sarman/tftsr-devops_investigation

Fork 0

Table of Contents

Kubernetes Management

Overview
Page Layout
Resource Types (26 total)

Workloads (7)
Services & Networking (3)
Config & Storage (8)
Access Control (5)
Cluster (4)

Advanced Features

Terminal (Terminal.tsx)
YAML Editor (YamlEditor.tsx)
Metrics Charts (MetricsChart.tsx)
Command Palette (CommandPalette.tsx)
RBAC Management (RbacViewer.tsx / RbacEditor.tsx)
Cluster Overview (ClusterOverview.tsx)

Backend Architecture

State
Security
Commands (48 total)

Cluster Management (5)
Port Forwarding (5)
Resource Discovery (26)
Resource Management (8)
YAML Operations (2)
Rollback (1)
Event Subscription (3)

Frontend State Management
Key Files
Dependencies

Frontend (npm)
Backend (Cargo)

Known Limitations

Kubernetes Management

This document describes the Kubernetes Management UI — a Lens Desktop v5-equivalent Kubernetes management experience built into the Troubleshooting and RCA Assistant.

Overview

The Kubernetes Management UI provides full feature parity with Lens Desktop v5.x (the last open-source release), delivering a complete cluster management IDE directly inside the application. The implementation is MIT-licensed and uses the bundled kubectl binary for all cluster operations.

Current version: v1.1.0

Page Layout

The Kubernetes page uses a Lens-style shell layout:

┌──────────────────────────────────────────────────────────────┐
│  Hotbar: Cluster selector | Namespace selector | Refresh | + │
├──────────────┬───────────────────────────────────────────────┤
│   SIDEBAR    │              MAIN CONTENT                     │
│              │                                               │
│ ▶ WORKLOADS  │  ClusterOverview (default)                    │
│   Pods       │  — or —                                       │
│   Deployments│  Selected resource list                       │
│   DaemonSets │  — or —                                       │
│   StatefulSets│  Detail panel                                │
│   ReplicaSets │                                              │
│   Jobs       │                                               │
│   CronJobs   │                                               │
│              │                                               │
│ ▶ NETWORKING │                                               │
│   Services   │                                               │
│   Ingresses  │                                               │
│   NetworkPols│                                               │
│              │                                               │
│ ▶ CONFIG     │                                               │
│   ConfigMaps │                                               │
│   Secrets    │                                               │
│   HPAs       │                                               │
│   PVCs       │                                               │
│   PVs        │                                               │
│   StorageClass│                                              │
│   ResourceQ  │                                               │
│   LimitRanges│                                               │
│              │                                               │
│ ▶ ACCESS CTL │                                               │
│   ServiceAccts│                                              │
│   Roles      │                                               │
│   ClusterRoles│                                              │
│   RoleBindings│                                              │
│   CRBindings │                                               │
│              │                                               │
│ ▶ CLUSTER    │                                               │
│   Overview   │                                               │
│   Nodes      │                                               │
│   Events     │                                               │
│   Port Fwd   │                                               │
└──────────────┴───────────────────────────────────────────────┘

Keyboard shortcut: Ctrl+K opens the Command Palette for quick navigation.

Resource Types (26 total)

Workloads (7)

Resource	Component	Actions
Pods	`PodList` + `PodDetail`	Logs, exec, scale, delete
Deployments	`DeploymentList` + `DeploymentDetail`	Scale, restart, rollback, delete
Daemon Sets	`DaemonSetList`	Delete
Stateful Sets	`StatefulSetList`	Delete
Replica Sets	`ReplicaSetList`	Delete
Jobs	`JobList`	Delete
Cron Jobs	`CronJobList`	Delete

Services & Networking (3)

Resource	Component	Actions
Services	`ServiceList` + `ServiceDetail`	Port forward, delete
Ingresses	`IngressList`	Delete
Network Policies	`NetworkPolicyList`	Delete

Config & Storage (8)

Resource	Component	Actions
Config Maps	`ConfigMapList` + `ConfigMapDetail`	Edit, delete
Secrets	`SecretList` + `SecretDetail`	View masked, delete
Horizontal Pod Autoscalers	`HPAList`	Delete
Persistent Volume Claims	`PVCList`	Delete
Persistent Volumes	`PVList`	Delete
Storage Classes	`StorageClassList`	Delete
Resource Quotas	`ResourceQuotaList`	Delete
Limit Ranges	`LimitRangeList`	Delete

Access Control (5)

Resource	Component	Actions
Service Accounts	`ServiceAccountList`	Delete
Roles	`RoleList` + `RbacViewer`/`RbacEditor`	Create, delete
Cluster Roles	`ClusterRoleList` + `RbacViewer`/`RbacEditor`	Create, delete
Role Bindings	`RoleBindingList`	Delete
Cluster Role Bindings	`ClusterRoleBindingList`	Delete

Cluster (4)

Resource	Component	Notes
Overview	`ClusterOverview`	Live node/pod/deployment counts
Nodes	`NodeList`	Cordon, uncordon, drain
Events	`EventList`	Filterable by namespace
Port Forwarding	`PortForwardList` + `PortForwardForm`	Start/stop/delete tunnels

Advanced Features

Terminal (`Terminal.tsx`)

Full xterm.js implementation with multi-tab session management
Shell selection: sh, bash, zsh
Connects to pods via exec_pod IPC command
xterm-addon-fit for automatic resize
xterm-addon-web-links for clickable URLs in output
Sessions identified by pod/container/namespace

YAML Editor (`YamlEditor.tsx`)

Monaco editor (@monaco-editor/react) with YAML syntax highlighting
Language: yaml, Theme: vs-dark
Controlled value with Apply/Cancel buttons
Used in: CreateResourceModal, EditResourceModal, detail panels, RbacEditor

Metrics Charts (`MetricsChart.tsx`)

recharts LineChart and BarChart with ResponsiveContainer
Time range selector: 5m, 15m, 1h, 6h, 1d
Used in: ApplicationView, ClusterOverview

Command Palette (`CommandPalette.tsx`)

Triggered with Ctrl+K from anywhere in the Kubernetes page
12 navigation commands covering all major resource types
Keyboard navigation: ↑/↓ arrows, Enter to execute, Escape to close
Filter commands by typing

RBAC Management (`RbacViewer.tsx` / `RbacEditor.tsx`)

Viewer: live data from listRolesCmd, listClusterrolesCmd, listRolebindingsCmd, listClusterrolebindingsCmd
Editor: YAML editor with template generation for Roles, ClusterRoles, RoleBindings, ClusterRoleBindings
Create via createResourceCmd, delete via deleteResourceCmd

Cluster Overview (`ClusterOverview.tsx`)

Real-time counts: nodes (ready/total), pods (running/total), deployments, namespaces
Node table with status, roles, version, age
All data loaded from listNodesCmd, listPodsCmd, listDeploymentsCmd, listNamespacesCmd

Backend Architecture

All Kubernetes operations use the bundled kubectl binary (v1.30.0) via tokio::process::Command. No direct Kubernetes API client library is used — this approach avoids TLS certificate management complexity and works with any cluster configuration.

State

pub struct AppState {
    pub clusters: Arc<TokioMutex<HashMap<String, ClusterClient>>>,
    pub port_forwards: Arc<TokioMutex<HashMap<String, PortForwardSession>>>,
    pub watchers: Arc<Mutex<HashMap<String, WatcherHandle>>>,
    // ...
}

Clusters are stored in-memory only (not persisted). Kubeconfigs are stored encrypted in the database and written to temporary files at command execution time.

Security

Input validation: validate_resource_name() enforces Kubernetes DNS subdomain rules and prevents command injection
Temp file cleanup: TempFileCleanup guard auto-deletes kubeconfig temp files on scope exit
No credential logging: kubeconfig content never appears in audit logs
Three-tier command safety: shell commands additionally classified by classifier.rs (Tier 1 auto, Tier 2 approval, Tier 3 deny)

Commands (48 total)

Cluster Management (5)

add_cluster, remove_cluster, list_clusters, test_cluster_connection, discover_pods

Port Forwarding (5)

start_port_forward, stop_port_forward, list_port_forwards, delete_port_forward, shutdown_port_forwards

Resource Discovery (26)

list_namespaces, list_pods, list_services, list_deployments, list_statefulsets, list_daemonsets
list_replicasets, list_jobs, list_cronjobs
list_configmaps, list_secrets, list_nodes, list_events
list_ingresses, list_persistentvolumeclaims, list_persistentvolumes
list_serviceaccounts, list_roles, list_clusterroles, list_rolebindings, list_clusterrolebindings
list_horizontalpodautoscalers
list_storageclasses, list_networkpolicies, list_resourcequotas, list_limitranges (v1.1.0)

Resource Management (8)

get_pod_logs, scale_deployment, restart_deployment, delete_resource, exec_pod
cordon_node, uncordon_node, drain_node

YAML Operations (2)

create_resource, edit_resource

Rollback (1)

rollback_deployment

Event Subscription (3)

subscribe_to_k8s_events, subscribe_to_all_k8s_events, unsubscribe_from_k8s_events

Frontend State Management

Store: src/stores/kubernetesStore.ts (Zustand, not persisted)

State	Purpose
`selectedClusterId`	Active cluster (drives namespace/resource loading)
`selectedNamespace`	Active namespace filter
`clusters`, `contexts`	Cluster metadata
`namespaces`	Cached namespace list per cluster
`loadedResources`	Set of resource types currently loaded
`terminalSessions`	Active xterm.js terminal sessions
`globalSearchQuery`	Cross-resource search state
`bulkSelection`	Multi-resource selection per type

Key Files

Path	Purpose
`src/pages/Kubernetes/KubernetesPage.tsx`	Lens-like page shell (sidebar + hotbar + content)
`src/components/Kubernetes/ResourceBrowser.tsx`	Legacy resource browser (5 types)
`src/components/Kubernetes/ClusterOverview.tsx`	Live cluster summary
`src/components/Kubernetes/Terminal.tsx`	xterm.js pod exec terminal
`src/components/Kubernetes/YamlEditor.tsx`	Monaco YAML editor
`src/components/Kubernetes/MetricsChart.tsx`	recharts metrics visualization
`src/components/Kubernetes/RbacViewer.tsx`	Live RBAC resource viewer
`src/components/Kubernetes/RbacEditor.tsx`	RBAC create/edit via YAML
`src/components/Kubernetes/CommandPalette.tsx`	Ctrl+K command palette
`src/lib/eventBus.ts`	Frontend event bus for K8s watchers
`src-tauri/src/commands/kube.rs`	All 48 Kubernetes Tauri commands
`src-tauri/src/kube/`	Client, port forward, watcher, refresh modules

Dependencies

Frontend (npm)

Package	Version	Purpose
`xterm`	5.x	Terminal emulator
`xterm-addon-fit`	0.8.x	Auto-resize
`xterm-addon-web-links`	0.9.x	Clickable URLs
`@monaco-editor/react`	4.x	YAML editor
`recharts`	2.x	Metrics charts

Backend (Cargo)

No external Kubernetes client libraries. Uses tokio::process::Command + bundled kubectl binary.

Known Limitations

Metrics: CPU/memory charts show placeholder data — requires metrics-server integration (future work)
Real-time updates: Watcher backend exists but frontend integration is polling-based; true watch streams pending
Helm: Not yet integrated (planned for v1.2.0)
StorageClasses: Cluster-scoped, no namespace filter
Node metrics: Cordon/drain requires cluster admin privileges