aksd: Project import build

[sniok]

Changes to aks desktop plugin needed to make managed namespace project import work when user doesn't have access to the cluster itself

This PR is one of two PRs to make import work. Second one is here #109

Changes:

• Refactor of namespace project import screen to use graph query
• Pass whether the cluster we're registering is coming from a managed namespace

How to test:

• Start app
• Go to projects tab
• Click "Add project"
• Click import existing project
• Select from available project and click import

[Copilot]

Pull request overview

This PR refactors the AKS project import functionality to support importing managed namespace projects when users don't have full cluster access. The implementation switches from iterative namespace discovery to a more efficient Azure Resource Graph query approach and adds support for namespace-scoped credentials during cluster registration.

Changes:

• Refactored namespace discovery to use Azure Resource Graph queries instead of iterating through subscriptions
• Added managedNamespace parameter to cluster registration for scoped credential support
• Uncommented and enabled the AKS project import feature in the plugin registration

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
plugins/aks-desktop/src/utils/shared/isAksProject.tsx	Added cleanup for API endpoint subscription to prevent memory leaks
plugins/aks-desktop/src/utils/azure/aks.ts	Added managedNamespace parameter to registerAKSCluster and removed cluster info validation step
plugins/aks-desktop/src/index.tsx	Enabled the previously commented-out AKS project import feature
plugins/aks-desktop/src/components/ImportAKSProjects/ImportAKSProjects.tsx	Complete refactor from subscription-based discovery to Azure Resource Graph queries with simplified UI
headlamp	Updated subproject commit reference

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[illume]

Looks like a CI check is failing.

Can you please add the changed module to the git commit context part? (Like ImportAKSProjects.tsx)

[Copilot]

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 5 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[illume]

Please address the open copilot convos?

I'm not sure how to validate this works, and I don't see tests. Can you please add steps to test?

[illume]

I checked the copilot comments.

I'm not sure how to validate this works, and I don't see tests. Can you please add steps to test?

[Copilot]

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 6 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[illume]

When it's ready, @vyncent-t will make a video for a11y team.

The video should be made only after both PRs are merged (second one below):

• headlamp: Fix project import #109

[illume]

Please check the commit messages have the relevant components in the context part of the message. If you could please add Why in the git body it's a bit easier to understand?

I think it would be good to add a whole bunch of // @todo notes in the code for things that need cleaning up. There's a lot, but it would be good to add the things found in this review into the code for later. We already have an issue to clean up this code.

• #118

If there's an issue for this can you please link it?

[skoeva]

minor nit - I think you meant "aksd" in this commit:

akds: Dont fetch cluster info when registering a cluster

[sniok]

I've updated commit messages to include module names and also expanded commit messages to include more information about the changes

[Copilot]

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 2 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[illume]

Can you please fix the git conflict?

[ashu8912]

Tested, and it works, thanks, once the comments and merge conflicts are fixed we can merge this.

[sniok]

Rebased, updated all the strings to be translated and regenerated translation files.

[Copilot]

Pull request overview

Copilot reviewed 43 out of 43 changed files in this pull request and generated 1 comment.

Comments suppressed due to low confidence (4)

plugins/aks-desktop/src/utils/shared/isAksProject.tsx:1

• The watch cancellation only runs on the success callback. On the error callback path, the watch is never cancelled, which can leak the watcher and potentially trigger callbacks after the Promise has already resolved. Cancel the watch in both callbacks (or via a shared finally-like helper) so it always cleans up.
  plugins/aks-desktop/src/utils/azure/aks.ts:1
• This hard-codes isAzureRBACEnabled to false after removing the call that previously retrieved the real value. If the backend registration logic depends on the actual RBAC mode, this will cause incorrect behavior for Azure RBAC-enabled clusters. Prefer passing the real value again (restore the details call), or adjust the IPC contract so the backend determines RBAC mode itself instead of relying on a hard-coded constant.
  plugins/aks-desktop/src/components/ImportAKSProjects/ImportAKSProjects.tsx:1
• Treating any stderr output as a fatal error can break discovery if Azure CLI emits warnings or non-fatal messages on stderr while still returning valid JSON on stdout. Instead, base failure on the command exit code (preferred) or validate that stdout parses and contains expected fields before failing the operation.
  plugins/aks-desktop/src/components/ImportAKSProjects/ImportAKSProjects.tsx:1
• Using clusterName alone in the localStorage key can collide when users have clusters with the same name in different subscriptions/resource groups (AKS cluster name is not globally unique). Use a stable unique identifier (e.g., subscriptionId + resourceGroup + clusterName, or the full Azure resource ID) for the storage key to avoid overwriting settings for a different cluster.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.