add approval plugin

Signed-off-by: Wantong Jiang <[email protected]>

Author: jwtty

tools/fleet/README.md

@@ -165,12 +165,3 @@ After running the uncordon command:
 
 1. Check that the cordon taint has been removed from the MemberCluster resource
 2. Monitor that new workloads can be scheduled to the cluster according to placement policies
-
-## Migration from Separate Tools
-
-If you were previously using the separate `kubectl-draincluster` and `kubectl-uncordoncluster` plugins, you can replace them with this unified `kubectl-fleet` plugin:
-
-- `kubectl draincluster` → `kubectl fleet drain`
-- `kubectl uncordoncluster` → `kubectl fleet uncordon`
-
-The command-line arguments remain the same, only the command structure has changed to use subcommands.

tools/fleet/cmd/approve/approve.go

@@ -0,0 +1,138 @@
+/*
+Copyright 2025 The KubeFleet Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package approve
+
+import (
+	"context"
+	"fmt"
+	"log"
+
+	"github.com/spf13/cobra"
+	"k8s.io/apimachinery/pkg/api/meta"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	"k8s.io/apimachinery/pkg/runtime"
+	"k8s.io/apimachinery/pkg/types"
+	"k8s.io/client-go/util/retry"
+	"sigs.k8s.io/controller-runtime/pkg/client"
+
+	clusterv1beta1 "github.com/kubefleet-dev/kubefleet/apis/cluster/v1beta1"
+	placementv1beta1 "github.com/kubefleet-dev/kubefleet/apis/placement/v1beta1"
+	toolsutils "github.com/kubefleet-dev/kubefleet/tools/utils"
+)
+
+type approveOptions struct {
+	hubClusterContext string
+	kind              string
+	name              string
+}
+
+func NewCmdApprove() *cobra.Command {
+	o := &approveOptions{}
+
+	cmd := &cobra.Command{
+		Use:   "approve <kind>",
+		Short: "Approve a resource",
+		Long: `Approve a resource by patching an "Approved" condition to its status.
+
+This command patches the resource with an "Approved" condition,
+allowing staged update runs to proceed to the next stage.
+
+Currently supported kinds:
+  clusterapprovalrequest - Approve a ClusterApprovalRequest`,
+		Args: cobra.ExactArgs(1),
+		RunE: func(cmd *cobra.Command, args []string) error {
+			o.kind = args[0]
+			return o.run(cmd.Context())
+		},
+	}
+
+	cmd.Flags().StringVar(&o.hubClusterContext, "hubClusterContext", "", "The name of the kubeconfig context to use for the hub cluster")
+	cmd.Flags().StringVar(&o.name, "name", "", "The name of the resource to approve")
+
+	// Mark required flags
+	_ = cmd.MarkFlagRequired("hubClusterContext")
+	_ = cmd.MarkFlagRequired("name")
+
+	return cmd
+}
+
+func (o *approveOptions) run(ctx context.Context) error {
+	if o.kind == "" {
+		return fmt.Errorf("resource kind is required")
+	}
+	if o.name == "" {
+		return fmt.Errorf("resource name is required")
+	}
+
+	// Validate that we only support clusterapprovalrequest for now
+	if o.kind != "clusterapprovalrequest" {
+		return fmt.Errorf("unsupported resource kind %q, only 'clusterapprovalrequest' is supported", o.kind)
+	}
+
+	_, hubClient, err := o.setupClient()
+	if err != nil {
+		return err
+	}
+
+	// Patch the ClusterApprovalRequest status with approved condition
+	err = retry.RetryOnConflict(retry.DefaultRetry, func() error {
+		var car placementv1beta1.ClusterApprovalRequest
+		if err := hubClient.Get(ctx, types.NamespacedName{Name: o.name}, &car); err != nil {
+			return err
+		}
+
+		// Add the Approved condition
+		approvedCondition := metav1.Condition{
+			Type:               string(placementv1beta1.ApprovalRequestConditionApproved),
+			Status:             metav1.ConditionTrue,
+			Reason:             "ClusterApprovalRequestApproved",
+			Message:            "ClusterApprovalRequest has been approved",
+			ObservedGeneration: car.Generation,
+		}
+
+		// Update or add the condition
+		meta.SetStatusCondition(&car.Status.Conditions, approvedCondition)
+
+		return hubClient.Status().Update(ctx, &car)
+	})
+
+	if err != nil {
+		return fmt.Errorf("failed to approve ClusterApprovalRequest %q: %w", o.name, err)
+	}
+
+	fmt.Printf("ClusterApprovalRequest %q approved successfully\n", o.name)
+	return nil
+}
+
+// setupClient creates and configures the Kubernetes client
+func (o *approveOptions) setupClient() (*runtime.Scheme, client.Client, error) {
+	scheme := runtime.NewScheme()
+
+	if err := clusterv1beta1.AddToScheme(scheme); err != nil {
+		log.Fatalf("failed to add custom APIs (cluster) to the runtime scheme: %v", err)
+	}
+	if err := placementv1beta1.AddToScheme(scheme); err != nil {
+		log.Fatalf("failed to add custom APIs (placement) to the runtime scheme: %v", err)
+	}
+
+	hubClient, err := toolsutils.GetClusterClientFromClusterContext(o.hubClusterContext, scheme)
+	if err != nil {
+		log.Fatalf("failed to create hub cluster client: %v", err)
+	}
+
+	return scheme, hubClient, nil
+}