project: Add ability to import and convert namespaces into projects

[gambtho]

Summary

Implements the namespace-to-project conversion experience allowing users to import existing AKS managed namespaces as AKS Desktop projects.

For issue:

• projects: Turn managed namespace in Projects experience #163

Unified Import Page

• Rewrites ImportAKSProjects to discover all managed namespaces (not just pre-labeled ones) via Azure Resource Graph
• Adds an "AKS Project?" status column showing whether each namespace already has AKS Desktop labels
• When importing namespaces that aren't yet projects, a ConversionDialog confirms label application (headlamp.dev/project-managed-by: aks-desktop) before proceeding
• Handles permission errors gracefully with clear messaging

Shared Utilities

• Extracts assignRolesToNamespace() from CreateAKSProject into utils/azure/roleAssignment.ts for reuse
• Adds applyProjectLabels() and fetchNamespaceData() in utils/kubernetes/namespaceUtils.ts for K8s label operations
• Refactors CreateAKSProject.tsx to use the shared role assignment utility (~130 lines removed)

New Components

• ConversionDialog — confirmation popup disclosing which labels will be added
• useNamespaceDiscovery hook — Resource Graph discovery with isAksProject status, system namespace filtering, already-imported filtering
• CreateProjectFromNamespace wizard — 5-step flow for advanced conversion (namespace selection, networking, compute, access, review)

Other

• Adds documentation links in README
• Registers new routes and create-project options in index.tsx

File Changes

Category	Files
New	ConversionDialog.tsx, ImportAKSProjects/hooks/useNamespaceDiscovery.ts, CreateProjectFromNamespace/ (wizard + components + hook), roleAssignment.ts, namespaceUtils.ts
Modified	ImportAKSProjects.tsx (rewrite), CreateAKSProject.tsx (refactor), index.tsx (registrations), README.md
Tests	namespaceUtils.test.ts (10 tests), roleAssignment.test.ts (9 tests)

Test plan

• All CI checks pass (tsc, lint, format, build, tests)
• ImportAKSProjects page shows all managed namespaces with "AKS Project?" column
• Selecting already-labeled namespaces imports directly without dialog
• Selecting unlabeled namespaces shows ConversionDialog with label disclosure
• Confirming conversion applies labels and imports successfully
• Permission denied errors show clear messaging
• CreateAKSProject wizard still works after role assignment refactor
• CreateProjectFromNamespace wizard works end-to-end for advanced conversion

[Copilot]

Pull request overview

This pull request adds a new "AKS project from existing namespace" feature that enables users to convert existing AKS managed namespaces into Headlamp projects. The feature addresses the gap where namespaces created outside AKS Desktop (via Azure CLI or Portal) could not be turned into projects. The implementation follows the codebase's established patterns and successfully extracts shared role assignment logic into reusable utilities.

Changes:

• New wizard flow for converting or importing managed namespaces with 5 steps: namespace selection, networking policies, compute quota, access control, and review
• Shared utility modules for role assignment (roleAssignment.ts) and namespace label management (namespaceUtils.ts)
• Azure Resource Graph-based namespace discovery with platform-specific query quoting for Windows compatibility
• Documentation links added to README for AKS Desktop and managed namespaces

Reviewed changes

Copilot reviewed 10 out of 10 changed files in this pull request and generated 6 comments.

Show a summary per file

File	Description
utils/kubernetes/namespaceUtils.ts	New utility for fetching namespace data via K8s API and applying project labels
utils/azure/roleAssignment.ts	Extracted shared role assignment logic from CreateAKSProject into reusable utility function
hooks/useNamespaceDiscovery.ts	New hook that discovers managed namespaces via Azure Resource Graph with categorization
components/NamespaceSelectionStep.tsx	Namespace picker UI with radio selection tables for conversion vs import categories
components/FromNamespaceReviewStep.tsx	Review step displaying labels, config, and user assignments before conversion
CreateProjectFromNamespace.tsx	Main wizard component orchestrating the 5-step conversion/import flow
index.tsx	Route and custom create project registration for new namespace conversion feature
CreateAKSProject.tsx	Refactored to use shared assignRolesToNamespace utility, reducing duplication
README.md	Added documentation section with links to AKS Desktop and managed namespaces docs
docs/implementation-plan-namespace-to-project.md	Comprehensive implementation plan document (800 lines)

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 29 out of 29 changed files in this pull request and generated 5 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 28 out of 28 changed files in this pull request and generated 1 comment.

Comments suppressed due to low confidence (1)

plugins/aks-desktop/src/utils/shared/isAksProject.tsx:23

• The cancel function is not being called in the error callback. According to the codebase conventions, cancelFn must be awaited and called in both success and error callbacks to prevent resource leaks. Add cancelFn.then(it => it()); inside the error callback.

      () => {
        res(false);
      },

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[illume]

Can you please break this down into some smaller commits?

[Copilot]

Pull request overview

Copilot reviewed 27 out of 27 changed files in this pull request and generated 4 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 27 out of 27 changed files in this pull request and generated 2 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 45 out of 46 changed files in this pull request and generated 1 comment.

Comments suppressed due to low confidence (4)

plugins/aks-desktop/src/components/ImportAKSProjects/ImportAKSProjects.tsx:1

• Keying clusterMap only by clusterName can conflate distinct Azure AKS clusters that share the same name across different resource groups/subscriptions. This can cause incorrect registration metadata (resourceGroup/subscriptionId) to be used for conversion/import. Use a composite key (e.g., ${clusterName}|${subscriptionId}|${resourceGroup} or an ARM ID) to keep clusters distinct.

// Copyright (c) Microsoft Corporation.

plugins/aks-desktop/src/utils/azure/roleAssignment.ts:1

• The string No user assignments to process looks like a new i18n key, but the locale files added in this PR include No users to assign (and not this exact key). To avoid untranslated UI text, either reuse the existing key (No users to assign) or add this new key to the locale files consistently.
  plugins/aks-desktop/src/hooks/useNamespaceDiscovery.ts:1
• isAlreadyImported reads/parses localStorage via getClusterSettings for every namespace being mapped/filtered. On clusters with many namespaces, this can add noticeable overhead. Consider caching allowedNamespaces per clusterName for the duration of discover() (e.g., a Map of clusterName -> Set<string>), so each cluster’s settings are parsed once.
  plugins/aks-desktop/src/hooks/useNamespaceDiscovery.ts:1
• Deduplication uses ${clusterName}/${namespace} as the identity key. If two distinct clusters share the same clusterName (possible across different Azure subscriptions/resource groups) this will incorrectly drop namespaces from the 'regular' set. Prefer a stable unique cluster identifier for managed namespaces (e.g., include subscriptionId/resourceGroup, or store/use ARM resource IDs) when generating dedupe keys.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

[Copilot]

Pull request overview

Copilot reviewed 46 out of 47 changed files in this pull request and generated 1 comment.

Comments suppressed due to low confidence (4)

plugins/aks-desktop/src/utils/azure/roleAssignment.ts:1

• This introduces a new user-facing i18n key ('No user assignments to process') that doesn’t appear in the updated locale files (which include a similar 'No users to assign'). To avoid untranslated strings, reuse the existing key or add this new key to all locale dictionaries.
  plugins/aks-desktop/src/utils/kubernetes/namespaceUtils.ts:1
• New behavior is introduced for creating a namespace pre-labeled as a project, but the current namespaceUtils.test.ts only covers fetchNamespaceData and applyProjectLabels. Add tests that assert the post call payload (labels and name) and that the correct cluster name is passed.
  plugins/aks-desktop/src/hooks/useNamespaceDiscovery.ts:1
• This references window directly, which will throw in non-browser environments (e.g., if the hook is ever executed in a non-jsdom test or SSR-like context). Use globalThis and a typeof window !== 'undefined' guard (or read from globalThis only) to make the helper safe to import/execute outside the browser.
  plugins/aks-desktop/src/hooks/useNamespaceDiscovery.ts:1
• If cancel() throws or the promise chain rejects, this can surface as an unhandled rejection. Consider adding a .catch(() => {}) (similar to fetchNamespaceData) to ensure cleanup never produces noisy console errors.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

[Copilot]

Pull request overview

Copilot reviewed 46 out of 47 changed files in this pull request and generated 2 comments.

Comments suppressed due to low confidence (1)

plugins/aks-desktop/src/utils/kubernetes/namespaceUtils.ts:1

• Error detection for az aks namespace update is case-sensitive and relies on the substring 'ERROR'; this can miss failures that are reported with different casing or formatting (e.g., Error:) and incorrectly treat the operation as success. Prefer checking the command exit status (if runCommandAsync exposes it or rejects on non-zero), or use a case-insensitive match for common error prefixes while still allowing known warning-only stderr output.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

[sniok]

tested and works nice

[Copilot]

Pull request overview

Copilot reviewed 46 out of 47 changed files in this pull request and generated 1 comment.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

all the comments were addressed