const Cluster = { components: { Downloads, GetCopy }, props: [ 'cluster', 'token', 'state' ], data() { return { signReqValidity: "1d", sshSignReq: { PubKey: "", Principal: "root", }, sshUserCert: null, kubeSignReq: { CSR: "", User: "", Group: "system:masters", }, kubeUserCert: null, }; }, methods: { sshCASign() { event.preventDefault(); fetch(`/clusters/${this.cluster.Name}/ssh/user-ca/sign`, { method: 'POST', body: JSON.stringify({ ...this.sshSignReq, Validity: this.signReqValidity }), headers: { 'Authorization': 'Bearer ' + this.token, 'Content-Type': 'application/json' }, }).then((resp) => { if (resp.ok) { resp.blob().then((cert) => { this.sshUserCert = URL.createObjectURL(cert) }) } else { resp.json().then((resp) => alert('failed to sign: '+resp.message)) } }) .catch((e) => { alert('failed to sign: '+e); }) }, kubeCASign() { event.preventDefault(); fetch(`/clusters/${this.cluster.Name}/kube/sign`, { method: 'POST', body: JSON.stringify({ ...this.kubeSignReq, Validity: this.signReqValidity }), headers: { 'Authorization': 'Bearer ' + this.token, 'Content-Type': 'application/json' }, }).then((resp) => { if (resp.ok) { resp.blob().then((cert) => { this.kubeUserCert = URL.createObjectURL(cert) }) } else { resp.json().then((resp) => alert('failed to sign: '+resp.message)) } }) .catch((e) => { alert('failed to sign: '+e); }) }, readFile(e, onload) { const file = e.target.files[0]; if (!file) { return; } const reader = new FileReader(); reader.onload = () => { onload(reader.result) }; reader.onerror = () => { alert("error reading file"); }; reader.readAsText(file); }, loadPubKey(e) { this.readFile(e, (v) => { this.sshSignReq.PubKey = v; }); }, loadCSR(e) { this.readFile(e, (v) => { this.kubeSignReq.CSR = v; }); }, }, template: `

Access

Allow cluster access from a public key

Grant SSH access

Validity: time range, ie: -5m:1w, 5m, 1M, 1y, 1d-1s, etc.

User:

Public key (OpenSSH format):

Grant Kubernetes API access

Validity: time range, ie: -5m:1w, 5m, 1M, 1y, 1d-1s, etc.

User: (by default, from the CSR)

Group:

Certificate signing request (PEM format):

Tokens

Passwords

Downloads

CAs

NameCertificateSigned certificates
{{ ca.Name }}
` }