2247d8c3a2
* + endpoint and namespace level authorizations + user namespace authorization API + k8s client setup service account with k8s roles and policies by portainer role * User authorization changes refresh token cache * rbac authorizes k8s requests * CE to EE migrator to include new authorizations * code clean up * comments * * merge in the RestrictDefaultNamespace changes * - remove unnecessary check for default namespace * + updates namespace access policies when generating token * * updates namespace access policies when querying the user namespace endpoint * + k8s rule in rbac.go for endpoint access test + missing k8s cluster rules for different roles * feat(rbac): update kube rbac * feat(rbac): use the authorization directive * feat(rbac): Update namespace access policies when user/team is deleted * refactor(app): use new angular-multi-select capabilities * feat(rbac): fix authorizations * feat(rbac): fix userAccessPolicies update bug * feat(rbac): add W applications authorizations * feat(rbac): add application details W authorizations * feat(rbac): add configurations W autohorizations * feat(rbac): add configuration details W authorizations * feat(rbac): add volumes W authorizations * feat(rbac): add volume details W authorizations * feat(rbac): add componentstatus to portainer-view role and add cluster/node authorizations * fix(rbac): disable application note for non authorized user * fix(rbac): add endpoints list and components status to portainer-basic * fix(rbac): allow user to access default namespace when restrict default namespace isn't activated * fix(rbac): remove default namespace from useraccesspolicies when restrict default namespace isn't activated * fix(rbac): change some things * fix(rbac): allow standard user to access container console * - removed unused parameter * fix(rbac): fix team authorizations Co-authored-by: Maxime Bajeux <max.bajeux@gmail.com> Co-authored-by: xAt0mZ <baron_l@epitech.eu>
87 lines
2.8 KiB
JavaScript
87 lines
2.8 KiB
JavaScript
import KubernetesConfigurationHelper from 'Kubernetes/helpers/configurationHelper';
|
|
|
|
angular.module('portainer.docker').controller('KubernetesConfigurationsDatatableController', [
|
|
'$scope',
|
|
'$controller',
|
|
'KubernetesNamespaceHelper',
|
|
'DatatableService',
|
|
'Authentication',
|
|
function ($scope, $controller, KubernetesNamespaceHelper, DatatableService, Authentication) {
|
|
angular.extend(this, $controller('GenericDatatableController', { $scope: $scope }));
|
|
|
|
const ctrl = this;
|
|
|
|
this.settings = Object.assign(this.settings, {
|
|
showSystem: false,
|
|
});
|
|
|
|
this.onSettingsShowSystemChange = function () {
|
|
DatatableService.setDataTableSettings(this.tableKey, this.settings);
|
|
};
|
|
|
|
this.isSystemNamespace = function (item) {
|
|
return KubernetesNamespaceHelper.isSystemNamespace(item.Namespace);
|
|
};
|
|
|
|
this.isSystemToken = function (item) {
|
|
return KubernetesConfigurationHelper.isSystemToken(item);
|
|
};
|
|
|
|
this.isSystemConfig = function (item) {
|
|
return ctrl.isSystemNamespace(item) || ctrl.isSystemToken(item);
|
|
};
|
|
|
|
this.isExternalConfiguration = function (item) {
|
|
return KubernetesConfigurationHelper.isExternalConfiguration(item);
|
|
};
|
|
|
|
this.isDisplayed = function (item) {
|
|
return !ctrl.isSystemConfig(item) || ctrl.settings.showSystem;
|
|
};
|
|
|
|
/**
|
|
* Do not allow configurations in system namespaces to be selected
|
|
*/
|
|
this.allowSelection = function (item) {
|
|
return !this.isSystemConfig(item) && !item.Used;
|
|
};
|
|
|
|
this.$onInit = function () {
|
|
this.setDefaults();
|
|
this.prepareTableFromDataset();
|
|
|
|
this.state.orderBy = this.orderBy;
|
|
var storedOrder = DatatableService.getDataTableOrder(this.tableKey);
|
|
if (storedOrder !== null) {
|
|
this.state.reverseOrder = storedOrder.reverse;
|
|
this.state.orderBy = storedOrder.orderBy;
|
|
}
|
|
|
|
var textFilter = DatatableService.getDataTableTextFilters(this.tableKey);
|
|
if (textFilter !== null) {
|
|
this.state.textFilter = textFilter;
|
|
this.onTextFilterChange();
|
|
}
|
|
|
|
var storedFilters = DatatableService.getDataTableFilters(this.tableKey);
|
|
if (storedFilters !== null) {
|
|
this.filters = storedFilters;
|
|
}
|
|
if (this.filters && this.filters.state) {
|
|
this.filters.state.open = false;
|
|
}
|
|
|
|
var storedSettings = DatatableService.getDataTableSettings(this.tableKey);
|
|
if (storedSettings !== null) {
|
|
this.settings = storedSettings;
|
|
this.settings.open = false;
|
|
}
|
|
if (!Authentication.hasAuthorizations(['K8sAccessSystemNamespaces']) && this.settings.showSystem) {
|
|
this.settings.showSystem = false;
|
|
DatatableService.setDataTableSettings(this.tableKey, this.settings);
|
|
}
|
|
this.onSettingsRepeaterChange();
|
|
};
|
|
},
|
|
]);
|