Commit Graph

26 Commits

Author SHA1 Message Date
Chris Farhood 1ec8340a0f fix: restore SectionBox wrapper in SettingsPage to fix React context
The plugin settings page requires SectionBox from CommonComponents
to properly initialize the React context. Without it, React.useState
is undefined causing runtime errors.

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-02-13 15:59:25 -05:00
Chris Farhood 679922e711 fix: change package name from headlamp-sealed-secrets to sealed-secrets
This matches the polaris plugin naming convention where the package
name is just 'polaris', causing Headlamp to display 'sealed-secrets'
in the plugin settings list instead of 'headlamp-sealed-secrets'.

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-02-13 12:56:44 -05:00
Chris Farhood 0b082984a7 chore: bump version to 0.2.16 2026-02-13 12:53:36 -05:00
Chris Farhood 4da3513015 feat: add displayName to package.json for proper UI display
Set displayName to 'Sealed Secrets' so the plugin settings list shows
the friendly name instead of the package name 'headlamp-sealed-secrets'.

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-02-13 12:53:28 -05:00
Chris Farhood 67287158fd chore: bump version to 0.2.15 2026-02-13 10:12:38 -05:00
Chris Farhood 3429b32625 chore: bump version to 0.2.14 2026-02-13 07:38:45 -05:00
Chris Farhood 7b51df5ce5 chore: bump version to 0.2.13 2026-02-13 06:33:22 -05:00
Chris Farhood 0ded85fe23 chore: bump version to 0.2.12 2026-02-12 21:41:08 -05:00
Chris Farhood b08df4fb76 feat: improve UX with drawer detail view and proper settings placement
Major UX improvements:
- Changed detail view from full page to drawer (slides from right)
- Moved plugin settings from sidebar to Settings → Plugins (proper pattern)
- Fixed React error #310 by adding defensive String() wrappers
- Fixed syncMessage getter to always return string
- Added safety checks for encryptedData access
- Added error handling for useGet failures

The drawer approach keeps the list visible while viewing details,
matching Headlamp's design patterns. Settings are now properly
located in the global Settings → Plugins section instead of
cluttering the plugin's sidebar navigation.

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-02-12 21:41:08 -05:00
Chris Farhood 9c62405a0c fix: resolve 'Body is disturbed or locked' fetch error
The error was caused by attempting to read the response body twice:
- First with response.json()
- Then with response.text() in the error handler

This caused the 'Body is disturbed or locked' error that was being
displayed as 'The string did not match the expected pattern'.

Fix: Removed the duplicate response.text() call in error handler.

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-02-12 20:47:37 -05:00
Chris Farhood 329d030c1a fix: add defensive error handling for API version detection
Ensure error messages are always strings before rendering to prevent
React error #310 (invalid React child - object).

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-02-12 20:18:54 -05:00
Chris Farhood da7b3d570d chore: bump version to 0.2.8
Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-02-12 19:56:45 -05:00
Chris Farhood 567551747c chore: bump version to 0.2.7 2026-02-12 18:11:15 -05:00
Chris Farhood 873ec033fe fix: use official Headlamp API instead of internal paths
The plugin was importing from internal Headlamp paths like
'@kinvolk/headlamp-plugin/lib/lib/k8s/cluster' instead of using the
official public API '@kinvolk/headlamp-plugin/lib'.

This caused the plugin to fail loading in the browser with:
"TypeError: undefined is not an object (evaluating 'Ot.KubeObject')"

Changes:
- Updated imports to use K8s.cluster and ApiProxy from main export
- Added vite.config.js with custom globals (now obsolete with this fix)
- Moved node-forge to dependencies for proper bundling

The plugin now uses only the official documented Headlamp plugin API.

Fixes: #[issue number if exists]

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-02-12 18:10:45 -05:00
Chris Farhood 37391cd92a fix: move node-forge to devDependencies for proper bundling
Moving node-forge from dependencies to devDependencies ensures it gets
bundled into the plugin instead of being externalized. This is required
because Headlamp doesn't provide node-forge as a shared library.

The .pluginrc file with empty externals forces bundling of all deps,
and keeping node-forge in devDependencies makes this behavior explicit.

This fixes the frontend loading error:
"TypeError: undefined is not an object (evaluating 'Ot.KubeObject')"

Changes:
- Moved node-forge from dependencies to devDependencies
- Updated package-lock.json to mark node-forge as dev dependency
- .pluginrc remains in place to enforce bundling

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-02-12 18:10:45 -05:00
github-actions[bot] 9802448e82 chore: release v0.2.6 2026-02-12 21:01:54 +00:00
github-actions[bot] 3876cb57d1 chore: bump version to 0.2.5 2026-02-12 20:05:47 +00:00
Chris Farhood b44f118196 fix: update owner references from cpfarhood to privilegedescalation
- Updated artifacthub-repo.yml owner and email
- Updated all artifacthub-pkg.yml files (current and historical versions)
- Updated package.json author
- Updated README.md badge URLs
- Updated all version-specific metadata files

Part of organization migration from cpfarhood to privilegedescalation.
2026-02-12 11:55:25 -05:00
Chris Farhood a11b2351a5 release: v0.2.4 - fix icon loading (proper version bump)
This is a proper version bump from v0.2.3 to v0.2.4 after discovering that
v0.2.3 was already published on Artifact Hub with a different tarball checksum.

Replace all Material-UI icon imports with Iconify equivalents to fix plugin loading.
Headlamp provides @iconify/react as a global, not @mui/icons-material.

Icon mappings:
- ErrorOutline → mdi:alert-circle-outline
- ContentCopy → mdi:content-copy
- Visibility → mdi:eye
- VisibilityOff → mdi:eye-off
- CheckCircle → mdi:check-circle
- Error → mdi:alert-circle
- Warning → mdi:alert
- Add → mdi:plus
- Delete → mdi:delete

Also fixed test-setup.ts lint errors (unused parameters).

Tarball checksum: SHA256:49062f6e9f68de49b83d53176d0bc09ce632d3df11e3397459342f51f6282131

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-02-12 11:06:43 -05:00
Chris Farhood 46d59b48b5 chore: migrate repository to privilegedescalation organization
Updated all GitHub URLs from cpfarhood to privilegedescalation organization:
- Repository URLs in package.json and Artifact Hub metadata
- Documentation links and references
- Git remote updated

No functional changes - this is purely an organizational migration.

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-02-12 10:50:30 -05:00
Chris Farhood b4cc5be6c3 fix: replace @mui/icons-material with @iconify/react (v0.2.3)
Material-UI icons were not provided as globals by Headlamp, causing
'undefined is not an object (evaluating Ct.createSvgIcon)' errors.

Headlamp provides @iconify/react as a global, so all icon imports have
been replaced with Iconify equivalents:
- ErrorOutline → mdi:alert-circle-outline
- ContentCopy → mdi:content-copy
- Visibility → mdi:eye
- VisibilityOff → mdi:eye-off
- CheckCircle → mdi:check-circle
- Error → mdi:alert-circle
- Warning → mdi:alert
- Add → mdi:plus
- Delete → mdi:delete

Changes:
- Replaced all @mui/icons-material imports with @iconify/react Icon component
- Updated 4 component files (ErrorBoundary, DecryptDialog, EncryptDialog, ControllerStatus)
- Bumped version to 0.2.3
- Bundle size reduced: 358.18 kB (98.04 kB gzipped)
- Checksum: SHA256:03787323abc9430a63433838253b2dd8296d237000acdfe4ce2507678b63125f

This should fix the plugin loading issue and make the sidebar entry appear.

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-02-12 09:35:58 -05:00
Chris Farhood ab366341f3 fix: downgrade headlamp-plugin SDK to 0.13.0 to fix React context errors (v0.2.2)
The plugin was built with @kinvolk/headlamp-plugin@^0.13.1, but the Headlamp server
is running with SDK version 0.13.0-alpha.11. This version mismatch caused React
context to be undefined, resulting in 'TypeError: undefined is not an object
(evaluating O2.createContext)' in the browser console.

Changes:
- Downgraded @kinvolk/headlamp-plugin from ^0.13.1 to ^0.13.0
- Removed 'main' field from package.json (carried over from v0.2.1)
- Bumped version to 0.2.2
- Created Artifact Hub metadata for 0.2.2
- Updated checksum: SHA256:3dd94e4da82a729c09eb73dcb548f89da00425169f21ff38bfb202caa442c95a

Fixes browser console error preventing plugin from loading.

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-02-12 08:44:32 -05:00
Chris Farhood 3bafbf2cb0 fix: remove 'main' field from package.json to fix plugin loading (v0.2.1)
The 'main' field pointing to 'dist/main.js' was preventing Headlamp from properly loading the plugin. Headlamp expects main.js in the root directory of the plugin.

Changes:
- Removed 'main' field from package.json
- Bumped version to 0.2.1
- Created Artifact Hub metadata for 0.2.1
- Updated checksum: SHA256:bf0c1211b51df29d378ec9dabd2599cbff6f32fdc98bcae9807fe2ff5cf87a8a

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-02-12 08:22:15 -05:00
Chris Farhood ebbdb42c05 docs: implement Phase 2 - API documentation with TypeDoc
Set up TypeDoc to auto-generate comprehensive API reference documentation
from TypeScript source code.

Changes:
- Installed typedoc and typedoc-plugin-markdown (v0.2.0 plugins)
- Created typedoc.json configuration with 9 entry points
- Added docs:api and docs:watch npm scripts
- Fixed test file imports (validateNamespace → isValidNamespace)
- Updated tsconfig.json to exclude test files from compilation
- Generated markdown API documentation in docs/api-reference/generated/

Generated API documentation:
- 9 modules documented (lib/, hooks/, types/)
- lib/crypto - 14 encryption/certificate functions
- lib/controller - 5 Kubernetes API functions
- lib/validators - 6 validation functions
- lib/retry - Exponential backoff utilities
- lib/rbac - RBAC permission checking
- types - Result types, branded types, interfaces
- hooks/useSealedSecretEncryption - Encryption React hook
- hooks/usePermissions - RBAC React hooks
- hooks/useControllerHealth - Health monitoring hook

Benefits:
- Auto-generated from TypeScript source (stays in sync)
- Markdown format for easy integration
- Type signatures and JSDoc included
- Function parameters and return types documented
- Links between related types and functions

Phase 2 deliverables (2-3 days estimated, completed in 1 session):
 TypeDoc installed and configured
 Entry points identified for all core modules
 API documentation generated (9 modules, 40+ functions)
 npm scripts added for docs generation
 Test files excluded from documentation

Next: Phase 3 - User tutorials and guides

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-02-11 23:27:18 -05:00
Chris Farhood 4740179b0b chore: bump version to 0.2.0 for Artifact Hub
Update version metadata to 0.2.0 in preparation for Artifact Hub release.

Changes:
- package.json: 0.1.0 → 0.2.0
- artifacthub-pkg.yml: version and appVersion 0.1.0 → 0.2.0
- Enhanced description to highlight WCAG 2.1 AA accessibility

This version includes:
- Phase 1: Type-safe error handling (Result types, branded types, validators, retry logic)
- Phase 2: UX improvements (cert expiry warnings, health checks, RBAC, API version detection)
- Phase 3: Performance optimizations (React.memo, debouncing, lazy loading)
- Phase 4.1: Unit tests (36/39 passing - types, retry, validators)

Artifact Hub will pick up this version on next scan.

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>
2026-02-11 22:33:38 -05:00
Chris Farhood dddbd30677 Initial release: Headlamp Sealed Secrets plugin v0.1.0
Features:
- Complete SealedSecret CRD integration with Headlamp
- Client-side encryption using controller's public key
- Support for all three scoping modes (strict, namespace-wide, cluster-wide)
- List and detail views for SealedSecrets
- Encryption dialog for creating new SealedSecrets
- Decryption support with RBAC awareness
- Sealing keys management
- Settings page for controller configuration
- Integration with Secret detail view

Technical:
- Full TypeScript with strict mode
- ~1,345 lines of code
- Build size: 339.42 kB (93.21 kB gzipped)
- Compatible with Headlamp v0.13.0+
- Apache 2.0 license

Security:
- All encryption performed client-side
- RSA-OAEP + AES-256-GCM (kubeseal-compatible)
- Auto-hide decrypted values after 30 seconds

Closes: Initial implementation
2026-02-11 20:31:20 -05:00