foreman_rh_cloud 12.2.9 → 12.2.11

data/locale/zh_CN/foreman_rh_cloud.po

@@ -9,14 +9,14 @@
 # 0868a4d1af5275b3f70b0a6dac4c99a4, 2023
 # Amit Upadhye <aupadhye@redhat.com>, 2023
 # Ewoud Kohl van Wijngaarden <ewoud+transifex@kohlvanwijngaarden.nl>, 2025
+# Ondřej Gajdušek, 2025
 #
 msgid ""
 msgstr ""
-"Project-Id-Version: foreman_rh_cloud 11.1.0\n"
+"Project-Id-Version: foreman_rh_cloud 13.0.5\n"
 "Report-Msgid-Bugs-To: \n"
 "PO-Revision-Date: 2023-01-20 13:26+0000\n"
-"Last-Translator: Ewoud Kohl van Wijngaarden <ewoud+transifex@kohlvanwijngaarde"
-"n.nl>, 2025\n"
+"Last-Translator: Ondřej Gajdušek, 2025\n"
 "Language-Team: Chinese (China) (https://app.transifex.com/foreman/teams/114/zh"
 "_CN/)\n"
 "MIME-Version: 1.0\n"
@@ -44,7 +44,7 @@ msgid "All recommendations are now selected."
 msgstr "现在选择了所有建议。"
 
 msgid "Analytics data collection"
-msgstr ""
+msgstr "数据收集分析"
 
 msgid "Any Organization"
 msgstr "任意机构"
@@ -127,11 +127,17 @@ msgstr "下载最新的报告"
 msgid "Enable automatic deletion of mismatched host records from the Red Hat cloud"
 msgstr "启用自动删除来自红帽云的主机记录"
 
+msgid "Enable automatic deletion of mismatched host records from the Red Hat cloud. Ignored when using local Insights."
+msgstr ""
+
 msgid "Enable automatic synchronization of Insights recommendations from the Red Hat cloud"
 msgstr "启用来自红帽云的 Insights 建议自动同步"
 
-msgid "Enable automatic upload of your host inventory to the Red Hat cloud"
-msgstr "启用自动将主机清单上传到红帽云"
+msgid "Enable automatic synchronization of Insights recommendations from the Red Hat cloud. Ignored when using local Insights."
+msgstr ""
+
+msgid "Enable automatic upload of your host inventory to the Red Hat cloud. Ignored when using local Insights."
+msgstr ""
 
 msgid "Enable automatic upload of your hosts inventory to the Red Hat cloud"
 msgstr "启用自动将主机清单上传到红帽云"
@@ -146,12 +152,12 @@ msgid "Encountered an error while trying to access the server:"
 msgstr "在尝试访问服务器时遇到错误："
 
 msgid "Exclude installed packages"
-msgstr ""
+msgstr "排除安装的软件包"
 
 msgid "Exclude installed packages from being uploaded to the Red Hat cloud"
 msgstr "将安装的软件包上传到红帽云"
 
-msgid "Exclude installed packages from being uploaded to the Red Hat cloud. (If insights_minimal_data_collection is set to true, this setting is ignored and installed packages are always excluded.)"
+msgid "Exclude installed packages from being uploaded to the Red Hat cloud. (If insights_minimal_data_collection is set to true, this setting is ignored and installed packages are always excluded.) Ignored when using local Insights."
 msgstr ""
 
 msgid "Exit Code: %s"
@@ -188,7 +194,7 @@ msgid "Generate and upload report"
 msgstr "生成并上传报告"
 
 msgid "Generate report"
-msgstr ""
+msgstr "生成报告"
 
 msgid "Generate the report, but do not upload"
 msgstr "生成报告，但不上传"
@@ -217,6 +223,9 @@ msgstr "获取 RH Cloud 中缺少的主机"
 msgid "Host Insights recommendations"
 msgstr "主机 Insights 建议"
 
+msgid "Host inventory report job"
+msgstr ""
+
 msgid "Host was not uploaded to your RH cloud inventory"
 msgstr "主机没有上传到您的 RH 云清单"
 
@@ -260,7 +269,7 @@ msgid "Knowledgebase article"
 msgstr "知识库文章"
 
 msgid "Learn more about {minimalDataCollectionSetting}."
-msgstr ""
+msgstr "了解有关 {minimalDataCollectionSetting} 的更多信息。"
 
 msgid "List of host UUIDs"
 msgstr "主机 UUID 列表"
@@ -278,6 +287,9 @@ msgid "Manual"
 msgstr "手册"
 
 msgid "Minimal data collection"
+msgstr "最小数据收集"
+
+msgid "Missing Insights facets created: %s"
 msgstr ""
 
 msgid "Moderate"
@@ -314,7 +326,7 @@ msgid "Obfuscate host ipv4 addresses"
 msgstr "模糊的主机 ipv4 地址"
 
 msgid "Obfuscate host ipv4 addresses."
-msgstr ""
+msgstr "对主机 ipv4 地址进行模糊化处理"
 
 msgid "Obfuscate host names"
 msgstr "模糊主机名"
@@ -322,20 +334,20 @@ msgstr "模糊主机名"
 msgid "Obfuscate host names sent to the Red Hat cloud"
 msgstr "发送到红帽云的模糊主机名"
 
-msgid "Obfuscate host names sent to the Red Hat cloud. (If insights_minimal_data_collection is set to true, this setting is ignored because host names are not included in the report.)"
+msgid "Obfuscate host names sent to the Red Hat cloud. (If insights_minimal_data_collection is set to true, this setting is ignored because host names are not included in the report.) Ignored when using local Insights."
 msgstr ""
 
 msgid "Obfuscate ipv4 addresses sent to the Red Hat cloud"
 msgstr "发送到红帽云的模糊 ipv4 地址"
 
-msgid "Obfuscate ipv4 addresses sent to the Red Hat cloud.  (If insights_minimal_data_collection is set to true, this setting is ignored because host IPv4 addresses are not included in the report.)"
+msgid "Obfuscate ipv4 addresses sent to the Red Hat cloud.  (If insights_minimal_data_collection is set to true, this setting is ignored because host IPv4 addresses are not included in the report.) Ignored when using local Insights."
 msgstr ""
 
-msgid "Only include the minimum required data in inventory reports for uploading to Red Hat cloud. When this is true, installed packages are excluded from the report regardless of the exclude_installed_packages setting, and host names and IPv4 addresses are excluded from the report regardless of obfuscation settings."
+msgid "Only include the minimum required data in inventory reports for uploading to Red Hat cloud. When this is true, installed packages are excluded from the report regardless of the exclude_installed_packages setting, and host names and IPv4 addresses are excluded from the report regardless of obfuscation settings. Ignored when using local Insights."
 msgstr ""
 
 msgid "Only send the minimum required data to Red Hat cloud, obfuscation settings are disabled"
-msgstr ""
+msgstr "仅将最低所需的数据发送到红帽云，禁用模糊设置"
 
 msgid "Oops! Couldn't find organization that matches your query"
 msgstr "未找到与您的查询匹配的机构"
@@ -352,8 +364,8 @@ msgstr "运行 playbook"
 msgid "RH Cloud"
 msgstr "RH Cloud"
 
-msgid "RHC daemon id"
-msgstr "RHC 守护进程 ID"
+msgid "RHC daemon id. Ignored when using local Insights."
+msgstr ""
 
 msgid "Read more about it in RH cloud insights"
 msgstr "在 RH Cloud insights 中了解更多有关它的信息"
@@ -413,7 +425,7 @@ msgid "Run RH Cloud playbook"
 msgstr "运行 RH Cloud playbook"
 
 msgid "Run playbook generated by Red Hat remediations app"
-msgstr ""
+msgstr "运行由红帽补救应用生成的 playbook"
 
 msgid "Run remediation playbook generated by Insights"
 msgstr "运行 Insights 生成的补救 playbook"
@@ -428,7 +440,7 @@ msgid "Select recommendations from all pages"
 msgstr "在所有页面中选择建议"
 
 msgid "Send additional data to enhance Insights services, as per the settings"
-msgstr ""
+msgstr "根据设置，发送额外数据以增强 Insights 服务"
 
 msgid "Set the current organization context for the request"
 msgstr "设置请求的当前机构上下文"
@@ -436,8 +448,8 @@ msgstr "设置请求的当前机构上下文"
 msgid "Settings"
 msgstr "设置"
 
-msgid "Should import include parameter tags from Foreman?"
-msgstr "应从 Foreman 导入包含参数标签？"
+msgid "Should import include parameter tags from Foreman? Ignored when using local Insights."
+msgstr ""
 
 msgid "Show Advanced Settings"
 msgstr "显示高级设置"
@@ -445,6 +457,12 @@ msgstr "显示高级设置"
 msgid "Show if system is configured to use local iop-advisor-engine."
 msgstr "显示系统是否被配置为使用本地 iop-advisor-engine。"
 
+msgid "Single-host report job"
+msgstr ""
+
+msgid "Single-host report job for host %s"
+msgstr ""
+
 msgid "Start inventory synchronization"
 msgstr "启动清单同步"
 
@@ -476,7 +494,7 @@ msgid "The report file %{filename} doesn't exist"
 msgstr "报告文件 %{filename} 不存在"
 
 msgid "The scheduled process is disabled because this Foreman is configured with a local IoP Smart Proxy."
-msgstr ""
+msgstr "调度的进程被禁用，因为此 Foreman 配置了一个本地 IoP Smart Proxy。"
 
 msgid "The server returned the following error: %s"
 msgstr "服务器返回以下错误：%s"
@@ -487,6 +505,9 @@ msgstr "任务失败，错误为:"
 msgid "There are no recommendations for your hosts"
 msgstr "没有适用于您的主机的建议"
 
+msgid "There were no missing Insights facets"
+msgstr ""
+
 msgid "This action will also enable automatic reports upload"
 msgstr "此操作还会启用自动报告上传"
 
@@ -497,7 +518,7 @@ msgid "To manually upload the data for a specific organization, select an organi
 msgstr "要手动上传特定机构的数据，请选择机构并点 {restartButtonName}。"
 
 msgid "Total CVEs"
-msgstr ""
+msgstr "CVE 总数"
 
 msgid "Total risk"
 msgstr "总风险"
@@ -527,10 +548,10 @@ msgid "View in Red Hat Insights"
 msgstr "禁用 Red Hat Insights"
 
 msgid "Vulnerabilities"
-msgstr ""
+msgstr "安全漏洞"
 
 msgid "Vulnerability"
-msgstr ""
+msgstr "安全漏洞"
 
 msgid "Wait and %s"
 msgstr "等待和 %s"
@@ -599,7 +620,7 @@ msgid "rule title"
 msgstr "rule 标题"
 
 msgid "setting minimal data collection"
-msgstr ""
+msgstr "设置最小数据收集"
 
 msgid "solution url"
 msgstr "solution url"

data/package.json

@@ -1,6 +1,6 @@
 {
   "name": "foreman_rh_cloud",
-  "version": "12.2.9",
+  "version": "12.2.11",
   "description": "Inventory Upload =============",
   "main": "index.js",
   "scripts": {

data/test/unit/fact_helpers_test.rb

@@ -313,4 +313,51 @@ class FactHelpersTest < ActiveSupport::TestCase
       assert_equal '10.230.230.3', ip3
     end
   end
+
+  describe 'IoP smart proxy checks' do
+    test 'obfuscate_hostname? returns false when global setting is enabled but IoP is present' do
+      Setting.expects(:[]).with(:obfuscate_inventory_hostnames).returns(true)
+      ForemanRhCloud.expects(:with_iop_smart_proxy?).returns(true)
+      host = mock('host')
+      # When IoP is present, it falls back to checking host-specific facts
+      @instance.expects(:fact_value).with(host, 'insights_client::obfuscate_hostname_enabled').returns(nil)
+
+      result = @instance.obfuscate_hostname?(host)
+
+      refute result
+    end
+
+    test 'obfuscate_hostname? returns true when global setting is enabled and IoP is not present' do
+      Setting.expects(:[]).with(:obfuscate_inventory_hostnames).returns(true)
+      ForemanRhCloud.expects(:with_iop_smart_proxy?).returns(false)
+      host = mock('host')
+
+      result = @instance.obfuscate_hostname?(host)
+
+      assert result
+    end
+
+    test 'obfuscate_ips? returns false when global setting is enabled but IoP is present' do
+      Setting.expects(:[]).with(:obfuscate_inventory_ips).returns(true)
+      ForemanRhCloud.expects(:with_iop_smart_proxy?).returns(true)
+      host = mock('host')
+      # When IoP is present, it falls back to checking host-specific facts
+      @instance.expects(:fact_value).with(host, 'insights_client::obfuscate_ipv4_enabled').returns(nil)
+      @instance.expects(:fact_value).with(host, 'insights_client::obfuscate_ipv6_enabled').returns(nil)
+
+      result = @instance.obfuscate_ips?(host)
+
+      refute result
+    end
+
+    test 'obfuscate_ips? returns true when global setting is enabled and IoP is not present' do
+      Setting.expects(:[]).with(:obfuscate_inventory_ips).returns(true)
+      ForemanRhCloud.expects(:with_iop_smart_proxy?).returns(false)
+      host = mock('host')
+
+      result = @instance.obfuscate_ips?(host)
+
+      assert result
+    end
+  end
 end

data/test/unit/slice_generator_test.rb

@@ -107,6 +107,36 @@ class SliceGeneratorTest < ActiveSupport::TestCase
     assert_equal 'test_nic1', actual_nic['name']
   end
 
+  test 'does not generate a report with minimal data collection when iop is present' do
+    Setting[:insights_minimal_data_collection] = true
+    ForemanRhCloud.stubs(:with_iop_smart_proxy?).returns(true)
+
+    batch = Host.where(id: @host.id).in_batches.first
+    generator = create_generator(batch)
+
+    json_str = generator.render
+    actual = JSON.parse(json_str.join("\n"))
+
+    assert_equal '00000000-0000-0000-0000-000000000000', actual['report_slice_id']
+    assert_not_nil(actual_host = actual['hosts'].first)
+    assert_nil actual_host['ip_addresses']
+    assert_nil actual_host['mac_addresses']
+    assert_equal @host.fqdn, actual_host['fqdn']
+    assert_equal '1234', actual_host['account']
+    assert_equal 1, generator.hosts_count
+    assert_not_nil(actual_system_profile = actual_host['system_profile'])
+    assert_nil actual_system_profile['number_of_cpus']
+    assert_nil actual_system_profile['number_of_sockets']
+    assert_nil actual_system_profile['cores_per_socket']
+    assert_nil actual_system_profile['system_memory_bytes']
+    assert_nil actual_system_profile['os_release']
+    assert_not_nil(actual_network_interfaces = actual_system_profile['network_interfaces'])
+    assert_not_nil(actual_nic = actual_network_interfaces.first)
+    refute actual_nic.key?('mtu')
+    refute actual_nic.key?('mac_address')
+    assert_equal 'test_nic1', actual_nic['name']
+  end
+
   test 'generates a report with minimal data collection' do
     Setting[:insights_minimal_data_collection] = true
     create_fact_values(@host,
@@ -930,6 +960,33 @@ class SliceGeneratorTest < ActiveSupport::TestCase
     assert_equal 'alibaba', actual_profile['cloud_provider']
   end
 
+  test 'do not exclude packages when iop is present' do
+    Setting[:exclude_installed_packages] = true
+    ForemanRhCloud.stubs(:with_iop_smart_proxy?).returns(true)
+    installed_package = ::Katello::InstalledPackage.create(name: 'test-package', nvrea: 'test-package-1.0.x86_64', nvra: 'test-package-1.0.x86_64')
+
+    another_host = FactoryBot.create(
+      :host,
+      :with_subscription,
+      :with_content,
+      content_view: @host.content_views.first,
+      lifecycle_environment: @host.lifecycle_environments.first,
+      organization: @host.organization,
+      installed_packages: [installed_package]
+    )
+
+    batch = Host.where(id: another_host.id).in_batches.first
+    generator = create_generator(batch)
+
+    json_str = generator.render
+    actual = JSON.parse(json_str.join("\n"))
+
+    assert_equal '00000000-0000-0000-0000-000000000000', actual['report_slice_id']
+    assert_not_nil(actual_host = actual['hosts'].first)
+    assert_not_nil(actual_profile = actual_host['system_profile'])
+    assert_not_nil(actual_profile['installed_packages'])
+  end
+
   test 'include packages installed in the report' do
     Setting[:exclude_installed_packages] = false
     installed_package = ::Katello::InstalledPackage.create(name: 'test-package', nvrea: 'test-package-1.0.x86_64', nvra: 'test-package-1.0.x86_64')

data/webpack/InsightsHostDetailsTab/InsightsTotalRiskChart.js

@@ -18,36 +18,67 @@ import SkeletonLoader from 'foremanReact/components/common/SkeletonLoader';
 import { insightsCloudUrl } from '../InsightsCloudSync/InsightsCloudSyncHelpers';
 import { getInitialRisks, theme } from './InsightsTabConstants';
 
-const InsightsTotalRiskCard = ({ hostDetails: { id } }) => {
+const InsightsTotalRiskCard = ({ hostDetails }) => {
+  const { id, insights_attributes: insightsFacet } = hostDetails;
+  const uuid = insightsFacet?.uuid;
+  // eslint-disable-next-line camelcase
+  const isIop = insightsFacet?.use_iop_mode;
   const [totalRisks, setTotalRisks] = useState(getInitialRisks());
   const hashHistory = useHistory();
   const dispatch = useDispatch();
   const API_KEY = `HOST_${id}_RECOMMENDATIONS`;
   const API_OPTIONS = useMemo(() => ({ key: API_KEY }), [API_KEY]);
-  const url = id && insightsCloudUrl(`hits/${id}`); // This will keep the API call from being triggered if there's no host id.
-  const {
-    status = STATUS.PENDING,
-    response: { hits = [] },
-  } = useAPI('get', url, API_OPTIONS);
 
-  useEffect(() => {
-    if (status === STATUS.RESOLVED) {
-      const risks = getInitialRisks();
+  // This will keep the API call from being triggered if there's no host id.
+  const url = isIop
+    ? uuid && insightsCloudUrl(`api/insights/v1/system/${uuid}`)
+    : id && insightsCloudUrl(`hits/${id}`);
+  const { status = STATUS.PENDING, response } = useAPI('get', url, API_OPTIONS);
+
+  const checkRisks = useMemo(() => {
+    if (!response || status !== STATUS.RESOLVED) {
+      return getInitialRisks();
+    }
+
+    const risks = getInitialRisks();
+    if (isIop) {
+      const {
+        low_hits: lowHits = 0,
+        moderate_hits: moderateHits = 0,
+        important_hits: importantHits = 0,
+        critical_hits: criticalHits = 0,
+        hits = 0,
+      } = response;
+
+      risks[1].value += lowHits;
+      risks[2].value += moderateHits;
+      risks[3].value += importantHits;
+      risks[4].value += criticalHits;
+      risks.total = hits;
+    } else {
+      const { hits = [] } = response;
       hits.forEach(({ total_risk: risk }) => {
         risks[risk].value += 1;
       });
       risks.total = hits.length;
-      setTotalRisks(risks);
     }
-  }, [hits, status]);
+    return risks;
+  }, [response, status, isIop]);
+
+  useEffect(() => {
+    setTotalRisks(checkRisks);
+  }, [checkRisks]);
+
+  if (!insightsFacet) return null;
 
   const onChartClick = (evt, { index }) => {
     hashHistory.push(`/Insights`);
-    dispatch(
-      push({
-        search: `search=total_risk+%3D+${index + 1}`,
-      })
-    );
+    !isIop &&
+      dispatch(
+        push({
+          search: `search=total_risk+%3D+${index + 1}`,
+        })
+      );
   };
 
   const onChartHover = (evt, { index }) => [
@@ -61,11 +92,16 @@ const InsightsTotalRiskCard = ({ hostDetails: { id } }) => {
   const { 1: low, 2: moderate, 3: important, 4: critical, total } = totalRisks;
 
   // eslint-disable-next-line react/prop-types
-  const LegendLabel = ({ index, ...rest }) => (
-    <a key={index} onClick={() => onChartClick(null, { index })}>
-      <ChartLabel {...rest} />
-    </a>
-  );
+  const LegendLabel = ({ index, ...rest }) => {
+    if (isIop) {
+      return <ChartLabel {...rest} />;
+    }
+    return (
+      <a key={index} onClick={() => onChartClick(null, { index })}>
+        <ChartLabel {...rest} />
+      </a>
+    );
+  };
 
   const legend = (
     <ChartLegend

data/webpack/InsightsHostDetailsTab/__tests__/InsightsTotalRiskChart.test.js

@@ -0,0 +1,194 @@
+import React from 'react';
+import { render, screen, waitFor } from '@testing-library/react';
+import '@testing-library/jest-dom';
+import { Provider } from 'react-redux';
+import { ConnectedRouter } from 'connected-react-router';
+import { createMemoryHistory } from 'history';
+import configureMockStore from 'redux-mock-store';
+import { STATUS } from 'foremanReact/constants';
+import * as APIHooks from 'foremanReact/common/hooks/API/APIHooks';
+import InsightsTotalRiskCard from '../InsightsTotalRiskChart';
+
+jest.mock('foremanReact/common/hooks/API/APIHooks');
+jest.mock('foremanReact/common/I18n', () => ({
+  translate: jest.fn(str => str),
+}));
+
+const mockStore = configureMockStore();
+const history = createMemoryHistory();
+const store = mockStore({
+  router: {
+    location: {
+      pathname: '/',
+      search: '',
+      hash: '',
+      state: null,
+    },
+    action: 'POP',
+  },
+});
+
+const defaultHostDetails = {
+  id: 1,
+  insights_attributes: {
+    uuid: 'test-uuid',
+    use_iop_mode: false,
+  },
+};
+
+const renderComponent = (props = {}) => {
+  const allProps = {
+    hostDetails: defaultHostDetails,
+    ...props,
+  };
+
+  return render(
+    <Provider store={store}>
+      <ConnectedRouter history={history}>
+        <InsightsTotalRiskCard {...allProps} />
+      </ConnectedRouter>
+    </Provider>
+  );
+};
+
+describe('InsightsTotalRiskChart', () => {
+  beforeEach(() => {
+    store.clearActions();
+    jest.clearAllMocks();
+  });
+
+  it('should show loading state initially', () => {
+    APIHooks.useAPI.mockReturnValue({
+      status: STATUS.PENDING,
+      response: null,
+    });
+
+    renderComponent();
+    // SkeletonLoader shows loading state when status is PENDING
+    expect(screen.queryByText('No results found')).not.toBeInTheDocument();
+    expect(
+      screen.queryByTestId('rh-cloud-total-risk-card')
+    ).not.toBeInTheDocument();
+  });
+
+  it('should display error state when API fails', async () => {
+    APIHooks.useAPI.mockReturnValue({
+      status: STATUS.ERROR,
+      response: null,
+    });
+
+    renderComponent();
+    expect(screen.getByText('No results found')).toBeInTheDocument();
+    expect(
+      screen.queryByTestId('rh-cloud-total-risk-card')
+    ).not.toBeInTheDocument();
+  });
+
+  it('should handle non-IoP mode API response correctly', async () => {
+    const mockResponse = {
+      hits: [
+        { total_risk: 1 },
+        { total_risk: 2 },
+        { total_risk: 2 },
+        { total_risk: 3 },
+        { total_risk: 4 },
+      ],
+    };
+
+    APIHooks.useAPI.mockReturnValue({
+      status: STATUS.RESOLVED,
+      response: mockResponse,
+    });
+
+    renderComponent();
+
+    await waitFor(() => {
+      // Check if total number of recommendations is displayed
+      expect(screen.getByText('5')).toBeInTheDocument();
+      // Check if risk levels are displayed correctly
+      expect(screen.getByText(/Low: 1/)).toBeInTheDocument();
+      expect(screen.getByText(/Moderate: 2/)).toBeInTheDocument();
+      expect(screen.getByText(/Important: 1/)).toBeInTheDocument();
+      expect(screen.getByText(/Critical: 1/)).toBeInTheDocument();
+    });
+  });
+
+  it('should handle IOP mode API response correctly', async () => {
+    const mockResponse = {
+      low_hits: 2,
+      moderate_hits: 3,
+      important_hits: 1,
+      critical_hits: 2,
+      hits: 8,
+    };
+
+    APIHooks.useAPI.mockReturnValue({
+      status: STATUS.RESOLVED,
+      response: mockResponse,
+    });
+
+    renderComponent({
+      hostDetails: {
+        ...defaultHostDetails,
+        insights_attributes: {
+          ...defaultHostDetails.insights_attributes,
+          use_iop_mode: true,
+        },
+      },
+    });
+
+    await waitFor(() => {
+      // Check if total number of recommendations is displayed
+      expect(screen.getByText('8')).toBeInTheDocument();
+      // Check if risk levels are displayed correctly
+      expect(screen.getByText(/Low: 2/)).toBeInTheDocument();
+      expect(screen.getByText(/Moderate: 3/)).toBeInTheDocument();
+      expect(screen.getByText(/Important: 1/)).toBeInTheDocument();
+      expect(screen.getByText(/Critical: 2/)).toBeInTheDocument();
+    });
+  });
+
+  it('should show empty state when no recommendations exist', async () => {
+    APIHooks.useAPI.mockReturnValue({
+      status: STATUS.RESOLVED,
+      response: { hits: [] },
+    });
+
+    renderComponent();
+
+    await waitFor(() => {
+      expect(screen.getByText(/Low: 0/)).toBeInTheDocument();
+      expect(screen.getByText(/Moderate: 0/)).toBeInTheDocument();
+      expect(screen.getByText(/Important: 0/)).toBeInTheDocument();
+      expect(screen.getByText(/Critical: 0/)).toBeInTheDocument();
+    });
+  });
+
+  it('should use correct API endpoint based on IOP mode', () => {
+    renderComponent({
+      hostDetails: {
+        ...defaultHostDetails,
+        insights_attributes: {
+          ...defaultHostDetails.insights_attributes,
+          use_iop_mode: true,
+        },
+      },
+    });
+
+    expect(APIHooks.useAPI).toHaveBeenCalledWith(
+      'get',
+      expect.stringContaining('/api/insights/v1/system/test-uuid'),
+      expect.any(Object)
+    );
+
+    jest.clearAllMocks();
+
+    renderComponent();
+
+    expect(APIHooks.useAPI).toHaveBeenCalledWith(
+      'get',
+      expect.stringContaining('/hits/1'),
+      expect.any(Object)
+    );
+  });
+});