ec47df3cc1
- fix: create tenant from operator-ui was broken due to migration from standalone console to embedded console - fix: refresh, activate and attach license in subscription page was broken - fix: tenant usage report in operator-ui - fix: show tenant encryption enabled if MINIO_KMS_SECRET_KEY is present Signed-off-by: Lenin Alevski <alevsk.8772@gmail.com>
68 lines
2.0 KiB
Go
68 lines
2.0 KiB
Go
// This file is part of MinIO Console Server
|
|
// Copyright (c) 2021 MinIO, Inc.
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
package operatorapi
|
|
|
|
import (
|
|
"crypto/x509"
|
|
"io/ioutil"
|
|
"time"
|
|
|
|
xcerts "github.com/minio/pkg/certs"
|
|
|
|
"github.com/minio/pkg/env"
|
|
)
|
|
|
|
var (
|
|
// Port console default port
|
|
Port = "9090"
|
|
|
|
// Hostname console hostname
|
|
// avoid listening on 0.0.0.0 by default
|
|
// instead listen on all IPv4 and IPv6
|
|
// - Hostname should be empty.
|
|
Hostname = ""
|
|
|
|
// TLSPort console tls port
|
|
TLSPort = "9443"
|
|
|
|
// TLSRedirect console tls redirect rule
|
|
TLSRedirect = "on"
|
|
|
|
// SessionDuration cookie validity duration
|
|
SessionDuration = 45 * time.Minute
|
|
|
|
// LicenseKey in memory license key used by console ui
|
|
LicenseKey = ""
|
|
|
|
// GlobalRootCAs is CA root certificates, a nil value means system certs pool will be used
|
|
GlobalRootCAs *x509.CertPool
|
|
// GlobalPublicCerts has certificates Console will use to serve clients
|
|
GlobalPublicCerts []*x509.Certificate
|
|
// GlobalTLSCertsManager custom TLS Manager for SNI support
|
|
GlobalTLSCertsManager *xcerts.Manager
|
|
)
|
|
|
|
// getK8sSAToken assumes the plugin is running inside a k8s pod and extract the current service account from the
|
|
// /var/run/secrets/kubernetes.io/serviceaccount/token file
|
|
func getK8sSAToken() string {
|
|
dat, err := ioutil.ReadFile("/var/run/secrets/kubernetes.io/serviceaccount/token")
|
|
if err != nil {
|
|
return env.Get(ConsoleOperatorSAToken, "")
|
|
}
|
|
return string(dat)
|
|
}
|