1import * as _ from 'lodash-es'
2import { KubernetesObjectApi, KubeConfig, type RequestContext } from '@kubernetes/client-node'
3import { fileExists } from '../../serverF/libFs/mkdirpF.mts'
4import { getKlusterCtx, type KlusterCfg } from './ctxF/klusterCtxF.mts'
5import { read1File } from '../../serverF/libFs/read1FileF.mts'
6import { absPathToPtPath } from '../../serverF/pathF/absPathToPtPathF.mts'
7import { rewriteKcHostForLan } from './rewriteKcHostForLanAI.mts'
8import { assertTruthy } from '../../sharedF/assertsF/assertTruthyAI.mts'
9import { assertDefined } from '../../sharedF/assertsF/assertDefinedF.mts'
10import { getKubeConfigPath } from '../../serverF/kubePortFwdF/kubeConfigPathAI.mts'
11import { getKubeTimeoutSec } from './ctxF/klusterReachabilityAI.mts'
12
13export const getKubeApis = async (props: {cluster_name?: string, kubeTlsInsecure?: boolean} = {}) => {
14  const {cluster_name, kubeTlsInsecure} = getKlusterCtx(props) as KlusterCfg
15  assertDefined(cluster_name, {props})
16
17  const kubeConfig = new KubeConfig()
18  const clusterCfgPath = getKubeConfigPath(cluster_name)
19
20  const cfgExists = await fileExists(clusterCfgPath)
21  assertTruthy(cfgExists, {clusterCfgPath: absPathToPtPath(clusterCfgPath)})
22
23  let klusterCfgStr = await read1File(clusterCfgPath)
24  klusterCfgStr = await rewriteKcHostForLan({klusterCfgStr, cluster_name})
25
26  kubeConfig.loadFromString(klusterCfgStr)
27
28  if (kubeTlsInsecure) {
29    _.each(kubeConfig.clusters, (cluster) => {
30      (cluster as {skipTLSVerify?: boolean}).skipTLSVerify = true
31    })  
32  }
33  const observableOf = <T,>(v: T) => ({toPromise: () => Promise.resolve(v)})
34  const timeoutMs = getKubeTimeoutSec(cluster_name) * 1000
35  const timeoutMiddleware = {
36    pre: (ctx: RequestContext) => { ctx.setSignal(AbortSignal.timeout(timeoutMs)); return observableOf(ctx) },
37    post: (rsp: unknown) => observableOf(rsp),
38  }
39
40  // Patch makeApiClient so ALL clients (CoreV1Api, BatchV1Api, etc.) get the timeout,
41  // not just objectApi. Without this, makeApiClient-created clients hang ~75s on TCP
42  // ETIMEDOUT because KubeConfig.makeApiClient creates a fresh Configuration with empty middleware[].
43  const origMakeApiClient = kubeConfig.makeApiClient.bind(kubeConfig)
44  kubeConfig.makeApiClient = function<T extends new (...a: any[]) => any>(apiClientType: T): InstanceType<T> {
45    const client = origMakeApiClient(apiClientType as any) as any
46    client.configuration?.middleware?.push(timeoutMiddleware)
47    return client
48  } as any
49
50  const objectApi = KubernetesObjectApi.makeApiClient(kubeConfig)
51
52  return {objectApi, kubeConfig}
53}
54