Skip to content

lablink_allocator_service.routes.admin_pages

Admin HTML pages, all behind HTTP Basic auth.

Rendering only — every state change these pages trigger is posted to a JSON endpoint in another blueprint (provisioning, admin_sessions, schedules).

Render the admin panel: entry links, pool counts, connection usage.

Source code in packages/allocator/src/lablink_allocator_service/routes/admin_pages.py 
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
@bp.route("/admin")
@auth.login_required
def admin():
    """Render the admin panel: entry links, pool counts, connection usage."""
    from lablink_allocator_service import main

    provider = current_app.config["LABLINK_PROVIDER"]
    monitoring_enabled = bool(
        getattr(main.cfg, "monitoring", None) and main.cfg.monitoring.enabled
    )
    return render_template(
        "admin.html",
        can_provision_hosts=provider.can_provision_hosts,
        can_destroy_hosts=provider.can_destroy_hosts,
        monitoring_enabled=monitoring_enabled,
        # One aggregate query per admin page load. Low-traffic operator page,
        # and None renders as "unavailable" rather than breaking the panel.
        connections=connection_stats(),
    )

Render the ready-to-copy lablink client register command for BYO clients.

The register token rotates on each allocator restart, so this page is dynamic — re-render to get the current token. Behind admin Basic auth (same gate as the rest of /admin); no new privilege boundary.

The rendered flags depend on the configured connectivity, because register_client rejects a shape that doesn't match it with a 400 (see its expects_overlay/expects_tunnel checks) — a single lan_direct command would be guaranteed-broken copy-paste on the other two modes. Read off client_connectivity.name rather than cfg.manual.connectivity so this page and that check can never disagree.

Source code in packages/allocator/src/lablink_allocator_service/routes/admin_pages.py 
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
@bp.route("/admin/byo-onboarding")
@auth.login_required
def byo_onboarding():
    """Render the ready-to-copy `lablink client register` command for BYO clients.

    The register token rotates on each allocator restart, so this page is
    dynamic — re-render to get the current token. Behind admin Basic auth
    (same gate as the rest of /admin); no new privilege boundary.

    The rendered flags depend on the configured connectivity, because
    ``register_client`` rejects a shape that doesn't match it with a 400 (see
    its ``expects_overlay``/``expects_tunnel`` checks) — a single lan_direct
    command would be guaranteed-broken copy-paste on the other two modes.
    Read off ``client_connectivity.name`` rather than
    ``cfg.manual.connectivity`` so this page and that check can never disagree.
    """
    from lablink_allocator_service import main

    provider = current_app.config["LABLINK_PROVIDER"]
    return render_template(
        "byo-onboarding.html",
        allocator_url=canonical_base_url(request),
        register_token=main.REGISTER_TOKEN,
        show_insecure=is_self_signed_ssl(main.cfg),
        connectivity=provider.client_connectivity.name,
    )

Render the VM creation page (drives POST /api/launch).

Source code in packages/allocator/src/lablink_allocator_service/routes/admin_pages.py 
21
22
23
24
25
@bp.route("/admin/create")
@auth.login_required
def create_instances():
    """Render the VM creation page (drives `POST /api/launch`)."""
    return render_template("create-instances.html")

Render the destroy-confirmation page (drives POST /destroy).

Source code in packages/allocator/src/lablink_allocator_service/routes/admin_pages.py 
 97
 98
 99
100
101
@bp.route("/admin/instances/delete")
@auth.login_required
def delete_instances():
    """Render the destroy-confirmation page (drives `POST /destroy`)."""
    return render_template("delete-instances.html")

Get the logs for a specific VM.

Source code in packages/allocator/src/lablink_allocator_service/routes/admin_pages.py 
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
@bp.route("/admin/logs/<hostname>", methods=["GET"])
@auth.login_required
def get_vm_logs(hostname):
    """Get the logs for a specific VM."""
    from lablink_allocator_service import main

    logger.debug(f"Fetching logs for VM: {hostname}")
    if not main.database.vm_exists(hostname=hostname):
        logger.error(f"VM with hostname {hostname} not found.")
        return jsonify({"error": "VM not found."}), 404
    # Non-AWS providers (manual/BYO) have no cloud-init concept; the
    # template hides that section when provider != "aws".
    return render_template(
        "instance-logs.html",
        log_title=f"VM Logs - {hostname}",
        log_endpoint=f"/api/vm-logs/{hostname}",
        download_slug=hostname,
        show_cloud_init=(main.cfg.provider or "aws") == "aws",
        # Opened in a new tab from the instances page, so it can close itself.
        show_close=True,
    )

scheduled_destruction_page()

Render scheduled destruction management page.

Source code in packages/allocator/src/lablink_allocator_service/routes/admin_pages.py 
127
128
129
130
131
@bp.route("/admin/scheduled-destruction", methods=["GET"])
@auth.login_required
def scheduled_destruction_page():
    """Render scheduled destruction management page."""
    return render_template("scheduled-destruction.html")

Render the instances table with per-VM session actions.

Source code in packages/allocator/src/lablink_allocator_service/routes/admin_pages.py 
77
78
79
80
81
82
83
84
@bp.route("/admin/instances")
@auth.login_required
def view_instances():
    """Render the instances table with per-VM session actions."""
    from lablink_allocator_service import main

    instances = main.database.get_all_vms()
    return render_template("instances.html", instances=instances, fragment=False)

Instances table as an HTML fragment, for the page's auto-refresh.

Source code in packages/allocator/src/lablink_allocator_service/routes/admin_pages.py 
87
88
89
90
91
92
93
94
@bp.route("/admin/instances/fragment")
@auth.login_required
def view_instances_fragment():
    """Instances table as an HTML fragment, for the page's auto-refresh."""
    from lablink_allocator_service import main

    instances = main.database.get_all_vms()
    return render_template("instances.html", instances=instances, fragment=True)