app/models/clusters/kubernetes_namespace.rb


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49

# frozen_string_literal: true

module Clusters
  class KubernetesNamespace < ActiveRecord::Base
    self.table_name = 'clusters_kubernetes_namespaces'

    belongs_to :cluster_project, class_name: 'Clusters::Project'
    belongs_to :cluster, class_name: 'Clusters::Cluster'
    belongs_to :project, class_name: '::Project'
    has_one :platform_kubernetes, through: :cluster

    validates :namespace, presence: true
    validates :namespace, uniqueness: { scope: :cluster_id }

    before_validation :set_namespace_and_service_account_to_default, on: :create

    attr_encrypted :service_account_token,
        mode: :per_attribute_iv,
        key: Settings.attr_encrypted_db_key_base_truncated,
        algorithm: 'aes-256-cbc'

    def token_name
      "#{namespace}-token"
    end

    private

    def set_namespace_and_service_account_to_default
      self.namespace ||= default_namespace
      self.service_account_name ||= default_service_account_name
    end

    def default_namespace
      platform_kubernetes&.namespace.presence || project_namespace
    end

    def default_service_account_name
      "#{namespace}-service-account"
    end

    def project_namespace
      Gitlab::NamespaceSanitizer.sanitize(project_slug)
    end

    def project_slug
      "#{project.path}-#{project.id}".downcase
    end
  end
end