Kubey: веб-дашборд для Kubernetes без kubectl

# Режим одного пользователя (без аутентификации)
docker run -d \
  --name kubey \
  -p 8080:8080 \
  -v ~/.kube/config:/home/kubey/.kube/config:ro \
  -v kubey-data:/data \
  jboocodes/kubey:latest

docker run -d \
  --name kubey \
  -p 8080:8080 \
  -v ~/.kube/config:/home/kubey/.kube/config:ro \
  -v kubey-data:/data \
  -e AUTH_MODE=shared \
  -e JWT_SECRET=your-secure-secret-key \
  -e GITHUB_CLIENT_ID=your-github-client-id \
  -e GITHUB_CLIENT_SECRET=your-github-secret \
  jboocodes/kubey:latest

version: '3.8'

services:
  kubey:
    image: jboocodes/kubey:latest
    container_name: kubey
    ports:
      - "8080:8080"
    volumes:
      - ~/.kube/config:/home/kubey/.kube/config:ro
      - kubey-data:/data
    environment:
      - AUTH_MODE=single
      # Для командного режима раскомментируйте:
      # - AUTH_MODE=shared
      # - JWT_SECRET=your-secure-secret
      # - GITHUB_CLIENT_ID=xxx
      # - GITHUB_CLIENT_SECRET=xxx
    restart: unless-stopped

volumes:
  kubey-data:

docker-compose up -d

# kubey.yaml
apiVersion: v1
kind: Namespace
metadata:
  name: kubey
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: kubey
  namespace: kubey
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: kubey-viewer
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: view
subjects:
  - kind: ServiceAccount
    name: kubey
    namespace: kubey
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: kubey-data
  namespace: kubey
spec:
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 1Gi
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: kubey
  namespace: kubey
spec:
  replicas: 1
  selector:
    matchLabels:
      app: kubey
  template:
    metadata:
      labels:
        app: kubey
    spec:
      serviceAccountName: kubey
      containers:
        - name: kubey
          image: jboocodes/kubey:latest
          ports:
            - containerPort: 8080
          env:
            - name: AUTH_MODE
              value: "single"
          volumeMounts:
            - name: data
              mountPath: /data
          resources:
            requests:
              memory: "128Mi"
              cpu: "100m"
            limits:
              memory: "512Mi"
              cpu: "500m"
          livenessProbe:
            httpGet:
              path: /health
              port: 8080
            initialDelaySeconds: 5
            periodSeconds: 30
          readinessProbe:
            httpGet:
              path: /health
              port: 8080
            initialDelaySeconds: 5
            periodSeconds: 10
      volumes:
        - name: data
          persistentVolumeClaim:
            claimName: kubey-data
---
apiVersion: v1
kind: Service
metadata:
  name: kubey
  namespace: kubey
spec:
  selector:
    app: kubey
  ports:
    - port: 80
      targetPort: 8080
  type: ClusterIP
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: kubey
  namespace: kubey
  annotations:
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
spec:
  ingressClassName: nginx
  rules:
    - host: kubey.example.com
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: kubey
                port:
                  number: 80
  tls:
    - hosts:
        - kubey.example.com
      secretName: kubey-tls

kubectl apply -f kubey.yaml

# Установка с настройками по умолчанию (режим одного пользователя)
helm install kubey oci://ghcr.io/justinbehncodes/charts/kubey --version 0.1.0 -n kubey

# Установка с командной аутентификацией
helm install kubey kubey/kubey \
  --set auth.mode=shared \
  --set auth.jwtSecret=your-secure-secret \
  --set auth.github.clientId=xxx \
  --set auth.github.clientSecret=xxx

git clone https://github.com/justinbehncodes/kubey.git
cd kubey

cd web
npm install
npm run dev      # http://localhost:5173

cd api
go mod download
go run cmd/api/main.go

make dev

docker build -t kubey:local .

# Тесты бэкенда
cd api && go test ./...

# С gotestsum для более читаемого вывода
make test