Permalink with kubeconfigID and path

Author: pbochynski

public/kubeconfig/.gitignore

@@ -0,0 +1,6 @@
+# Ignore all kubeconfig files (they may contain sensitive data)
+*
+# But keep this .gitignore and the README
+!.gitignore
+!README.md
+!.gitkeep

public/kubeconfig/.gitkeep

@@ -0,0 +1,62 @@
+# Local Kubeconfig Files for Development
+
+This directory is used to store kubeconfig files for local development with the `kubeconfigID` permalink feature.
+
+## Usage
+
+1. Place your kubeconfig file in this directory **without a file extension**
+2. The filename becomes the `kubeconfigID` parameter value
+
+### Example
+
+1. Copy your kubeconfig:
+   ```bash
+   cp ~/.kube/config public/kubeconfig/myconfig
+   ```
+
+2. Access Busola with the permalink:
+   ```
+   http://localhost:8080/?kubeconfigID=myconfig&path=/namespaces/default/pods
+   ```
+
+## URL Format
+
+```
+/?kubeconfigID=<filename>&path=<path>
+```
+
+### Parameters
+
+| Parameter | Description |
+|-----------|-------------|
+| `kubeconfigID` | The filename (without extension) of the kubeconfig file in this directory |
+| `path` | (Optional) The path to navigate to after loading the kubeconfig |
+
+### Path Examples
+
+| Path | Description |
+|------|-------------|
+| `/namespaces/default/pods` | Pods in default namespace |
+| `/namespaces/kube-system/deployments` | Deployments in kube-system |
+| `/nodes` | Cluster nodes |
+| `/overview` | Cluster overview |
+
+## Security Note
+
+⚠️ **Do not commit kubeconfig files to the repository!**
+
+The `.gitignore` in this directory is configured to ignore all files except documentation.
+Kubeconfig files may contain sensitive credentials like tokens or certificates.
+
+## Production Configuration
+
+In production, the `kubeconfigUrl` is configured via the `KUBECONFIG_ID` feature flag in `defaultConfig.yaml`:
+
+```yaml
+KUBECONFIG_ID:
+  isEnabled: true
+  config:
+    kubeconfigUrl: https://your-kubeconfig-service.example.com/kubeconfig
+```
+
+See [Feature Flags Documentation](../../docs/user/technical-reference/feature-flags.md) for more details.

public/kubeconfig/README.md

@@ -15,6 +15,7 @@ import { SetStateAction, useSetAtom } from 'jotai';
 import { removePreviousPath } from 'state/useAfterInitHook';
 import { ManualKubeConfigIdType } from 'state/manualKubeConfigIdAtom';
 import { parseOIDCparams } from 'components/Clusters/components/oidc-params';
+import { getIntendedPath, clearIntendedPath } from 'state/intendedPathAtom';
 
 export type Users = Array<{
   name: string;
@@ -29,7 +30,17 @@ function addCurrentCluster(
 
   if (clustersInfo.currentCluster?.name !== params?.name) removePreviousPath();
 
-  if (params.currentContext.namespace) {
+  // Check for intended path from kubeconfigID permalink
+  // If there's an intended path, navigate to cluster overview first.
+  // The actual navigation to the intended path will happen in useAfterInitHook
+  // after auth is fully set up.
+  const intendedPath = getIntendedPath();
+  if (intendedPath?.path) {
+    // Navigate to cluster overview - useAfterInitHook will handle the intended path
+    clustersInfo.navigate(
+      `/cluster/${encodeURIComponent(params.contextName)}/overview`,
+    );
+  } else if (params.currentContext.namespace) {
     clustersInfo.navigate(
       `/cluster/${encodeURIComponent(params.contextName)}/namespaces/${
         params.currentContext.namespace

src/components/Clusters/shared.ts

@@ -5,6 +5,7 @@ import { initReactI18next } from 'react-i18next';
 import { createBrowserRouter, RouterProvider } from 'react-router';
 import i18nextBackend from 'i18next-http-backend';
 import { savePreviousPath } from 'state/useAfterInitHook';
+import { initIntendedPathFromUrl } from 'state/intendedPathAtom';
 
 import App from './components/App/App';
 import { Spinner } from 'shared/components/Spinner/Spinner';
@@ -62,6 +63,10 @@ i18next
 
 savePreviousPath();
 
+// Initialize intended path from URL parameters (for kubeconfigID permalinks)
+// This must be called early before any redirects happen
+initIntendedPathFromUrl();
+
 const container = document.getElementById('root');
 const root = createRoot(container!);
 const isDevMode =

src/index.tsx

@@ -0,0 +1,75 @@
+/**
+ * Intended Path Storage Utility
+ *
+ * This module handles storing and retrieving the intended navigation path
+ * for permalinks with kubeconfigID. The path is stored in sessionStorage
+ * to survive OIDC redirects and page reloads.
+ *
+ * URL Format: /?kubeconfigID=abc123&path=/namespaces/default/pods
+ */
+
+const INTENDED_PATH_KEY = 'busola.intended-path';
+
+export interface IntendedPath {
+  path: string;
+  kubeconfigId?: string;
+  timestamp: number;
+}
+
+/**
+ * Save the intended path to sessionStorage.
+ * Only saves if the path is valid (not root or clusters page).
+ */
+export function saveIntendedPath(path: string, kubeconfigId?: string): void {
+  if (path && path !== '/' && path !== '/clusters') {
+    const data: IntendedPath = {
+      path,
+      kubeconfigId,
+      timestamp: Date.now(),
+    };
+    sessionStorage.setItem(INTENDED_PATH_KEY, JSON.stringify(data));
+  }
+}
+
+/**
+ * Get the intended path from sessionStorage.
+ * Returns null if no path is stored or if the path has expired (5 minutes).
+ */
+export function getIntendedPath(): IntendedPath | null {
+  const data = sessionStorage.getItem(INTENDED_PATH_KEY);
+  if (!data) return null;
+
+  try {
+    const parsed: IntendedPath = JSON.parse(data);
+    // Expire after 5 minutes to avoid stale redirects
+    if (Date.now() - parsed.timestamp > 5 * 60 * 1000) {
+      clearIntendedPath();
+      return null;
+    }
+    return parsed;
+  } catch {
+    clearIntendedPath();
+    return null;
+  }
+}
+
+/**
+ * Clear the intended path from sessionStorage.
+ */
+export function clearIntendedPath(): void {
+  sessionStorage.removeItem(INTENDED_PATH_KEY);
+}
+
+/**
+ * Initialize intended path from URL parameters.
+ * Should be called early in the app initialization.
+ */
+export function initIntendedPathFromUrl(): void {
+  const params = new URLSearchParams(window.location.search);
+  const kubeconfigId = params.get('kubeconfigID');
+  const path = params.get('path');
+
+  if (kubeconfigId && path) {
+    saveIntendedPath(path, kubeconfigId);
+  }
+}

src/state/intendedPathAtom.ts

@@ -4,6 +4,7 @@ import { useNavigate, useSearchParams } from 'react-router';
 import { useAtomValue } from 'jotai';
 import { authDataAtom } from './authDataAtom';
 import { clusterAtom } from './clusterAtom';
+import { getIntendedPath, clearIntendedPath } from './intendedPathAtom';
 
 const PREVIOUS_PATHNAME_KEY = 'busola.previous-pathname';
 
@@ -84,6 +85,17 @@ export function useAfterInitHook(handledKubeconfigId: KubeconfigIdHandleState) {
     }
 
     initDone.current = true;
+
+    // Handle intended path from kubeconfigID permalinks
+    // This happens after auth is ready to ensure API calls work
+    const intendedPath = getIntendedPath();
+    if (intendedPath?.path && cluster) {
+      const fullPath = `/cluster/${encodeURIComponent(cluster.name)}${intendedPath.path}`;
+      navigate(fullPath);
+      clearIntendedPath();
+      return;
+    }
+
     const previousPath = getPreviousPath();
 
     if (