
|
|
|
|
patched, err := h.tenant.PatchNamespace(workspaceName, &namespace)
|
|
|
|
if err != nil {
|
|
klog.Error(err)
|
|
if errors.IsNotFound(err) {
|
|
api.HandleNotFound(response, request, err)
|
|
return
|
|
}
|
|
if errors.IsBadRequest(err) {
|
|
api.HandleBadRequest(response, request, err)
|
|
return
|
|
}
|
|
api.HandleInternalError(response, request, err)
|
|
return
|
|
}
|
|
|
|
response.WriteEntity(patched)
|
|
}
|
|
|
|
func (h *tenantHandler) PatchWorkspace(request *restful.Request, response *restful.Response) {
|
|
workspaceName := request.PathParameter("workspace")
|
|
var data json.RawMessage
|
|
err := request.ReadEntity(&data)
|
|
if err != nil {
|
|
klog.Error(err)
|
|
api.HandleBadRequest(response, request, err)
|
|
return
|
|
}
|
|
|
|
patched, err := h.tenant.PatchWorkspace(workspaceName, data)
|
|
|
|
if err != nil {
|
|
klog.Error(err)
|
|
if errors.IsNotFound(err) {
|
|
api.HandleNotFound(response, request, err)
|
|
return
|
|
}
|
|
if errors.IsBadRequest(err) {
|
|
api.HandleBadRequest(response, request, err)
|
|
return
|
|
}
|
|
api.HandleInternalError(response, request, err)
|
|
return
|
|
}
|
|
|
|
response.WriteEntity(patched)
|
|
}
|
|
|
|
func (h *tenantHandler) ListClusters(r *restful.Request, response *restful.Response) {
|
|
user, ok := request.UserFrom(r.Request.Context())
|
|
|
|
if !ok {
|
|
response.WriteEntity([]interface{}{})
|
|
return
|
|
}
|
|
|
|
result, err := h.tenant.ListClusters(user)
|
|
|
|
if err != nil {
|
|
klog.Error(err)
|
|
if errors.IsNotFound(err) {
|
|
api.HandleNotFound(response, r, err)
|
|
return
|
|
}
|
|
api.HandleInternalError(response, r, err)
|
|
return
|
|
}
|
|
|
|
response.WriteEntity(result)
|
|
}
|