From fc7d9ca2cdc3a84d1dea1979afdeaf2c97e3f5f2 Mon Sep 17 00:00:00 2001
From: Dakota Walsh <101994734+dakota-portainer@users.noreply.github.com>
Date: Wed, 24 Jan 2024 09:44:50 +1300
Subject: [PATCH] fix(secrets): add CE teaser EE-6568 (#11001)

---
 .../ConfigureView/ConfigureForm/ConfigureForm.tsx  | 14 ++++++++++++++
 app/react/portainer/feature-flags/enums.ts         |  1 +
 .../feature-flags/feature-flags.service.ts         |  1 +
 3 files changed, 16 insertions(+)

diff --git a/app/react/kubernetes/cluster/ConfigureView/ConfigureForm/ConfigureForm.tsx b/app/react/kubernetes/cluster/ConfigureView/ConfigureForm/ConfigureForm.tsx
index faed26766..6579d91ca 100644
--- a/app/react/kubernetes/cluster/ConfigureView/ConfigureForm/ConfigureForm.tsx
+++ b/app/react/kubernetes/cluster/ConfigureView/ConfigureForm/ConfigureForm.tsx
@@ -283,6 +283,20 @@ function InnerForm({
               />
             </div>
           </div>
+          <div className="form-group">
+            <div className="col-sm-12">
+              <SwitchField
+                name="restrictSecrets"
+                data-cy="kubeSetup-restrictSecretsToggle"
+                label="In the UI, only admins may view and edit the contents of secrets that are not their own"
+                tooltip="This hides the ability to view or edit in the UI the contents of secrets that a non-admin user did not create themselves but does not prevent it via the command line."
+                labelClass="col-sm-5 col-lg-4"
+                checked={false}
+                featureId={FeatureId.K8S_ADM_ONLY_SECRETS}
+                onChange={() => {}}
+              />
+            </div>
+          </div>
         </FormSection>
         <FormSection title="Resources and Metrics">
           <InsightsBox
diff --git a/app/react/portainer/feature-flags/enums.ts b/app/react/portainer/feature-flags/enums.ts
index e7f77f9f2..1a8f6d241 100644
--- a/app/react/portainer/feature-flags/enums.ts
+++ b/app/react/portainer/feature-flags/enums.ts
@@ -36,6 +36,7 @@ export enum FeatureId {
   CUSTOM_LOGIN_BANNER = 'custom-login-banner',
   ENFORCE_DEPLOYMENT_OPTIONS = 'k8s-enforce-deployment-options',
   K8S_ADM_ONLY_USR_INGRESS_DEPLY = 'k8s-admin-only-ingress-deploy',
+  K8S_ADM_ONLY_SECRETS = 'k8s-admin-only-secrets',
   K8S_ROLLING_RESTART = 'k8s-rolling-restart',
   K8SINSTALL = 'k8s-install',
   K8S_ANNOTATIONS = 'k8s-annotations',
diff --git a/app/react/portainer/feature-flags/feature-flags.service.ts b/app/react/portainer/feature-flags/feature-flags.service.ts
index 6f69c42da..70a0b865c 100644
--- a/app/react/portainer/feature-flags/feature-flags.service.ts
+++ b/app/react/portainer/feature-flags/feature-flags.service.ts
@@ -42,6 +42,7 @@ export async function init(edition: Edition) {
     [FeatureId.K8S_EDIT_YAML]: Edition.BE,
     [FeatureId.ENFORCE_DEPLOYMENT_OPTIONS]: Edition.BE,
     [FeatureId.K8S_ADM_ONLY_USR_INGRESS_DEPLY]: Edition.BE,
+    [FeatureId.K8S_ADM_ONLY_SECRETS]: Edition.BE,
     [FeatureId.K8S_ROLLING_RESTART]: Edition.BE,
     [FeatureId.K8S_ANNOTATIONS]: Edition.BE,
     [FeatureId.CA_FILE]: Edition.BE,