@rancher/shell 0.3.0 → 0.3.2

package/components/DisableAuthProviderModal.vue

@@ -0,0 +1,106 @@
+<script>
+import { Card } from '@components/Card';
+export default {
+  name:       'PromptRemove',
+  components: { Card },
+  props:      {
+    /**
+     * Inherited global identifier prefix for tests
+     * Define a term based on the parent component to avoid conflicts on multiple components
+     */
+    componentTestid: {
+      type:    String,
+      default: 'disable-auth-provider'
+    }
+  },
+  methods: {
+    show() {
+      this.$modal.show('disableAuthProviderModal');
+    },
+    close() {
+      this.$modal.hide('disableAuthProviderModal');
+    },
+    disable() {
+      this.$modal.hide('disableAuthProviderModal');
+      this.$emit('disable');
+    },
+  }
+};
+</script>
+
+<template>
+  <modal
+    class="remove-modal"
+    name="disableAuthProviderModal"
+    :width="400"
+    height="auto"
+    styles="max-height: 100vh;"
+    @closed="close"
+  >
+    <Card
+      class="disable-auth-provider"
+      :show-highlight-border="false"
+    >
+      <h4
+        slot="title"
+        class="text-default-text"
+      >
+        {{ t('promptRemove.title') }}
+      </h4>
+      <div slot="body">
+        <div class="mb-10">
+          <p v-html="t('promptRemove.attemptingToRemoveAuthConfig', null, true)" />
+        </div>
+      </div>
+      <template #actions>
+        <button
+          class="btn role-secondary"
+          @click="close"
+        >
+          {{ t('generic.cancel') }}
+        </button>
+        <div class="spacer" />
+        <button
+          class="btn role-primary bg-error ml-10"
+          :data-testid="componentTestid + '-confirm-button'"
+          @click="disable"
+        >
+          {{ t('generic.disable') }}
+        </button>
+      </template>
+    </Card>
+  </modal>
+</template>
+
+<style lang='scss'>
+  .disable-auth-provider {
+    &.card-container {
+      box-shadow: none;
+    }
+    #confirm {
+      width: 90%;
+      margin-left: 3px;
+    }
+
+    .remove-modal {
+        border-radius: var(--border-radius);
+        overflow: scroll;
+        max-height: 100vh;
+        & ::-webkit-scrollbar-corner {
+          background: rgba(0,0,0,0);
+        }
+    }
+
+    .actions {
+      text-align: right;
+    }
+
+    .card-actions {
+      display: flex;
+
+      .spacer {
+        flex: 1;
+      }
+    }
+  }
+</style>

package/components/ExplorerMembers.vue

@@ -5,7 +5,12 @@ import Masthead from '@shell/components/ResourceList/Masthead';
 import { AGE, ROLE, STATE, PRINCIPAL } from '@shell/config/table-headers';
 import { canViewClusterPermissionsEditor } from '@shell/components/form/Members/ClusterPermissionsEditor.vue';
 import Banner from '@components/Banner/Banner.vue';
+import Tabbed from '@shell/components/Tabbed/index.vue';
+import Tab from '@shell/components/Tabbed/Tab.vue';
+import SortableTable from '@shell/components/SortableTable';
 import { mapGetters } from 'vuex';
+import { canViewProjectMembershipEditor } from '@shell/components/form/Members/ProjectMembershipEditor.vue';
+import { allHash } from '@shell/utils/promise';
 
 /**
  * Explorer members page.
@@ -17,7 +22,10 @@ export default {
   components: {
     Banner,
     Masthead,
-    ResourceTable
+    ResourceTable,
+    Tabbed,
+    Tab,
+    SortableTable
   },
 
   props: {
@@ -38,19 +46,39 @@ export default {
       `rancher/schemaFor`
     ](NORMAN.CLUSTER_ROLE_TEMPLATE_BINDING);
 
-    const hydration = [
-      clusterRoleTemplateBindingSchema ? this.$store.dispatch(
-        `rancher/findAll`,
-        { type: NORMAN.CLUSTER_ROLE_TEMPLATE_BINDING },
-        { root: true }
-      ) : [],
-      clusterRoleTemplateBindingSchema ? this.$store.dispatch(`management/findAll`, { type: MANAGEMENT.CLUSTER_ROLE_TEMPLATE_BINDING }) : [],
-      this.$store.dispatch('rancher/findAll', { type: NORMAN.PRINCIPAL }),
-      this.$store.dispatch(`management/findAll`, { type: MANAGEMENT.USER }),
-      this.$store.dispatch(`management/findAll`, { type: MANAGEMENT.ROLE_TEMPLATE })
-    ];
-
-    await Promise.all(hydration);
+    const projectRoleTemplateBindingSchema = this.$store.getters['rancher/schemaFor'](NORMAN.PROJECT_ROLE_TEMPLATE_BINDING);
+
+    this.$set(this, 'normanClusterRTBSchema', clusterRoleTemplateBindingSchema);
+    this.$set(this, 'normanProjectRTBSchema', projectRoleTemplateBindingSchema);
+
+    if (clusterRoleTemplateBindingSchema) {
+      Promise.all([
+        this.$store.dispatch(`rancher/findAll`, { type: NORMAN.CLUSTER_ROLE_TEMPLATE_BINDING }, { root: true }),
+        this.$store.dispatch(`management/findAll`, { type: MANAGEMENT.CLUSTER_ROLE_TEMPLATE_BINDING })
+      ]).then(([normanBindings]) => {
+        this.$set(this, 'normanClusterRoleTemplateBindings', normanBindings);
+        this.loadingClusterBindings = false;
+      });
+    }
+
+    if (projectRoleTemplateBindingSchema) {
+      this.$store.dispatch('rancher/findAll', { type: NORMAN.PROJECT_ROLE_TEMPLATE_BINDING }, { root: true })
+        .then((bindings) => {
+          this.$set(this, 'projectRoleTemplateBindings', bindings);
+          this.loadingProjectBindings = false;
+        });
+    }
+
+    this.$store.dispatch('management/findAll', { type: MANAGEMENT.PROJECT })
+      .then(projects => this.$set(this, 'projects', projects));
+
+    const hydration = {
+      normanPrincipals:  this.$store.dispatch('rancher/findAll', { type: NORMAN.PRINCIPAL }),
+      mgmt:              this.$store.dispatch(`management/findAll`, { type: MANAGEMENT.USER }),
+      mgmtRoleTemplates: this.$store.dispatch(`management/findAll`, { type: MANAGEMENT.ROLE_TEMPLATE }),
+    };
+
+    await allHash(hydration);
   },
 
   data() {
@@ -66,54 +94,249 @@ export default {
           cluster: this.$store.getters['currentCluster'].id
         }
       },
-      resource: MANAGEMENT.CLUSTER_ROLE_TEMPLATE_BINDING,
-      VIRTUAL_TYPES
+      resource:                          MANAGEMENT.CLUSTER_ROLE_TEMPLATE_BINDING,
+      normanClusterRTBSchema:            null,
+      normanProjectRTBSchema:            null,
+      normanClusterRoleTemplateBindings: [],
+      projectRoleTemplateBindings:       [],
+      projects:                          [],
+      VIRTUAL_TYPES,
+      projectRoleTemplateColumns:        [
+        STATE,
+        {
+          name:      'member',
+          labeKey:   'generic.name',
+          value:     'principalId',
+          formatter: 'Principal'
+        },
+        {
+          name:     'role',
+          labelKey: 'tableHeaders.role',
+          value:    'roleTemplate.nameDisplay'
+        },
+        { ...AGE, value: 'createdTS' }
+      ],
+      loadingProjectBindings: true,
+      loadingClusterBindings: true
     };
   },
 
   computed: {
+    ...mapGetters(['currentCluster']),
     clusterRoleTemplateBindings() {
-      return this.$store.getters[`rancher/all`](NORMAN.CLUSTER_ROLE_TEMPLATE_BINDING).map(b => b.clusterroletemplatebinding) ;
+      return this.normanClusterRoleTemplateBindings.map(b => b.clusterroletemplatebinding) ;
     },
-    ...mapGetters(['currentCluster']),
     filteredClusterRoleTemplateBindings() {
       return this.clusterRoleTemplateBindings.filter(
         b => b?.clusterName === this.$store.getters['currentCluster'].id
       );
     },
+    filteredProjects() {
+      return this.projects.reduce((all, p) => {
+        if (p?.spec?.clusterName === this.currentCluster.id) {
+          all[p.id] = p;
+        }
+
+        return all;
+      }, {});
+    },
+    filteredProjectRoleTemplateBindings() {
+      const out = this.projectRoleTemplateBindings.filter((rb) => {
+        const projectId = rb.projectId.replace(':', '/');
+
+        return !!this.filteredProjects[projectId];
+      });
+
+      return out;
+    },
+    projectsWithoutRoles() {
+      const inUse = this.filteredProjectRoleTemplateBindings.reduce((projects, binding) => {
+        const thisProjectId = (binding.projectId || '').replace(':', '/');
+
+        if (!projects.includes(thisProjectId)) {
+          projects.push(thisProjectId);
+        }
+
+        return projects;
+      }, []);
+
+      return Object.keys(this.filteredProjects).reduce((all, projectId) => {
+        const project = this.filteredProjects[projectId];
+
+        if ( !inUse.includes(projectId)) {
+          all.push(project);
+        }
+
+        return all;
+      }, []);
+    },
+
+    // We're using this because we need to show projects as groups even if the project doesn't have any role bindings
+    rowsWithFakeProjects() {
+      const fakeRows = this.projectsWithoutRoles.map((project) => {
+        return {
+          groupByLabel:     `${ ('resourceTable.groupLabel.notInAProject') }-${ project.id }`,
+          isFake:           true,
+          mainRowKey:       project.id,
+          nameDisplay:      project.spec?.displayName, // Enable filtering by the project name
+          project,
+          availableActions: [],
+          projectId:        project.id
+        };
+      });
+
+      return [...fakeRows, ...this.filteredProjectRoleTemplateBindings];
+    },
     canManageMembers() {
       return canViewClusterPermissionsEditor(this.$store);
     },
+    canManageProjectMembers() {
+      return canViewProjectMembershipEditor(this.$store);
+    },
     isLocal() {
       return this.$store.getters['currentCluster'].isLocal;
-    }
+    },
+    canEditProjectMembers() {
+      return this.normanProjectRTBSchema?.collectionMethods.find(x => x.toLowerCase() === 'post');
+    },
+    canEditClusterMembers() {
+      return this.normanClusterRTBSchema?.collectionMethods.find(x => x.toLowerCase() === 'post');
+    },
+  },
+  methods: {
+    getMgmtProjectId(group) {
+      return group.group.key.replace(':', '/');
+    },
+    getMgmtProject(group) {
+      return this.$store.getters['management/byId'](MANAGEMENT.PROJECT, this.getMgmtProjectId(group));
+    },
+    getProjectLabel(group) {
+      return this.getMgmtProject(group)?.spec?.displayName;
+    },
+    addProjectMember(group) {
+      this.$store.dispatch('cluster/promptModal', {
+        component:      'AddProjectMemberDialog',
+        componentProps: {
+          projectId:   group.group.key.replace('/', ':'),
+          saveInModal: true
+        },
+        modalSticky: true
+      });
+    },
+    slotName(project) {
+      return `main-row:${ project.id }`;
+    },
   }
 };
 </script>
 
 <template>
-  <div>
+  <div class="project-members">
     <Masthead
       :schema="schema"
       :resource="resource"
       :favorite-resource="VIRTUAL_TYPES.CLUSTER_MEMBERS"
       :create-location="createLocation"
       :create-button-label="t('members.createActionLabel')"
+      :is-creatable="false"
+      :type-display="t('members.clusterAndProject')"
     />
     <Banner
       v-if="isLocal"
       color="error"
       :label="t('members.localClusterWarning')"
     />
-    <ResourceTable
-      :schema="schema"
-      :headers="headers"
-      :rows="$fetchState.pending ? [] : filteredClusterRoleTemplateBindings"
-      :groupable="false"
-      :namespaced="false"
-      :loading="$fetchState.pending || !currentCluster"
-      sub-search="subSearch"
-      :sub-fields="['nameDisplay']"
-    />
+    <Tabbed>
+      <Tab
+        name="cluster-membership"
+        label="Cluster Membership"
+      >
+        <div
+          v-if="canEditClusterMembers"
+          class="row mb-10 cluster-add"
+        >
+          <n-link
+            :to="createLocation"
+            class="btn role-primary pull-right"
+          >
+            {{ t('members.createActionLabel') }}
+          </n-link>
+        </div>
+        <ResourceTable
+          :schema="schema"
+          :headers="headers"
+          :rows="filteredClusterRoleTemplateBindings"
+          :groupable="false"
+          :namespaced="false"
+          :loading="$fetchState.pending || !currentCluster || loadingClusterBindings"
+          sub-search="subSearch"
+          :sub-fields="['nameDisplay']"
+        />
+      </Tab>
+      <Tab
+        v-if="canManageProjectMembers"
+        name="project-membership"
+        label="Project Membership"
+      >
+        <SortableTable
+          group-by="projectId"
+          :loading="$fetchState.pending || !currentCluster || loadingProjectBindings"
+          :rows="rowsWithFakeProjects"
+          :headers="projectRoleTemplateColumns"
+        >
+          <template #group-by="group">
+            <div class="group-bar">
+              <div
+                v-trim-whitespace
+                class="group-tab"
+              >
+                <div
+                  class="project-name"
+                  v-html="getProjectLabel(group)"
+                />
+              </div>
+              <div class="right">
+                <button
+                  v-if="canEditProjectMembers"
+                  type="button"
+                  class="create-namespace btn btn-sm role-secondary mr-5 right"
+                  @click="addProjectMember(group)"
+                >
+                  {{ t('members.createActionLabel') }}
+                </button>
+              </div>
+            </div>
+          </template>
+          <template
+            v-for="project in projectsWithoutRoles"
+            v-slot:[slotName(project)]
+          >
+            <tr
+              :key="project.id"
+              class="main-row"
+            >
+              <td
+                class="empty text-center"
+                colspan="100%"
+              >
+                {{ t('members.noRolesAssigned') }}
+              </td>
+            </tr>
+          </template>
+        </SortableTable>
+      </Tab>
+    </Tabbed>
   </div>
 </template>
+
+<style lang='scss' scoped>
+.project-members {
+  & ::v-deep .group-bar{
+    display: flex;
+    justify-content: space-between;
+  }
+}
+.cluster-add {
+  justify-content: flex-end;
+}
+</style>

package/components/ExplorerProjectsNamespaces.vue

@@ -86,7 +86,7 @@ export default {
     headers() {
       const project = {
         name:  'project',
-        label: 'Project',
+        label: this.t('tableHeaders.project'),
         value: 'project.nameDisplay',
         sort:  ['projectNameSort', 'nameSort'],
       };
@@ -235,6 +235,19 @@ export default {
     }
   },
   methods: {
+    /**
+     * Get PSA HTML to be displayed in the tooltips
+     */
+    getPsaTooltip(row) {
+      const dictionary = row.psaTooltipsDescription;
+      const list = Object.values(dictionary)
+        .sort()
+        .map(text => `<li>${ text }</li>`).join('');
+      const title = `<p>${ this.t('podSecurityAdmission.name') }: </p>`;
+
+      return `${ title }<ul class="psa-tooltip">${ list }</ul>`;
+    },
+
     userIsFilteringForSpecificNamespaceOrProject() {
       const activeFilters = this.$store.getters['namespaceFilters'];
 
@@ -342,21 +355,21 @@ export default {
       v-on="$listeners"
     >
       <template #group-by="group">
-        <div
-          class="project-bar"
-          :class="{'has-description': projectDescription(group.group)}"
+        <div
+          class="project-bar"
+          :class="{'has-description': projectDescription(group.group)}"
         >
-          <div
-            v-trim-whitespace
-            class="group-tab"
+          <div
+            v-trim-whitespace
+            class="group-tab"
           >
-            <div
-              class="project-name"
-              v-html="projectLabel(group.group)"
+            <div
+              class="project-name"
+              v-html="projectLabel(group.group)"
             />
-            <div
-              v-if="projectDescription(group.group)"
-              class="description text-muted text-small"
+            <div
+              v-if="projectDescription(group.group)"
+              class="description text-muted text-small"
             >
               {{ projectDescription(group.group) }}
             </div>
@@ -369,11 +382,11 @@ export default {
             >
               {{ t('projectNamespaces.createNamespace') }}
             </n-link>
-            <button
-              type="button"
-              class="project-action btn btn-sm role-multi-action actions mr-10"
-              :class="{invisible: !showProjectActionButton(group.group)}"
-              @click="showProjectAction($event, group.group)"
+            <button
+              type="button"
+              class="project-action btn btn-sm role-multi-action actions mr-10"
+              :class="{invisible: !showProjectActionButton(group.group)}"
+              @click="showProjectAction($event, group.group)"
             >
               <i class="icon icon-actions" />
             </button>
@@ -382,22 +395,40 @@ export default {
       </template>
       <template #cell:project="{row}">
         <span v-if="row.project">{{ row.project.nameDisplay }}</span>
-        <span
-          v-else
-          class="text-muted"
+        <span
+          v-else
+          class="text-muted"
         >&ndash;</span>
       </template>
-      <template
-        v-for="project in projectsWithoutNamespaces"
-        v-slot:[slotName(project)]
+      <template #cell:name="{row}">
+        <div class="namespace-name">
+          <n-link
+            v-if="row.detailLocation"
+            :to="row.detailLocation"
+          >
+            {{ row.name }}
+          </n-link>
+          <span v-else>
+            {{ row.name }}
+          </span>
+          <i
+            v-if="row.hasSystemLabels"
+            v-tooltip="getPsaTooltip(row)"
+            class="icon icon-lock ml-5"
+          />
+        </div>
+      </template>
+      <template
+        v-for="project in projectsWithoutNamespaces"
+        v-slot:[slotName(project)]
       >
-        <tr
-          :key="project.id"
-          class="main-row"
+        <tr
+          :key="project.id"
+          class="main-row"
         >
-          <td
-            class="empty text-center"
-            colspan="5"
+          <td
+            class="empty text-center"
+            colspan="5"
           >
             {{ t('projectNamespaces.noNamespaces') }}
           </td>
@@ -405,9 +436,9 @@ export default {
       </template>
       <template #main-row:fake-empty>
         <tr class="main-row">
-          <td
-            class="empty text-center"
-            colspan="5"
+          <td
+            class="empty text-center"
+            colspan="5"
           >
             {{ t('projectNamespaces.noProjectNoNamespaces') }}
           </td>
@@ -448,6 +479,19 @@ export default {
         }
       }
     }
+
+    .namespace-name {
+      display: flex;
+      align-items: center;
+    }
   }
 }
 </style>
+<style lang="scss">
+  .psa-tooltip {
+    // These could pop up a lot as the mouse moves around, keep them as small and unintrusive as possible
+    // (easier to test with v-tooltip="{ content: getPSA(row), autoHide: false, show: true }")
+    margin: 3px 0;
+    padding: 0 8px 0 22px;
+  }
+</style>

package/components/ExtensionPanel.vue

@@ -0,0 +1,42 @@
+<script>
+import { getApplicableExtensionEnhancements } from '@shell/core/plugin-helpers';
+
+export default {
+  name:  'ExtensionPanel',
+  props: {
+    resource: {
+      type:    Object,
+      default: () => {
+        return {};
+      }
+    },
+    type: {
+      type:    String,
+      default: ''
+    },
+    location: {
+      type:    String,
+      default: ''
+    },
+  },
+  data() {
+    return { extensionData: getApplicableExtensionEnhancements(this, this.type, this.location, this.$route) };
+  },
+};
+</script>
+
+<template>
+  <div
+    v-if="extensionData.length"
+  >
+    <div
+      v-for="item, i in extensionData"
+      :key="`extensionData${location}${i}`"
+    >
+      <component
+        :is="item.component"
+        :resource="resource"
+      />
+    </div>
+  </div>
+</template>

package/components/GrowlManager.vue

@@ -86,8 +86,9 @@ export default {
   >
     <div class="growl-list">
       <div
-        v-for="growl in stack"
+        v-for="(growl, idx) in stack"
         :key="growl.id"
+        :data-testid="`growl-list-item-${idx}`"
         :class="{'growl': true, ['bg-'+growl.color]: true}"
       >
         <div
@@ -117,7 +118,7 @@ export default {
       <button
         type="button"
         class="btn btn-sm role-primary"
-        @click="closeAll"
+        @click="closeAll()"
       >
         {{ t('growl.clearAll') }}
       </button>
@@ -151,7 +152,6 @@ export default {
 
     .close {
       padding: 5px;
-      font-size: 24px;
     }
 
     .icon-container {