[RFE] Add accessible namespaces option

[blobor]

Current situation

If a user doesn't have permission to list namespaces but only has access to specific namespaces, he basically can't use Headlamp.

Ideal future situation

Headlamp could add an option for predefining "accessible namespaces" for a user via parameters (like env variables) or user/cluster settings (via user input before login).

Additional information

Similar behavior has a Lens tool.

[joaquimrocha]

Thanks! This makes a lot of sense and we are planning on having a settings view in the next release if it all goes well (not sure if we can squeeze this feature in, but it'd be nice). It should also be set per cluster AFAIU, so we can have clusters with different permissions settings set up.

[joaquimrocha]

This depends on #16 .

[joaquimrocha]

Not making it to v0.13.0 yet. Let's plan it for later.

[callmevladik]

@joaquimrocha any details when it is planned for? 🙂

[callmevladik]

@joaquimrocha bump :)

[joaquimrocha]

This depends on the settings panel, which depends on the notifications view. We're aiming to have it in 0.14.0 but still have a few things in the pipeline before that.

[ashu8912]

I Can pick this one

[illume]

@ashu8912, here's a few notes from our chat about this...

• The /namespaces view is a good space to configure a namespace related option
• If the list namespace is denied, then allow an option to enter namespaces
  • Afterwards always allow editing the namespaces, since permissions change
• We looked at where to put namespace entry on cluster selector screen
  • Not really suitable spot.
  • After cluster selected, go to /namespaces to enter accessible namespaces there
• The namespaces may be cluster specific, but also they might be similar over multiple clusters
• The /settings view (as it is now) provides global settings, but not per cluster settings
• First steps are to reproduce the issue
• related files
  • headlamp/frontend/src/lib/k8s/cluster.ts
  • headlamp/frontend/src/components/common/Resource/ResourceTable.tsx
  • headlamp/frontend/src/components/namespace/List.tsx
• But could maybe makes something that fakes resourceClass.useList() (has the same interface). Maybe you can try and fetch the namespaces in the user-inputted-list. Because can you fetch namespace resource if you have permission for it, but no permission to list?
• Not sure if inputting namespaces by environment variable is required?
  • There could be a usecase of setting up the tool at the beginning so the users don't need to input themselves.