@rancher/shell 0.3.4 → 0.3.5

package/assets/styles/app.scss

@@ -33,4 +33,4 @@
 @import "./vendor/vue-select";
 @import "./vendor/vue-js-modal";
 @import "./vendor/code-mirror";
-@import '@/node_modules/xterm/css/xterm.css';
+@import 'node_modules/xterm/css/xterm.css';

package/assets/styles/fonts/_fontstack.scss

@@ -4,8 +4,8 @@
   font-style: normal;
   font-weight: normal;
   src: local(''),
-       url('~shell/assets/fonts/poppins/poppins-v15-latin-300.woff2') format('woff2'), /* Super Modern Browsers */
-       url('~shell/assets/fonts/poppins/poppins-v15-latin-300.woff') format('woff'), /* Modern Browsers */
+    url('~@shell/assets/fonts/poppins/poppins-v15-latin-300.woff2') format('woff2'), /* Super Modern Browsers */
+    url('~@shell/assets/fonts/poppins/poppins-v15-latin-300.woff') format('woff'), /* Modern Browsers */
 }
 
 /* poppins-500 - latin */
@@ -14,8 +14,8 @@
   font-style: normal;
   font-weight: bold;
   src: local(''),
-       url('~shell/assets/fonts/poppins/poppins-v15-latin-500.woff2') format('woff2'), /* Super Modern Browsers */
-       url('~shell/assets/fonts/poppins/poppins-v15-latin-500.woff') format('woff'), /* Modern Browsers */
+    url('~@shell/assets/fonts/poppins/poppins-v15-latin-500.woff2') format('woff2'), /* Super Modern Browsers */
+    url('~@shell/assets/fonts/poppins/poppins-v15-latin-500.woff') format('woff'), /* Modern Browsers */
 }
 
 /* lato-regular - latin */
@@ -24,8 +24,8 @@
   font-style: normal;
   font-weight: normal;
   src: local(''),
-       url('~shell/assets/fonts/lato/lato-v17-latin-regular.woff2') format('woff2'), /* Super Modern Browsers */
-       url('~shell/assets/fonts/lato/lato-v17-latin-regular.woff') format('woff'), /* Modern Browsers */
+    url('~@shell/assets/fonts/lato/lato-v17-latin-regular.woff2') format('woff2'), /* Super Modern Browsers */
+    url('~@shell/assets/fonts/lato/lato-v17-latin-regular.woff') format('woff'), /* Modern Browsers */
 }
 
 /* lato-700 - latin */
@@ -34,8 +34,8 @@
   font-style: normal;
   font-weight: bold;
   src: local(''),
-       url('~shell/assets/fonts/lato/lato-v17-latin-700.woff2') format('woff2'), /* Super Modern Browsers */
-       url('~shell/assets/fonts/lato/lato-v17-latin-700.woff') format('woff'), /* Modern Browsers */
+    url('~@shell/assets/fonts/lato/lato-v17-latin-700.woff2') format('woff2'), /* Super Modern Browsers */
+    url('~@shell/assets/fonts/lato/lato-v17-latin-700.woff') format('woff'), /* Modern Browsers */
 }
 
 /* roboto-mono-regular - latin */
@@ -44,6 +44,6 @@
   font-style: normal;
   font-weight: normal;
   src: local(''),
-       url('~shell/assets/fonts/roboto-mono/roboto-mono-v13-latin-regular.woff2') format('woff2'), /* Super Modern Browsers */
-       url('~shell/assets/fonts/roboto-mono/roboto-mono-v13-latin-regular.woff') format('woff'), /* Modern Browsers */
-}
+    url('~@shell/assets/fonts/roboto-mono/roboto-mono-v13-latin-regular.woff2') format('woff2'), /* Super Modern Browsers */
+    url('~@shell/assets/fonts/roboto-mono/roboto-mono-v13-latin-regular.woff') format('woff'), /* Modern Browsers */
+}

package/assets/styles/vendor/vue-js-modal.scss

@@ -1,4 +1,4 @@
-@import '~/node_modules/vue-js-modal/dist/styles.css';
+@import 'node_modules/vue-js-modal/dist/styles.css';
 
 .v--modal-overlay {
   background-color: var(--overlay-bg);
@@ -10,7 +10,7 @@
 }
 
 .v--modal {
-  background-color: var(--modal-bg)!important;
+  background-color: var(--modal-bg) !important;
   box-shadow: none;
   border: 2px solid var(--modal-border);
-}
+}

package/assets/translations/en-us.yaml

@@ -22,6 +22,7 @@ generic:
   disabled: Disabled
   done: Done
   enabled: Enabled
+  here: here
   id: ID
   ignored: Ignored
   invalidCron: Invalid cron schedule
@@ -819,6 +820,8 @@ catalog:
       clusterToolExists: This chart has a fixed namespace and name. A matching <a href="{url}">application</a> has been found and any changes will be made to it.
     banner:
       legacy: 'PSP Removal: Before upgrading a cluster to Kubernetes 1.25+, please ensure you review your Helm applications for Pod Security Policies and update them accordingly'
+    enablePSP: Enable Pod Security Policies
+    global: Global
   charts:
     all: All
     categories:
@@ -1067,7 +1070,6 @@ cis:
   testID: Test ID
   testsSkipped: Tests Skipped
   testsToSkip: Tests to Skip
-  workerProfile: CIS Profile
 
 cluster:
   addonChart:
@@ -1262,6 +1264,7 @@ cluster:
       affinity:
         namespaces:
           placeholder: e.g. default,system,base
+      installGuestAgent: Install guest agent
   description:
     label: Cluster Description
     placeholder: Any text you want that better describes this cluster
@@ -1311,8 +1314,9 @@ cluster:
   manageAction: Manage
   kubernetesVersion:
     label: Kubernetes Version
-    experimental: experimental
-    deprecated: deprecated
+    current: (current)
+    experimental: (experimental)
+    deprecated: (deprecated)
     deprecatedPatches: Show deprecated Kubernetes patch versions
     deprecatedPatchWarning: We recommend using the latest patch version for each minor Kubernetes version. Deprecated patch versions can be useful for migration purposes.
   toolsTip: Use the new Cluster Tools to manage and install Monitoring, Logging and other tools
@@ -1344,6 +1348,10 @@ cluster:
       availabilityZone:
         label: Availability Zone
         description: Availability zones protect applications from complete Azure data center failures.
+        publicIpAndSKUWarning: Availability zones require Static Public IP and Use Standard SKU for Public IP to be enabled.
+        publicIpWarning: Availability zones require Static Public IP to be enabled.
+        standardSKUWarning: Availability zones require Use Standard SKU for Public IP to be enabled.
+        managedDisksWarning: Availability zones require Managed Disks to be enabled.
       dns:
         help: A unique DNS label for the public IP address.
         label: DNS Label
@@ -1379,8 +1387,15 @@ cluster:
           label: No Public IP
         staticPublicIp:
           label: Static Public IP
+        standardSKU:
+          label: Use Standard SKU for Public IP
       resourceGroup:
         label: Resource Group
+      sections:
+        availabilitySetConfiguration: Availability Set Configuration
+        purchasePlan: Purchase Plan
+        network: Network
+        disks: Disks
       size:
         label: VM Size
         tooltip: When accelerated networking is enabled, not all sizes are available.
@@ -1607,11 +1622,10 @@ cluster:
     os: 'You are attemping to add a {newOS} worker node to a cluster with one or more {existingOS} worker nodes: some installed apps may need to be upgraded or removed.'
     rke2-k3-reprovisioning: 'Making changes to cluster configuration may result in nodes reprovisioning. For more information see the <a target="blank" href="{docsBase}/cluster-provisioning/rke-clusters/behavior-differences-between-rke1-and-rke2/" target="_blank" rel="noopener nofollow">documentation</a>.'
     desiredNodeGroupWarning: There are 0 nodes available to run the cluster agent. The cluster will not become active until at least one node is available.
-    invalidPsps: You have one or more PodSecurityPolicy resource(s) in this cluster. Pod Security Policies are not available in Kubernetes v1.25.
+    invalidPsps: You have one or more PodSecurityPolicy resource(s) in this cluster. Pod Security Policies are not available in Kubernetes v1.25 and will be automatically removed.
     haveArgInfo: Configuration information is not available for the selected Kubernetes version.  The options available in this screen will be limited, you may want to use the YAML editor.
     deprecatedPsp: Pod Security Policies are deprecated as of Kubernetes v1.21, and have been removed in Kubernetes v1.25.
-    removedPsp: Pod Security Policies have been removed in Kubernetes v1.25, use PodSecurity Admission instead.
-
+    removedPsp: Pod Security Policies have been removed in Kubernetes v1.25, use Pod Security Admission instead.
   rkeTemplateUpgrade: Template revision {name} available for upgrade
 
   availabilityWarnings:
@@ -1760,6 +1774,14 @@ cluster:
     create-template: Use a Catalog Template to create a cluster
     register-custom: Import any Kubernetes cluster
   rke2:
+    banner:
+      psaChange: PSACT is now set to Rancher default automatically
+      cisOverride: Changing this setting may affect cluster security as it overrides default CIS settings
+      cisUnsupported: The selected Kubernetes Version no longer supports CIS Profile "{cisProfile}". Please select a supported profile. We recommend reviewing the <a href="https://docs.rke2.io/security/hardening_guide" target="_blank" rel="noopener noreferrer nofollow">documentation</a> to evaluate the impact of changing the CIS Profile.
+    modal:
+      pspChange:
+        title: Pod Security Policy deprecation
+        body: Kubernetes has removed support for Pod Security Policies (PSPs) starting with version 1.25. If your cluster has PodSecurityPolicy admission controller enabled via "kube-apiserver-arg.enable-admission-plugins" in Cluster YAML, it has to be <i>manually</i> removed before proceeding with the upgrade. Additionally, any PSPs that may be present in the cluster will no longer be available/enforced. Do you want to proceed?
     snapshots:
       suffix: Snapshots per node
     systemService:
@@ -1777,12 +1799,18 @@ cluster:
         label: Default - RKE2 Embedded
     security:
       header: Security
+    cis:
+      server: Server CIS Profile
+      agent: CIS Profile
+      override: Allow the default Pod Security Admission Configuration Template to be overridden when using a CIS Profile
     defaultPodSecurityPolicyTemplateName:
       label: Default Pod Security Policy
-      option: RKE Default
+      option: Default - RKE2 Embedded
     defaultPodSecurityAdmissionConfigurationTemplateName:
-      label: Default Pod Security Admission
-      option: (None)
+      label: Pod Security Admission Configuration Template
+      option: 
+        none: (None)
+        default: Default - RKE2 Embedded
     cisProfile:
       option: (None)
     enableNetworkPolicy:
@@ -2077,6 +2105,7 @@ fleet:
       placeholder: e.g. https://github.com/rancher/fleet-examples.git or git@github.com:rancher/fleet-examples.git
       addRepo: Add Repository
       noRepos: No repositories have been added
+      noWorkspaces: There are no workspaces. <br/> Please create a workspace before adding repositories
       protocolBanner: Enter a valid HTTPS or SSH URL to a git repository.
     add:
       steps:
@@ -2128,6 +2157,7 @@ fleet:
       cluster: There are no clusters available
     workspace:
       label: Workspace
+      addWorkspace: Create a workspace
   clusterGroup:
     selector:
       label: Cluster Selectors
@@ -2148,7 +2178,17 @@ fleet:
     error: Error
     ready: Ready
     errors: Errors
-
+  workspaces: 
+    tabs:
+      restrictions: Allowed Target Namespaces
+    timeout: Workspace creation timeout. It's possible the workspace was created. We suggest checking the workspace page before trying to create another.
+  restrictions: 
+    addTitle: 'allowedTargetNamespaces'
+    addLabel: Add
+    banner: "{count, plural,
+          =0 { Adding namespaces here will create a GitRepoRestriction. }
+          other { Only the Git Repo Restriction's <code>allowedTargetNamespaces</code> is managed here. You can make additional changes to the Git Repo Restriction} 
+        }"
 footer:
   docs: Docs
   download: Download CLI
@@ -2184,14 +2224,22 @@ gatekeeperConstraint:
       editAsYaml: Edit as YAML
       title: Parameters
   template: Template
+  enforcement:
+    action: Enforcement Action
   violations:
-    title: Violations
+    title: "Violations: {total}"
+    notAll: Not all are shown - the constraint only includes details for {shown}
 
 gatekeeperIndex:
   poweredBy: OPA Gatekeeper
   unavailable: OPA + Gatekeeper is not available in the system-charts catalog.
   violations: Violations
 
+gatekeeperInstall: 
+  auditInterval: Auto Interval
+  constraintViolationsLimit: Constraint Violations Limit
+  runtimeDefaultSeccompProfile: Enable Runtime Default Seccomp Profile
+
 glance:
   created: Created
   cpu: CPU Usage
@@ -2402,7 +2450,7 @@ istio:
       label: Jaeger
       description: Monitor and Troubleshoot microservices-based distributed systems.
     disabled: '{app} is not installed'
-  cni: Enabled CNI
+  cni: Enable CNI
   customOverlayFile:
     label: Custom Overlay File
     tip: 'The <a target="_blank" rel="noopener noreferrer nofollow" href="https://istio.io/latest/docs/setup/additional-setup/customize-installation/#patching-the-output-manifest">overlay file</a> allows for additional configuration on top of the base {vendor} Istio installation. You can utilize the <a href="https://istio.io/latest/docs/reference/config/istio.operator.v1alpha1/" target="_blank" rel="noopener noreferrer nofollow" >IstioOperator API</a> to make changes and additions for all components and apply those changes via this overlay YAML file.'
@@ -2553,20 +2601,20 @@ istio:
         label: Subject Alternative Names
         placeholder: e.g. example.com
         add: Add Subject Alternative Name
-  egressGateway: Enabled Egress Gateway
-  ingressGateway: Enabled Ingress Gateway
-  istiodRemote: Enabled istiodRemote
-  kiali: Enabled Kiali
-  pilot: Enabled Pilot
-  policy: Enabled Policy
+  egressGateway: Enable Egress Gateway
+  ingressGateway: Enable Ingress Gateway
+  istiodRemote: Enable istiodRemote
+  kiali: Enable Kiali
+  pilot: Enable Pilot
+  policy: Enable Policy
   poweredBy: Powered by <a target="_blank" rel="noopener noreferrer nofollow" href='https://istio.io/latest/'>Istio</a>
-  telemetry: Enabled Telemetry
+  telemetry: Enable Telemetry
   titles:
     components: Components
     customAnswers: Custom Answers
     advanced: Advanced Settings
     description: Description
-  tracing: Enabled Jaeger Tracing (limited)
+  tracing: Enable Jaeger Tracing (limited)
   v1Warning: Please uninstall the current Istio version in the <code>istio-system</code> namespace before attempting to install this version.
 
 labels:
@@ -3394,6 +3442,8 @@ networkpolicy:
   labelsAnnotations:
     label: Labels & Annotations
   rules:
+    pod: Pod
+    namespace: Namespace
     ruleLabel: Rule {index}
     addPort: Add allowed port
     type: Rule type
@@ -3420,6 +3470,8 @@ networkpolicy:
       label: Pod Selector
     namespaceSelector:
       label: Namespace Selector
+    namespaceAndPodSelector:
+      label: Namespace/Pod Selector
   config:
     label: Configuration
   selectors:
@@ -3439,6 +3491,18 @@ networkpolicy:
           =1 {Matches 1 of {total, number} namespaces: "{sample}"}
           other {Matches {matched, number} of {total, number} existing namespaces, including "{sample}"}
         }
+    matchingNamespacesAndPods:
+      tooltip: A single entry rule that specifies both Namespace Selector and Pod Selector that selects particular Pods within particular namespaces
+      matchesSome: |-
+        {matchedPods, plural,
+          =0 {Matches 0 of {totalPods, number} pods}
+          =1 {Matches 1 of {totalPods, number} pods: "{samplePods}"}
+          other {Matches {matchedPods, number} of {totalPods, number} existing pods, including "{samplePods}"}
+        } in {matchedNamespaces, plural,
+          =0 {0 of {totalNamespaces, number} namespaces}
+          =1 {1 of {totalNamespaces, number} namespaces: "{sampleNamespaces}"}
+          other {{matchedNamespaces, number} of {totalNamespaces, number} existing namespaces, including "{sampleNamespaces}"}
+        }
 node:
   list:
     pool: Pool
@@ -3449,6 +3513,9 @@ node:
     poolDescription:
       noSize: No Size
       noLocation: No Location
+    nodeLabels: Labels
+    hideLabels: Show less
+    showLabels: Show more
   detail:
     detailTop:
       containerRuntime: Container Runtime
@@ -3857,6 +3924,7 @@ podDisruptionBudget:
 
 # Rancher Extensions
 plugins:
+  incompatibleDisclaimer: "The latest version of this extension ({ version }) is not compatible with the current Rancher version ({ rancherVersion })."
   labels:
     builtin: Built-in
     experimental: Experimental
@@ -3890,6 +3958,7 @@ plugins:
     detail: Detail
     versions: Versions
     versionError: Could not load version information
+    requiresVersion: "Requires Rancher {version}"
   empty:
     all: Extensions are neither installed nor available
     available: No Extensions available
@@ -3952,7 +4021,7 @@ podSecurityAdmission:
   name: Pod Security Admission
   description: Define the admission control mode you want to use for the pod security
   banner: 
-    modifications: 'Note: Modifying a Pod Security Admission Configuration Template will not affect any downstream cluster that references it until there is a cluster update'
+    modifications: 'Changing any template that is currently in use will cause an update to those live clusters the next time the cluster is updated'
   labels:
     enforce: Enforce
     audit: Audit
@@ -4119,6 +4188,7 @@ projectNamespaces:
   label: Projects/Namespaces
   noNamespaces: There are no namespaces defined.
   noProjectNoNamespaces: All namespaces are in a project
+  isIstioInjectionEnabled: Istio automatic sidecar injection is enabled for this namespace
 
 prometheusRule:
   alertingRules:
@@ -7105,7 +7175,7 @@ legacy:
   globalDnsProviders: Global DNS Providers
   notifiers: Notifiers
   monitoring: Monitoring
-  psps: Pod Security Policies
+  psps: Pod Security Policy Templates
   secrets: Secrets
 
   project:

package/assets/translations/zh-hans.yaml

@@ -810,7 +810,7 @@ catalog:
       chartVersions:
         label: Chart 版本
         showMore: 显示更多
-        showLess: 显示较少
+        showLess: 显示更少
       home: 首页
       maintainers: 维护者
       related: 相关
@@ -818,6 +818,10 @@ catalog:
       keywords: 关键词
     errors:
       clusterToolExists: 此 Chart 含有固定的命名空间和名称。找到一个匹配的 <a href="{url}">应用</a>，任何修改都将应用于此应用。
+    banner:
+      legacy: 'PSP 删除：在将集群升级到 Kubernetes 1.25+ 之前，请确保你针对 PSP 检查了 Helm 应用程序并相应进行更新'
+    enablePSP: 启用 Pod 安全策略
+    global: 全局
   charts:
     all: 全部
     categories:
@@ -1073,7 +1077,6 @@ cis:
   testID: 测试 ID
   testsSkipped: 已跳过的测试
   testsToSkip: 要跳过的测试
-  workerProfile: CIS 配置文件
 
 cluster:
   addonChart:
@@ -1268,6 +1271,7 @@ cluster:
       affinity:
         namespaces:
           placeholder: 例如：default,system,base
+      installGuestAgent: 安装访客代理
   description:
     label: 集群描述
     placeholder: 输入可以描述该集群的文本
@@ -1350,6 +1354,10 @@ cluster:
       availabilityZone:
         label: 可用区
         description: 可用区用于让应用程序免受 Azure 数据中心全面故障的影响。
+        publicIpAndSKUWarning: 可用区要求启用\"静态公共 IP\" 和\"为公共 IP 使用标准 SKU\"。
+        publicIpWarning: 可用区要求启用\"静态公共 IP\"。
+        standardSKUWarning: 可用区要求启用\"为公共 IP 使用标准 SKU\"。
+        managedDisksWarning: 可用区要求启用\"托管磁盘\"。
       dns:
         help: 公共 IP 地址的唯一 DNS 标签。
         label: DNS 标签
@@ -1385,8 +1393,15 @@ cluster:
           label: 没有公共 IP
         staticPublicIp:
           label: 静态公共 IP
+        standardSKU:
+          label: 为公共 IP 使用标准 SKU
       resourceGroup:
         label: 资源组
+      sections:
+        availabilitySetConfiguration: 可用性集配置
+        purchasePlan: 购买计划
+        network: 网络
+        disks: 磁盘
       size:
         label: 虚拟机大小
         tooltip: 启用加速网络后，并非所有大小都可用。
@@ -1613,11 +1628,10 @@ cluster:
     os: '你正在将 {newOS} worker 节点添加到具有一个或多个 {existingOS} worker 节点的集群。你可能需要升级或删除某些已安装的应用。'
     rke2-k3-reprovisioning: '更改集群配置可能导致节点重新配置。详情请参见 <a target="blank" href="{docsBase}/cluster-provisioning/rke-clusters/behavior-differences-between-rke1-and-rke2/" target="_blank" rel="noopener nofollow">文档</a>。'
     desiredNodeGroupWarning: 没有可用于运行 Cluster Agent 的节点。要让集群变为 Active 状态，至少需要有 1 个可用的节点。
-    invalidPsps: 你在此集群中有一个或多个 PSP 资源。Pod 安全策略将在 Kubernetes v1.25 中不可用。
+    invalidPsps: 你在此集群中有一个或多个 PSP 资源。Pod 安全策略在 Kubernetes v1.25 中不可用并将自动删除。
     haveArgInfo: 所选 Kubernetes 版本的配置信息不可用。此屏幕中可用的选项将受到限制，你可能需要使用 YAML 编辑器。
     deprecatedPsp: Pod 安全策略自 Kubernetes v1.21 起已弃用，并已在 Kubernetes v1.25 中删除。
     removedPsp: Pod 安全策略已在 Kubernetes v1.25 中删除，请改用 PodSecurity Admission。
-
   rkeTemplateUpgrade: 模板修订版 {name} 可用于升级
 
   availabilityWarnings:
@@ -1766,6 +1780,14 @@ cluster:
     create-template: 使用 Catalog 模板创建集群
     register-custom: 导入任意 Kubernetes 集群
   rke2:
+    banner:
+      psaChange: PSACT 现在自动设置为 Rancher 默认值
+      cisOverride: 更改此设置可能会影响集群安全，因为它会覆盖默认的 CIS 设置
+      cisUnsupported: 所选 Kubernetes 版本不再支持 CIS 配置文件 “{cisProfile}”，请选择支持的配置文件。建议你查看<a href="https://docs.rke2.io/security/hardening_guide" target="_blank" rel="noopener noreferrer nofollow">文档</a>评估更改 CIS 配置文件的影响。
+    modal:
+      pspChange:
+        title: 弃用 Pod 安全策略
+        body: 从 v1.25 版开始，Kubernetes 已经取消了对 Pod 安全策略 (PSP) 的支持。如果你的集群通过集群 YAML 中的 “kube-apiserver-arg.enable-admission-plugins” 启用了 PodSecurityPolicy 准入控制器，你必须在继续升级之前<i>手动</i>删除它。此外，集群中存在的任何 PSP 将不再可用或强制执行。是否继续操作？
     snapshots:
       suffix: 每个节点的快照
     systemService:
@@ -1783,12 +1805,18 @@ cluster:
         label: 默认 - 嵌入 RKE2
     security:
       header: 安全
+    cis:
+      server: Server CIS 配置文件
+      agent: CIS 配置文件
+      override: 当使用 CIS 配置文件时，允许覆盖默认 PSA 配置模板
     defaultPodSecurityPolicyTemplateName:
       label: 默认 Pod 安全策略
-      option: RKE 默认
+      option: 默认 - 嵌入 RKE2
     defaultPodSecurityAdmissionConfigurationTemplateName:
-      label: 默认 Pod 安全准入
-      option: (None)
+      label: PSA 配置模板
+      option: 
+        none: (None)
+        default: 默认 - 嵌入 RKE2
     cisProfile:
       option: (None)
     enableNetworkPolicy:
@@ -2080,9 +2108,11 @@ fleet:
       empty: 默认使用仓库的根目录。要使用一个或多个不同的目录，请在这里添加。
     repo:
       label: 仓库 URL
-      placeholder: '例如：https://github.com/rancher/fleet-examples.git'
+      placeholder: 例如 https://github.com/rancher/fleet-examples.git 或 git@github.com:rancher/fleet-examples.git
       addRepo: 添加仓库
       noRepos: 未添加任何仓库
+      noWorkspaces: 没有工作空间。<br/>请在添加仓库之前创建一个工作空间
+      protocolBanner: 输入指向 git 仓库的有效 HTTPS 或 SSH URL。
     add:
       steps:
         repoInfo:
@@ -2133,6 +2163,7 @@ fleet:
       cluster: 没有可用的集群
     workspace:
       label: 工作空间
+      addWorkspace: 创建工作空间
   clusterGroup:
     selector:
       label: 集群选择器
@@ -2153,7 +2184,14 @@ fleet:
     error: 错误
     ready: 就绪
     errors: 错误
-
+  workspaces: 
+    tabs:
+      restrictions: 允许的目标命名空间
+    timeout: 工作空间创建超时。工作空间可能已创建，建议在创建另一个工作空间之前检查工作空间页面。
+  restrictions: 
+    addTitle: 'allowedTargetNamespaces'
+    addLabel: 添加
+    banner: "{count, plural, =0 { 在这里设置 allowedTargetNamespaces 会创建一个 GitRepoRestriction。} other { 只有 GitRepoRestriction.allowedTargetNamespaces 在此处管理，你可以进行其他更改。} }"
 footer:
   docs: Rancher 官方文档
   download: 下载 CLI
@@ -2192,14 +2230,22 @@ gatekeeperConstraint:
       editAsYaml: 以 YAML 文件编辑
       title: 参数
   template: 模板
+  enforcement:
+    action: 执行动作
   violations:
-    title: 违反规定
+    title: "违反规定：{total}"
+    notAll: 没有显示全部 - 仅包含 {shown} 的详细信息
 
 gatekeeperIndex:
   poweredBy: OPA Gatekeeper
   unavailable: OPA Gatekeeper 不在 system-charts 应用商店中.
   violations: 违反规定
 
+gatekeeperInstall: 
+  auditInterval: 自动间隔
+  constraintViolationsLimit: 约束违规限制
+  runtimeDefaultSeccompProfile: 启用运行时默认 Seccomp 配置文件
+
 glance:
   created: 创建时间
   cpu: CPU 使用量
@@ -2994,6 +3040,8 @@ monitoring:
       new: 创建默认配置
       radio:
         label: 配置密文
+    validation:
+      duplicatedReceiverName: 名称为 {name} 的接收器已存在。
     templates:
       keyLabel: 文件名称
       label: 模板文件
@@ -3400,6 +3448,8 @@ networkpolicy:
   labelsAnnotations:
     label: 标签 & 注释
   rules:
+    pod: Pod
+    namespace: 命名空间
     ruleLabel: 规则 {index}
     addPort: 添加允许的端口
     type: 规则类型
@@ -3426,6 +3476,8 @@ networkpolicy:
       label: Pod 选择器
     namespaceSelector:
       label: 命名空间选择器
+    namespaceAndPodSelector:
+      label: 命名空间/Pod 选择器
   config:
     label: 配置
   selectors:
@@ -3442,9 +3494,21 @@ networkpolicy:
       matchesSome: |-
         {matched, plural,
           =0 {匹配 {total, number} 个命名空间中的 0 个}
-          =1 {匹配 {total, number} 个 命名空间中的 1 个："{sample}"}
+          =1 {匹配 {total, number} 个命名空间中的 1 个："{sample}"}
           other {匹配 {total, number} 个命名空间中的 {matched, number} 个，包括 "{sample}"}
         }
+    matchingNamespacesAndPods:
+      tooltip: 指定命名空间选择器和 Pod 选择器的单条规则，用于选择特定命名空间中的特定 Pod
+      matchesSome: |-
+        {matchedNamespaces, plural,
+          =0 { 在 0 个命名空间中（总共 {totalNamespaces, number} 个）}
+          =1 { 在 1 个命名空间（总共 {totalNamespaces, number} 个）"{sampleNamespaces}" 中}
+          other { 在 {matchedNamespaces, number} 个命名空间中（总共 {totalNamespaces, number} 个），包括 "{sampleNamespaces}"}
+        }，{matchedPods, plural,
+          =0 {匹配 {totalPods, number} 个 Pod 中的 0 个 }
+          =1 {匹配 {totalPods, number} 个 Pod 中的 1 个："{samplePods}"}
+          other {匹配 {totalPods, number} 个 Pod 中的 {matchedPods, number} 个，包括 "{samplePods}"}
+        }
 node:
   list:
     pool: 池
@@ -3455,6 +3519,9 @@ node:
     poolDescription:
       noSize: 没有大小
       noLocation: 没有位置
+    nodeLabels: 标签
+    hideLabels: 显示更少
+    showLabels: 显示更多
   detail:
     detailTop:
       containerRuntime: 容器运行时
@@ -3863,6 +3930,7 @@ podDisruptionBudget:
 
 # Rancher Extensions
 plugins:
+  incompatibleDisclaimer: "此扩展的最新版本 ({ version }) 与当前的 Rancher 版本 ({ rancherVersion }) 不兼容。"
   labels:
     builtin: 内置角色
     experimental: 实验功能
@@ -3896,6 +3964,7 @@ plugins:
     detail: 详情
     versions: 版本
     versionError: 无法加载版本信息
+    requiresVersion: "需要 Rancher {version}"
   empty:
     all: 扩展未安装或不可用
     available: 没有可用的扩展
@@ -3958,7 +4027,7 @@ podSecurityAdmission:
   name: Pod 安全准入
   description: 定义要用于 Pod 安全的准入控制模式
   banner: 
-    modifications: '注意：在集群更新之前，修改 Pod 安全准入配置模板不会影响任何引用它的下游集群'
+    modifications: '如果你更改正在使用的模板，在下次更新集群时会更新这些活动集群'
   labels:
     enforce: 执行
     audit: 审计
@@ -4716,8 +4785,8 @@ servicesPage:
       matchesSome: |-
         {matched, plural,
           =0 {与 {total, number} 个 Pod 中的 0 个匹配。如果没有创建选择器，则必须进行手动端点。}
-          =1 {与{total, number}个 Pod 中的1个匹配："{sample}"}
-          other {与 {total, number} 个 Pod 中的 {matched, number} 个匹配，包括"{sample}"}
+          =1 {与 {total, number} 个 Pod 中的 1 个匹配："{sample}"}
+          other {与 {total, number} 个 Pod 中的 {matched, number} 个匹配，包括 "{sample}"}
         }
   serviceTypes:
     clusterIp:
@@ -7121,7 +7190,7 @@ legacy:
   globalDnsProviders: 全局 DNS 提供商
   notifiers: Notifiers
   monitoring: 监控
-  psps: Pod 安全策略
+  psps: Pod 安全策略模板
   secrets: 密文
 
   project:

package/babel.config.js

@@ -0,0 +1,13 @@
+module.exports = {
+  presets: [
+    [
+      '@vue/cli-plugin-babel/preset',
+      { useBuiltIns: false }
+    ],
+    [
+      '@babel/preset-env',
+      { targets: { node: 'current' } }
+    ]
+  ],
+  env: { test: { presets: [['@babel/env', { targets: { node: 'current' } }]] } }
+};