WIP MGMT-9754 Static IPs

deploy-ui/manifests/clusterrolbinding.yaml

@@ -1,3 +1,4 @@
+---
 # Enable creating tokenreviews
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

ui/.gitignore

@@ -7,7 +7,8 @@ frontend/node_modules
 frontend/coverage
 frontend/src/copy-backend-common
 
-scripts/certs
+./certs
+./deploy.yaml
 
 node_modules
 TODO

ui/backend/src/common/constants.ts

@@ -7,3 +7,5 @@ export const ZTPFW_DEPLOYMENT_NAME = 'ztpfw-ui';
 
 export const ZTPFW_OAUTHCLIENT_NAME = 'ztpfwoauth';
 export const ZTPFW_NAMESPACE = 'ztpfw-ui';
+
+export const IDENTITY_PROVIDER_NAME = 'ztpfw-htpasswd-idp';

ui/backend/src/common/resources/NodeNetworkConfigurationPolicy.ts

@@ -0,0 +1,50 @@
+import { Metadata } from './metadata';
+import { NNRouteConfig } from './NodeNetworkState';
+import { IResource } from './resource';
+
+export type NodeNetworkConfigurationPolicyType = 'nmstate.io/v1';
+export const NodeNetworkConfigurationPolicyApiVersion: NodeNetworkConfigurationPolicyType =
+  'nmstate.io/v1';
+
+export type NodeNetworkConfigurationPolicyKindType = 'NodeNetworkConfigurationPolicy';
+export const NodeNetworkConfigurationPolicyKind: NodeNetworkConfigurationPolicyKindType =
+  'NodeNetworkConfigurationPolicy';
+
+export type NNCPInterface = {
+  name: string;
+  state: 'up' | 'down';
+  type?: 'ethernet';
+  ipv4: {
+    address: {
+      ip: string;
+      'prefix-length': number;
+    }[];
+    enabled: boolean;
+  };
+};
+export interface NodeNetworkConfigurationPolicy extends IResource {
+  apiVersion: NodeNetworkConfigurationPolicyType;
+  kind: NodeNetworkConfigurationPolicyKindType;
+  metadata: Metadata;
+
+  spec: {
+    nodeSelector?: {
+      // kubernetes.io/hostname: ztpfw-edgecluster0-cluster-master-0
+      [key: string]: string;
+    };
+    desiredState: {
+      interfaces: NNCPInterface[];
+
+      'dns-resolver'?: {
+        // TODO: don't forget to set ipv4[auto-dns] to false
+        config: {
+          server: string[];
+        };
+      };
+
+      routes?: {
+        config?: NNRouteConfig[];
+      };
+    };
+  };
+}

ui/backend/src/common/resources/NodeNetworkState.ts

@@ -0,0 +1,55 @@
+import { Metadata } from './metadata';
+import { IResource } from './resource';
+
+export type NodeNetworkStateType = 'nmstate.io/v1beta1';
+export const NodeNetworkStateApiVersion: NodeNetworkStateType = 'nmstate.io/v1beta1';
+
+export type NodeNetworkStateKindType = 'NodeNetworkState';
+export const NodeNetworkStateKind: NodeNetworkStateKindType = 'NodeNetworkState';
+
+interface NodeNetworkStateInterface {
+  ipv4: {
+    address: {
+      ip: string;
+      'prefix-length': number;
+    }[];
+    enabled: false;
+  };
+  // ipv6: {}
+  type: 'ethernet' | 'anything-else-is-not-important-now';
+  name: string;
+  state: 'down' | 'up';
+  mtu: number;
+  'mac-address': string;
+  dhcp: boolean;
+  enabled: boolean;
+  'auto-dns': boolean;
+  'auto-gateway': boolean;
+}
+
+export interface NNRouteConfig {
+  destination: string; // subnet mask
+  metric: number;
+  'next-hop-address': string; // gateway
+  'next-hop-interface': string; // interface name
+}
+
+export interface NodeNetworkState extends IResource {
+  apiVersion: NodeNetworkStateType;
+  kind: NodeNetworkStateKindType;
+  metadata: Metadata;
+
+  status?: {
+    currentState?: {
+      'dns-resolver'?: {
+        running?: {
+          server?: string[];
+        };
+      };
+      interfaces?: NodeNetworkStateInterface[];
+      routes?: {
+        running?: NNRouteConfig[];
+      };
+    };
+  };
+}

ui/backend/src/common/resources/index.ts

@@ -12,3 +12,6 @@ export * from './deployment';
 export * from './pod';
 export * from './clusteroperator';
 export * from './utils';
+export * from './NodeNetworkState';
+export * from './NodeNetworkConfigurationPolicy';
+export * from './node';

ui/backend/src/common/resources/metadata.ts

@@ -1,3 +1,9 @@
+export interface OwnerReference {
+  apiVersion: string;
+  kind: string;
+  name: string;
+  uid: string;
+}
 export interface Metadata {
   name?: string;
   namespace?: string;
@@ -10,4 +16,5 @@ export interface Metadata {
   deletionTimestamp?: string;
   selfLink?: string;
   finalizers?: string[];
+  ownerReferences?: OwnerReference[];
 }

ui/backend/src/common/resources/node.ts

@@ -0,0 +1,25 @@
+import { Metadata } from './metadata';
+import { IResource } from './resource';
+
+export type NodeType = 'v1';
+export const NodeApiVersion: NodeType = 'v1';
+
+export type NodeKindType = 'Node';
+export const NodeKind: NodeKindType = 'Node';
+
+export interface Node extends IResource {
+  apiVersion: NodeType;
+  kind: NodeKindType;
+  metadata: Metadata;
+  /*
+    node-role.kubernetes.io/master: ""
+    node-role.kubernetes.io/worker: ""
+  */
+
+  status?: {
+    addresses?: {
+      address: string;
+      type: 'Hostname' | 'InternalIP';
+    }[];
+  };
+}

ui/backend/src/common/resources/service.ts

@@ -22,5 +22,11 @@ export interface Service extends IResource {
     selector?: Record<string, string>;
     type?: string;
   };
-  status?: unknown;
+  status?: {
+    loadBalancer?: {
+      ingress: {
+        ip?: string;
+      }[];
+    };
+  };
 }

ui/backend/src/common/types.ts

@@ -6,12 +6,59 @@ export type TlsCertificate = {
   'tls.key.filename'?: string;
 };
 
+export type CustomCertsType = {
+  [key: /* ~ domain */ string]: TlsCertificate;
+};
+
 export type ChangeDomainInputType = {
   clusterDomain?: string;
-  customCerts?: {
-    [key: /* ~ domain */ string]: TlsCertificate;
-  };
+  customCerts?: CustomCertsType;
 };
 
 export type ValidateDomainAPIResult = { result: boolean };
 export type ValidateDomainAPIInput = { domain?: string };
+
+export type HostInterfaceType = {
+  name: string; // i.e. "eth0"
+  // type: 'ethernet' | 'bond' | 'linux-bridge';
+  // state: 'up' | 'down';
+  ipv4: {
+    dhcp: boolean; // "false" for static IPs
+    enabled: boolean; // always true otherwise not found
+
+    address?: {
+      // We support only one static IP per interface
+      ip?: string; // regular (dotted) IP form
+      prefixLength?: number;
+      validation?: string;
+
+      gateway?: string;
+      gatewayValidation?: string; // undefined if valid
+    };
+  };
+};
+
+export type HostType = {
+  nodeName: string; // metadata.name of the Node resource
+  hostname?: string; // kubernetes.io/hostname label in Node or nmstate spec.nodeSelector (optional)
+  nncpName?: string; // metadata.name of the NodeNetworkConfigurationPolicy (if exists)
+
+  role?: 'control' | 'worker'; // node-role.kubernetes.io/worker , node-role.kubernetes.io/master
+
+  interfaces: HostInterfaceType[];
+  dns?: string[];
+
+  dnsValidation?: string; // undefined if valid
+};
+
+/*
+export type Network4Type = {
+  prefixLength: number;
+  dns?: string;
+  gw?: string;
+};
+*/
+
+export type ChangeStaticIpsInputType = {
+  hosts?: HostType[];
+};