feat: Cluster terminal access for Super Admins

Wire.go

@@ -43,6 +43,7 @@ import (
 	"github.com/devtron-labs/devtron/api/sse"
 	"github.com/devtron-labs/devtron/api/sso"
 	"github.com/devtron-labs/devtron/api/team"
+	"github.com/devtron-labs/devtron/api/terminal"
 	"github.com/devtron-labs/devtron/api/user"
 	webhookHelm "github.com/devtron-labs/devtron/api/webhook/helm"
 	"github.com/devtron-labs/devtron/client/argocdServer"
@@ -132,6 +133,7 @@ func InitializeApp() (*App, error) {
 		module.ModuleWireSet,
 		apiToken.ApiTokenWireSet,
 		webhookHelm.WebhookHelmWireSet,
+		terminal.TerminalWireSet,
 		// -------wireset end ----------
 		gitSensor.GetGitSensorConfig,
 		gitSensor.NewGitSensorSession,

api/cluster/ClusterRestHandler.go

@@ -51,6 +51,7 @@ type ClusterRestHandler interface {
 
 	FindAllForAutoComplete(w http.ResponseWriter, r *http.Request)
 	DeleteCluster(w http.ResponseWriter, r *http.Request)
+	GetAllClusterNamespaces(w http.ResponseWriter, r *http.Request)
 }
 
 type ClusterRestHandlerImpl struct {
@@ -360,3 +361,18 @@ func (impl ClusterRestHandlerImpl) DeleteCluster(w http.ResponseWriter, r *http.
 	}
 	common.WriteJsonResp(w, err, CLUSTER_DELETE_SUCCESS_RESP, http.StatusOK)
 }
+
+func (impl ClusterRestHandlerImpl) GetAllClusterNamespaces(w http.ResponseWriter, r *http.Request) {
+	token := r.Header.Get("token")
+	clusterNamespaces := impl.clusterService.GetAllClusterNamespaces()
+
+	// RBAC enforcer applying
+	for clusterName, _ := range clusterNamespaces {
+		if ok := impl.enforcer.Enforce(token, casbin.ResourceCluster, casbin.ActionGet, strings.ToLower(clusterName)); !ok {
+			delete(clusterNamespaces, clusterName)
+		}
+	}
+	//RBAC enforcer Ends
+
+	common.WriteJsonResp(w, nil, clusterNamespaces, http.StatusOK)
+}

api/cluster/ClusterRouter.go

@@ -57,6 +57,10 @@ func (impl ClusterRouterImpl) InitClusterRouter(clusterRouter *mux.Router) {
 		Methods("GET").
 		HandlerFunc(impl.clusterRestHandler.FindAllForAutoComplete)
 
+	clusterRouter.Path("/namespaces").
+		Methods("GET").
+		HandlerFunc(impl.clusterRestHandler.GetAllClusterNamespaces)
+
 	clusterRouter.Path("").
 		Methods("DELETE").
 		HandlerFunc(impl.clusterRestHandler.DeleteCluster)

api/router/AttributesRouter.go

@@ -23,7 +23,7 @@ import (
 )
 
 type AttributesRouter interface {
-	initAttributesRouter(helmRouter *mux.Router)
+	InitAttributesRouter(helmRouter *mux.Router)
 }
 
 type AttributesRouterImpl struct {
@@ -37,7 +37,7 @@ func NewAttributesRouterImpl(attributesRestHandler restHandler.AttributesRestHan
 	return router
 }
 
-func (router AttributesRouterImpl) initAttributesRouter(attributesRouter *mux.Router) {
+func (router AttributesRouterImpl) InitAttributesRouter(attributesRouter *mux.Router) {
 	attributesRouter.Path("/create").
 		HandlerFunc(router.attributesRestHandler.AddAttributes).Methods("POST")
 	attributesRouter.Path("/update").

api/router/router.go

@@ -34,6 +34,7 @@ import (
 	"github.com/devtron-labs/devtron/api/server"
 	"github.com/devtron-labs/devtron/api/sso"
 	"github.com/devtron-labs/devtron/api/team"
+	terminal2 "github.com/devtron-labs/devtron/api/terminal"
 	"github.com/devtron-labs/devtron/api/user"
 	webhookHelm "github.com/devtron-labs/devtron/api/webhook/helm"
 	"github.com/devtron-labs/devtron/client/cron"
@@ -113,6 +114,7 @@ type MuxRouter struct {
 	k8sCapacityRouter                  k8s.K8sCapacityRouter
 	webhookHelmRouter                  webhookHelm.WebhookHelmRouter
 	globalCMCSRouter                   GlobalCMCSRouter
+	userTerminalAccessRouter           terminal2.UserTerminalAccessRouter
 }
 
 func NewMuxRouter(logger *zap.SugaredLogger, HelmRouter PipelineTriggerRouter, PipelineConfigRouter PipelineConfigRouter,
@@ -139,7 +141,7 @@ func NewMuxRouter(logger *zap.SugaredLogger, HelmRouter PipelineTriggerRouter, P
 	globalPluginRouter GlobalPluginRouter, moduleRouter module.ModuleRouter,
 	serverRouter server.ServerRouter, apiTokenRouter apiToken.ApiTokenRouter,
 	helmApplicationStatusUpdateHandler cron.CdApplicationStatusUpdateHandler, k8sCapacityRouter k8s.K8sCapacityRouter,
-	webhookHelmRouter webhookHelm.WebhookHelmRouter, globalCMCSRouter GlobalCMCSRouter) *MuxRouter {
+	webhookHelmRouter webhookHelm.WebhookHelmRouter, globalCMCSRouter GlobalCMCSRouter, userTerminalAccessRouter terminal2.UserTerminalAccessRouter) *MuxRouter {
 	r := &MuxRouter{
 		Router:                             mux.NewRouter(),
 		HelmRouter:                         HelmRouter,
@@ -204,6 +206,7 @@ func NewMuxRouter(logger *zap.SugaredLogger, HelmRouter PipelineTriggerRouter, P
 		k8sCapacityRouter:                  k8sCapacityRouter,
 		webhookHelmRouter:                  webhookHelmRouter,
 		globalCMCSRouter:                   globalCMCSRouter,
+		userTerminalAccessRouter:           userTerminalAccessRouter,
 	}
 	return r
 }
@@ -325,7 +328,7 @@ func (r MuxRouter) Init() {
 	r.gitOpsConfigRouter.InitGitOpsConfigRouter(gitOpsRouter)
 
 	attributeRouter := r.Router.PathPrefix("/orchestrator/attributes").Subrouter()
-	r.attributesRouter.initAttributesRouter(attributeRouter)
+	r.attributesRouter.InitAttributesRouter(attributeRouter)
 
 	userAttributeRouter := r.Router.PathPrefix("/orchestrator/attributes/user").Subrouter()
 	r.userAttributesRouter.InitUserAttributesRouter(userAttributeRouter)
@@ -404,4 +407,7 @@ func (r MuxRouter) Init() {
 
 	globalCMCSRouter := r.Router.PathPrefix("/orchestrator/global/cm-cs").Subrouter()
 	r.globalCMCSRouter.initGlobalCMCSRouter(globalCMCSRouter)
+
+	userTerminalAccessRouter := r.Router.PathPrefix("/orchestrator/user/terminal").Subrouter()
+	r.userTerminalAccessRouter.InitTerminalAccessRouter(userTerminalAccessRouter)
 }