const Cluster = { components: { Downloads, GetCopy }, props: [ 'cluster', 'token', 'state' ], data() { return { signReqValidity: "1d", sshSignReq: { PubKey: "", Principal: "root", }, sshUserCert: null, kubeSignReq: { CSR: "", User: "", Group: "system:masters", }, kubeUserCert: null, }; }, methods: { sshCASign() { event.preventDefault(); fetch(`/clusters/${this.cluster.Name}/ssh/user-ca/sign`, { method: 'POST', body: JSON.stringify({ ...this.sshSignReq, Validity: this.signReqValidity }), headers: { 'Authorization': 'Bearer ' + this.token, 'Content-Type': 'application/json' }, }).then((resp) => { if (resp.ok) { resp.blob().then((cert) => { this.sshUserCert = URL.createObjectURL(cert) }) } else { resp.json().then((resp) => alert('failed to sign: '+resp.message)) } }) .catch((e) => { alert('failed to sign: '+e); }) }, kubeCASign() { event.preventDefault(); fetch(`/clusters/${this.cluster.Name}/kube/sign`, { method: 'POST', body: JSON.stringify({ ...this.kubeSignReq, Validity: this.signReqValidity }), headers: { 'Authorization': 'Bearer ' + this.token, 'Content-Type': 'application/json' }, }).then((resp) => { if (resp.ok) { resp.blob().then((cert) => { this.kubeUserCert = URL.createObjectURL(cert) }) } else { resp.json().then((resp) => alert('failed to sign: '+resp.message)) } }) .catch((e) => { alert('failed to sign: '+e); }) }, readFile(e, onload) { const file = e.target.files[0]; if (!file) { return; } const reader = new FileReader(); reader.onload = () => { onload(reader.result) }; reader.onerror = () => { alert("error reading file"); }; reader.readAsText(file); }, loadPubKey(e) { this.readFile(e, (v) => { this.sshSignReq.PubKey = v; }); }, loadCSR(e) { this.readFile(e, (v) => { this.kubeSignReq.CSR = v; }); }, }, template: `
Allow cluster access from a public key
Validity: time range, ie: -5m:1w, 5m, 1M, 1y, 1d-1s, etc.
User:
Public key (OpenSSH format):
Validity: time range, ie: -5m:1w, 5m, 1M, 1y, 1d-1s, etc.
User: (by default, from the CSR)
Group:
Certificate signing request (PEM format):
| Name | Certificate | Signed certificates |
|---|---|---|
| {{ ca.Name }} |
{{" "}}
|