Compare commits
13 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| 2f746486db | |||
| 55b10c5ab2 | |||
| a7761e992b | |||
| 679922e711 | |||
| 248ffa4962 | |||
| 0b082984a7 | |||
| 4da3513015 | |||
| 74af59ef50 | |||
| 67287158fd | |||
| dbc1fb199b | |||
| c63afb1461 | |||
| 3429b32625 | |||
| 5cf360b591 |
@@ -24,6 +24,14 @@ jobs:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Get package name
|
||||
id: package_name
|
||||
working-directory: ./headlamp-sealed-secrets
|
||||
run: |
|
||||
PKG_NAME=$(jq -r '.name' package.json)
|
||||
echo "name=${PKG_NAME}" >> $GITHUB_OUTPUT
|
||||
echo "Package name: ${PKG_NAME}"
|
||||
|
||||
- name: Configure git
|
||||
run: |
|
||||
git config user.name "github-actions[bot]"
|
||||
@@ -38,7 +46,7 @@ jobs:
|
||||
- name: Update artifacthub-pkg.yml version
|
||||
run: |
|
||||
VERSION="${{ inputs.version }}"
|
||||
RELEASE_URL="https://github.com/${{ github.repository }}/releases/download/v${VERSION}/headlamp-sealed-secrets-${VERSION}.tar.gz"
|
||||
RELEASE_URL="https://github.com/${{ github.repository }}/releases/download/v${VERSION}/${{ steps.package_name.outputs.name }}-${VERSION}.tar.gz"
|
||||
|
||||
sed -i "s|^version:.*|version: ${VERSION}|" artifacthub-pkg.yml
|
||||
sed -i "s|^appVersion:.*|appVersion: ${VERSION}|" artifacthub-pkg.yml
|
||||
@@ -74,7 +82,7 @@ jobs:
|
||||
- name: Move tarball to root
|
||||
working-directory: ./headlamp-sealed-secrets
|
||||
run: |
|
||||
TARBALL="headlamp-sealed-secrets-${{ inputs.version }}.tar.gz"
|
||||
TARBALL="${{ steps.package_name.outputs.name }}-${{ inputs.version }}.tar.gz"
|
||||
if [ ! -f "${TARBALL}" ]; then
|
||||
echo "::error::Expected tarball ${TARBALL} not found"
|
||||
ls -la *.tar.gz
|
||||
@@ -85,7 +93,7 @@ jobs:
|
||||
|
||||
- name: Validate tarball name
|
||||
run: |
|
||||
EXPECTED="headlamp-sealed-secrets-${{ inputs.version }}.tar.gz"
|
||||
EXPECTED="${{ steps.package_name.outputs.name }}-${{ inputs.version }}.tar.gz"
|
||||
ACTUAL=$(ls *.tar.gz)
|
||||
if [ "$EXPECTED" != "$ACTUAL" ]; then
|
||||
echo "::error::Tarball name mismatch! Expected: $EXPECTED, Got: $ACTUAL"
|
||||
@@ -96,19 +104,19 @@ jobs:
|
||||
- name: Compute checksum
|
||||
id: compute_checksum
|
||||
run: |
|
||||
TARBALL="headlamp-sealed-secrets-${{ inputs.version }}.tar.gz"
|
||||
TARBALL="${{ steps.package_name.outputs.name }}-${{ inputs.version }}.tar.gz"
|
||||
CHECKSUM=$(sha256sum "$TARBALL" | awk '{print $1}')
|
||||
echo "checksum=${CHECKSUM}" >> $GITHUB_OUTPUT
|
||||
echo "Checksum: sha256:${CHECKSUM}"
|
||||
|
||||
- name: Verify tarball contents
|
||||
run: |
|
||||
TARBALL="headlamp-sealed-secrets-${{ inputs.version }}.tar.gz"
|
||||
TARBALL="${{ steps.package_name.outputs.name }}-${{ inputs.version }}.tar.gz"
|
||||
echo "Tarball contents:"
|
||||
tar -tzf "${TARBALL}" | head -20
|
||||
|
||||
# Verify main.js exists (structure is headlamp-sealed-secrets/main.js)
|
||||
if ! tar -tzf "${TARBALL}" | grep -q "headlamp-sealed-secrets/main.js"; then
|
||||
# Verify main.js exists (structure is <package-name>/main.js)
|
||||
if ! tar -tzf "${TARBALL}" | grep -q "${{ steps.package_name.outputs.name }}/main.js"; then
|
||||
echo "::error::main.js not found in tarball"
|
||||
exit 1
|
||||
fi
|
||||
@@ -134,7 +142,7 @@ jobs:
|
||||
uses: softprops/action-gh-release@v2
|
||||
with:
|
||||
tag_name: "v${{ inputs.version }}"
|
||||
files: headlamp-sealed-secrets-${{ inputs.version }}.tar.gz
|
||||
files: ${{ steps.package_name.outputs.name }}-${{ inputs.version }}.tar.gz
|
||||
fail_on_unmatched_files: true
|
||||
draft: false
|
||||
prerelease: false
|
||||
@@ -147,9 +155,9 @@ jobs:
|
||||
echo "Release Summary:"
|
||||
echo "=================="
|
||||
echo "Version: v${{ inputs.version }}"
|
||||
echo "Tarball: headlamp-sealed-secrets-${{ inputs.version }}.tar.gz"
|
||||
echo "Tarball: ${{ steps.package_name.outputs.name }}-${{ inputs.version }}.tar.gz"
|
||||
echo "Checksum: sha256:${{ steps.compute_checksum.outputs.checksum }}"
|
||||
echo "Archive URL: https://github.com/${{ github.repository }}/releases/download/v${{ inputs.version }}/headlamp-sealed-secrets-${{ inputs.version }}.tar.gz"
|
||||
echo "Archive URL: https://github.com/${{ github.repository }}/releases/download/v${{ inputs.version }}/${{ steps.package_name.outputs.name }}-${{ inputs.version }}.tar.gz"
|
||||
echo ""
|
||||
echo "✓ Version bumped to ${{ inputs.version }}"
|
||||
echo "✓ Metadata updated with checksum"
|
||||
|
||||
+6
-6
@@ -1,13 +1,13 @@
|
||||
# Artifact Hub package metadata file
|
||||
# https://github.com/artifacthub/hub/blob/master/docs/metadata/artifacthub-pkg.yml
|
||||
version: 0.2.13
|
||||
name: headlamp-sealed-secrets
|
||||
displayName: Sealed Secrets Plugin for Headlamp
|
||||
version: 0.2.17
|
||||
name: sealed-secrets
|
||||
displayName: Sealed Secrets
|
||||
createdAt: "2026-02-12T00:00:00Z"
|
||||
description: A comprehensive Headlamp plugin for managing Bitnami Sealed Secrets with client-side encryption and RBAC-aware UI
|
||||
license: Apache-2.0
|
||||
homeURL: https://github.com/privilegedescalation/headlamp-sealed-secrets-plugin
|
||||
appVersion: 0.2.13
|
||||
appVersion: 0.2.17
|
||||
containersImages:
|
||||
- name: sealed-secrets-controller
|
||||
image: docker.io/bitnami/sealed-secrets-controller:v0.24.0
|
||||
@@ -19,8 +19,8 @@ keywords:
|
||||
- encryption
|
||||
- security
|
||||
annotations:
|
||||
headlamp/plugin/archive-url: "https://github.com/privilegedescalation/headlamp-sealed-secrets-plugin/releases/download/v0.2.13/headlamp-sealed-secrets-0.2.13.tar.gz"
|
||||
headlamp/plugin/archive-checksum: sha256:f9d8038471ae323b8bd351b46886cc9276cf7fba8ebc76858f1842c31fd4ba7c
|
||||
headlamp/plugin/archive-url: "https://github.com/privilegedescalation/headlamp-sealed-secrets-plugin/releases/download/v0.2.17/sealed-secrets-0.2.17.tar.gz"
|
||||
headlamp/plugin/archive-checksum: sha256:2f1f94aa40df7e66e3b3585792fbe8c05c89a1b9705d9a34358ecf40713dd35c
|
||||
headlamp/plugin/version-compat: ">=0.13.0"
|
||||
headlamp/plugin/distro-compat: "desktop,in-cluster,web,docker-desktop"
|
||||
links:
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
{
|
||||
"name": "headlamp-sealed-secrets",
|
||||
"version": "0.2.13",
|
||||
"name": "sealed-secrets",
|
||||
"version": "0.2.17",
|
||||
"description": "Headlamp plugin for Bitnami Sealed Secrets - manage encrypted Kubernetes secrets",
|
||||
"files": [
|
||||
"dist",
|
||||
|
||||
@@ -57,15 +57,15 @@ function formatScope(scope: SealedSecretScope): string {
|
||||
* SealedSecret detail view component
|
||||
*/
|
||||
export function SealedSecretDetail() {
|
||||
const { namespace, name } = useParams<{ namespace: string; name: string }>();
|
||||
const [sealedSecret, error] = SealedSecret.useGet(name, namespace);
|
||||
const [secret] = K8s.ResourceClasses.Secret.useGet(name, namespace);
|
||||
const { namespace = '', name = '' } = useParams<{ namespace: string; name: string }>();
|
||||
const [sealedSecret, error] = SealedSecret.useGet(name || undefined, namespace || undefined);
|
||||
const [secret] = K8s.ResourceClasses.Secret.useGet(name || undefined, namespace || undefined);
|
||||
const [decryptKey, setDecryptKey] = React.useState<string | null>(null);
|
||||
const [deleteDialogOpen, setDeleteDialogOpen] = React.useState(false);
|
||||
const [rotating, setRotating] = React.useState(false);
|
||||
const [canDecrypt, setCanDecrypt] = React.useState(false);
|
||||
const { enqueueSnackbar } = useSnackbar();
|
||||
const { permissions } = usePermissions(namespace);
|
||||
const { permissions } = usePermissions(namespace || undefined);
|
||||
|
||||
// Check if user can decrypt secrets (requires get permission on Secrets)
|
||||
React.useEffect(() => {
|
||||
@@ -74,6 +74,11 @@ export function SealedSecretDetail() {
|
||||
}
|
||||
}, [namespace]);
|
||||
|
||||
// Wait for required params before rendering
|
||||
if (!namespace || !name) {
|
||||
return <SealedSecretDetailSkeleton />;
|
||||
}
|
||||
|
||||
// Show error if fetch failed
|
||||
if (error) {
|
||||
return (
|
||||
@@ -146,7 +151,7 @@ export function SealedSecretDetail() {
|
||||
},
|
||||
}}
|
||||
>
|
||||
<Box>
|
||||
<Box sx={{ height: '100%', overflow: 'auto' }}>
|
||||
<SectionBox
|
||||
title={
|
||||
<Box display="flex" alignItems="center" justifyContent="space-between">
|
||||
|
||||
@@ -4,7 +4,6 @@
|
||||
* Configuration page for the Sealed Secrets plugin
|
||||
*/
|
||||
|
||||
import { SectionBox } from '@kinvolk/headlamp-plugin/lib/CommonComponents';
|
||||
import { Box, Button, Divider, TextField, Typography } from '@mui/material';
|
||||
import { useSnackbar } from 'notistack';
|
||||
import React from 'react';
|
||||
@@ -35,10 +34,7 @@ export function SettingsPage() {
|
||||
};
|
||||
|
||||
return (
|
||||
<SectionBox
|
||||
title="Sealed Secrets Plugin Settings"
|
||||
>
|
||||
<Box p={3}>
|
||||
<Box p={3}>
|
||||
<Typography variant="body1" paragraph id="settings-description">
|
||||
Configure the connection to your Sealed Secrets controller. These settings are stored in
|
||||
your browser's local storage.
|
||||
@@ -155,7 +151,6 @@ export function SettingsPage() {
|
||||
<dd style={{ display: 'inline', margin: 0 }}>8080</dd>
|
||||
</Typography>
|
||||
</Box>
|
||||
</Box>
|
||||
</SectionBox>
|
||||
</Box>
|
||||
);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user