Skip to content

Commit

Permalink
Merge pull request #605 from aalves08/574-add-securityContexts-inputs
Browse files Browse the repository at this point in the history 
Adding `securityContexts` inputs for `Policy Server` creation/edit UI
  • Loading branch information
@jordojordo
jordojordo authored Feb 26, 2024
2 parents 1ebfd41 + 27de0ae commit 85c7396
Show file tree
Hide file tree
Showing 28 changed files with 2,155 additions and 122 deletions.
1 change: 1 addition & 0 deletions package.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,7 @@
"test:unit": "vue-cli-service test:unit"
},
"dependencies": {
"@kubernetes/client-node": "^0.20.0",
"@rancher/components": "^0.2.1-alpha.0",
"@rancher/shell": "0.5.2",
"@types/lodash": "4.14.196",
Expand Down
75 changes: 75 additions & 0 deletions pkg/kubewarden/chart/kubewarden/policy-server/SecurityContexts.vue
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,75 @@
<script>
import { _CREATE } from '@shell/config/query-params';
import Loading from '@shell/components/Loading';
import ContainerConfiguration from './SecurityContexts/ContainerConfiguration.vue';
import PodConfiguration from './SecurityContexts/PodConfiguration.vue';
export default {
props: {
mode: {
type: String,
default: _CREATE
},
value: {
type: Object,
default: () => {},
required: true
}
},
components: {
Loading,
ContainerConfiguration,
PodConfiguration,
},
async fetch() {},
data() {
return {
containerConfiguration: this.value.securityContexts.container,
podConfiguration: this.value.securityContexts.pod
};
},
methods: {
updateContainerConfig(val) {
this.$emit('update-security-contexts', { type: 'container', data: val });
},
updatePodConfig(val) {
this.$emit('update-security-contexts', { type: 'pod', data: val });
},
},
computed: {
disabledByOsWindows() {
return !this.value.os?.name === 'windows';
},
disabledByOsLinux() {
return !this.value.os?.name === 'linux';
},
},
};
</script>
<template>
<Loading v-if="$fetchState.pending" />
<div v-else>
<ContainerConfiguration
:value="containerConfiguration"
:mode="mode"
:disabled-by-os-windows="disabledByOsWindows"
:disabled-by-os-linux="disabledByOsLinux"
@update-container-config="updateContainerConfig"
/>
<PodConfiguration
:value="podConfiguration"
:mode="mode"
:disabled-by-os-windows="disabledByOsWindows"
:disabled-by-os-linux="disabledByOsLinux"
@update-pod-config="updatePodConfig"
/>
</div>
</template>
222 changes: 222 additions & 0 deletions pkg/kubewarden/chart/kubewarden/policy-server/SecurityContexts/ContainerConfiguration.vue
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,222 @@
<script>
import { _CREATE } from '@shell/config/query-params';
import Loading from '@shell/components/Loading';
import { Checkbox } from '@components/Form/Checkbox';
import { LabeledInput } from '@components/Form/LabeledInput';
import SeLinuxOptions from '../../../../components/PolicyServer/SeLinuxOptions.vue';
import SeccompProfile from '../../../../components/PolicyServer/SeccompProfile.vue';
import Capabilities from '../../../../components/PolicyServer/Capabilities.vue';
import WindowsOptions from '../../../../components/PolicyServer/WindowsOptions.vue';
export default {
props: {
mode: {
type: String,
default: _CREATE
},
value: {
type: Object,
default: () => {}
},
disabledByOsWindows: {
type: Boolean,
default: false
},
disabledByOsLinux: {
type: Boolean,
default: false
}
},
components: {
Loading,
Checkbox,
LabeledInput,
SeLinuxOptions,
SeccompProfile,
Capabilities,
WindowsOptions
},
async fetch() {},
data() {
return {
allowPrivilegeEscalation: this.value?.allowPrivilegeEscalation,
capabilities: this.value?.capabilities,
privileged: this.value?.privileged,
procMount: this.value?.procMount,
readOnlyRootFilesystem: this.value?.readOnlyRootFilesystem,
runAsNonRoot: this.value?.runAsNonRoot,
runAsGroup: this.value?.runAsGroup,
runAsUser: this.value?.runAsUser,
seLinuxOptions: this.value?.seLinuxOptions,
seccompProfile: this.value?.seccompProfile,
windowsOptions: this.value?.windowsOptions,
};
},
methods: {
updateData(val, key) {
let parsedVal = val;
if (key === 'runAsGroup' || key === 'runAsUser') {
parsedVal = parseInt(val);
}
this.value[key] = parsedVal;
this.$emit('update-container-config', this.value);
}
},
};
</script>
<template>
<Loading v-if="$fetchState.pending" />
<div v-else>
<h3 class="mt-20">
{{ t('kubewarden.policyServerConfig.securityContexts.containerConfig') }}
</h3>
<!-- ALLOW PRIVILEGED ESCALATION -->
<div class="row mt-20">
<div class="col span-12 mb-20">
<Checkbox
v-model="allowPrivilegeEscalation"
:mode="mode"
data-testid="ps-config-security-context-container-allow-priv-escalation-input"
label-key="kubewarden.policyServerConfig.securityContexts.allow-priv-escalation.label"
:tooltip="t('kubewarden.policyServerConfig.securityContexts.allow-priv-escalation.tooltip')"
@input="updateData($event, 'allowPrivilegeEscalation')"
/>
</div>
</div>
<!-- PRIVILEGED MODE -->
<div class="row">
<div class="col span-12 mb-20">
<Checkbox
v-model="privileged"
:mode="mode"
:disabled="disabledByOsWindows"
data-testid="ps-config-security-context-container-privileged-input"
label-key="kubewarden.policyServerConfig.securityContexts.privileged.label"
:tooltip="t('kubewarden.policyServerConfig.securityContexts.privileged.tooltip')"
@input="updateData($event, 'privileged')"
/>
</div>
</div>
<!-- READ-ONLY ROOT FILESYSTEM -->
<div class="row">
<div class="col span-12 mb-20">
<Checkbox
v-model="readOnlyRootFilesystem"
:mode="mode"
:disabled="disabledByOsWindows"
data-testid="ps-config-security-context-container-readOnlyRootFilesystem-input"
label-key="kubewarden.policyServerConfig.securityContexts.readOnlyRootFilesystem.label"
@input="updateData($event, 'readOnlyRootFilesystem')"
/>
</div>
</div>
<!-- RUN AS NON ROOT -->
<div class="row">
<div class="col span-12 mb-40">
<Checkbox
v-model="runAsNonRoot"
:mode="mode"
data-testid="ps-config-security-context-container-runAsNonRoot-input"
label-key="kubewarden.policyServerConfig.securityContexts.runAsNonRoot.label"
@input="updateData($event, 'runAsNonRoot')"
/>
</div>
</div>
<!-- CAPABILITIES -->
<Capabilities
:value="capabilities"
:mode="mode"
config-type="container"
:disabled="disabledByOsWindows"
@update-capabilities="updateData($event, 'capabilities')"
/>
<!-- PROC MOUNT -->
<div class="row mb-20">
<div class="col span-6">
<h4>
{{ t('kubewarden.policyServerConfig.securityContexts.procMount.label') }}
</h4>
<LabeledInput
v-model="procMount"
data-testid="ps-config-security-context-container-procMount-input"
:mode="mode"
:disabled="disabledByOsWindows"
:label="t('kubewarden.policyServerConfig.securityContexts.procMount.label')"
:placeholder="t('kubewarden.policyServerConfig.securityContexts.procMount.placeholder')"
@input="updateData($event, 'procMount')"
/>
</div>
</div>
<!-- RUN AS GROUP -->
<div class="row mb-20">
<div class="col span-6">
<h4>
{{ t('kubewarden.policyServerConfig.securityContexts.runAsGroup') }}
</h4>
<LabeledInput
v-model.number="runAsGroup"
data-testid="ps-config-security-context-container-runAsGroup-input"
type="number"
min="0"
:mode="mode"
:disabled="disabledByOsWindows"
:label="t('kubewarden.policyServerConfig.securityContexts.runAsGroup')"
@input="updateData($event, 'runAsGroup')"
/>
</div>
</div>
<!-- RUN AS USER -->
<div class="row mb-40">
<div class="col span-6">
<h4>
{{ t('kubewarden.policyServerConfig.securityContexts.runAsUser') }}
</h4>
<LabeledInput
v-model.number="runAsUser"
data-testid="ps-config-security-context-container-runAsUser-input"
type="number"
min="0"
:mode="mode"
:disabled="disabledByOsWindows"
:label="t('kubewarden.policyServerConfig.securityContexts.runAsUser')"
@input="updateData($event, 'runAsUser')"
/>
</div>
</div>
<!-- SE LINUX OPTIONS -->
<SeLinuxOptions
:value="seLinuxOptions"
:mode="mode"
config-type="container"
:disabled="disabledByOsWindows"
@update-se-linux-options="updateData($event, 'seLinuxOptions')"
/>
<!-- SECCOMP PROFILE -->
<SeccompProfile
:value="seccompProfile"
:mode="mode"
config-type="container"
:disabled="disabledByOsWindows"
@update-seccomp-profile="updateData($event, 'seccompProfile')"
/>
<!-- WINDOWS OPTIONS -->
<WindowsOptions
:value="windowsOptions"
:mode="mode"
config-type="container"
:disabled="disabledByOsLinux"
@update-windows-options="updateData($event, 'windowsOptions')"
/>
</div>
</template>
Loading

0 comments on commit 85c7396

Please sign in to comment.