Update K8sController.cs

Author: affinity7software

Controllers/K8sController.cs

@@ -8,57 +8,87 @@ namespace K8sControlApi.Controllers;
 public class K8sController : ControllerBase
 {
     private readonly K8sService _svc;
+    private static readonly bool EnableAuth =
+        Environment.GetEnvironmentVariable("ENABLE_BASIC_AUTH")?.ToLower() == "true";
 
     public K8sController(K8sService svc)
     {
         _svc = svc;
     }
 
+    private IActionResult UnauthorizedIfNeeded()
+    {
+        if (EnableAuth && !User.Identity?.IsAuthenticated == true)
+            return Unauthorized();
+        return null;
+    }
+
     [HttpPost("restart")]
     public async Task<IActionResult> RestartNamespace(string @namespace)
     {
+        var unauth = UnauthorizedIfNeeded();
+        if (unauth != null) return unauth;
+
         await _svc.RestartNamespace(@namespace);
         return Ok($"Restarted pods in namespace '{@namespace}'");
     }
 
     [HttpPost("stop")]
     public async Task<IActionResult> StopNamespace(string @namespace)
     {
+        var unauth = UnauthorizedIfNeeded();
+        if (unauth != null) return unauth;
+
         await _svc.StopNamespace(@namespace);
         return Ok($"Scaled all deployments in namespace '{@namespace}' to 0");
     }
 
     [HttpPost("start")]
     public async Task<IActionResult> StartNamespace(string @namespace)
     {
+        var unauth = UnauthorizedIfNeeded();
+        if (unauth != null) return unauth;
+
         await _svc.StartNamespace(@namespace);
         return Ok($"Scaled all deployments in namespace '{@namespace}' to last known replica count");
     }
 
     [HttpPost("deployment/{deployment}/restart")]
     public async Task<IActionResult> RestartDeployment(string @namespace, string deployment)
     {
+        var unauth = UnauthorizedIfNeeded();
+        if (unauth != null) return unauth;
+
         await _svc.RestartDeployment(@namespace, deployment);
         return Ok($"Restarted pods in deployment '{deployment}'");
     }
 
     [HttpPost("deployment/{deployment}/stop")]
     public async Task<IActionResult> StopDeployment(string @namespace, string deployment)
     {
+        var unauth = UnauthorizedIfNeeded();
+        if (unauth != null) return unauth;
+
         await _svc.StopDeployment(@namespace, deployment);
         return Ok($"Scaled deployment '{deployment}' to 0");
     }
 
     [HttpPost("deployment/{deployment}/start")]
     public async Task<IActionResult> StartDeployment(string @namespace, string deployment)
     {
+        var unauth = UnauthorizedIfNeeded();
+        if (unauth != null) return unauth;
+
         await _svc.StartDeployment(@namespace, deployment);
         return Ok($"Started deployment '{deployment}'");
     }
 
     [HttpPost("pod/{pod}/restart")]
     public async Task<IActionResult> RestartPod(string @namespace, string pod)
     {
+        var unauth = UnauthorizedIfNeeded();
+        if (unauth != null) return unauth;
+
         await _svc.RestartPod(@namespace, pod);
         return Ok($"Restarted pod '{pod}'");
     }