@rancher/shell 0.3.8 → 0.3.10

package/assets/translations/en-us.yaml

@@ -1611,6 +1611,27 @@ cluster:
     additionalManifest:
       title: Additional Manifest
       tooltip: 'Additional Kubernetes Manifest YAML to be applied to the cluster on startup.'
+  agentConfig:
+    tabs:
+      cluster: Cluster Agent
+      fleet: Fleet Agent
+    groups:
+      deploymentLabels: Deployment Labels
+      selector: Selector
+      podAffinity: Affinity
+      podTolerations: Tolerations
+      podRequestsAndLimits: Requests and Limits
+    subGroups:
+      podAffinityAnti: Pod Affinity/Anti-Affinity
+      nodeAffinity: Node Affinity
+    banners:
+      advanced: These are advanced configuration options. Generally, they should be left as-is.
+      tolerations: Additional Pod Tolerations will be added to the default Tolerations applied by Rancher.
+      limits: Pod Requests and Limits do not have a default configuration.
+      windowsCompatibility: "We do not recommended removing the Node Affinity rule that prevents the <b>agent</b> from running on Windows nodes as this is not a supported configuration."
+    affinity:
+      default: Use default affinity rules defined by Rancher
+      custom: Use custom affinity rules
   advanced:
     argInfo:
       title: Additional Kubelet Args
@@ -2762,6 +2783,10 @@ logging:
     clientKeyPass: Client Key Pass from Secret
     verifySsl: Verify SSL
     sslVersion: SSL Version
+    suppressTypeName:
+      label: Suppress Type Names
+      elasticSearchTips: Suppress type names by default to be compatible with log server. You should enable it for Elasticsearch >= 8.0.0
+      openSearchTips: Suppress type names by default to be compatible with log server. You should enable it for OpenSearch >= 2.0.0
   redis:
     host: Host
     port: Port
@@ -3004,7 +3029,7 @@ members:
   clusterAndProject: Cluster and Project Members
   createActionLabel: Add
   clusterMemebership: Cluster Membership
-  projectMembership: Project Memebership
+  projectMembership: Project Membership
   clusterPermissions:
     noDescription: User created - no description
     label: Cluster Permissions
@@ -4566,8 +4591,8 @@ resourceList:
     create: Create
     createFromYaml: Create from YAML
     createResource: "Create {resourceName}"
-  nsFiltering: "There are too many {resource}.<br>Please filter them by selecting a Namespace above."
-  nsFilterToolTip: "There are too many resources, filtering is restricted to a single {mode}."
+  nsFiltering: "Please select one or more namespaces or projects using the filter above."
+  nsFilterToolTip: "Filtering is restricted to projects and namespaces"
 resourceLoadingIndicator:
   loading: Loading
 
@@ -4778,20 +4803,7 @@ servicesPage:
     title: Add-on Config
     ipam:
       label: IPAM
-    healthCheckPort:
-      label: Health Check Port
-    healthCheckSuccessThreshold:
-      label: Health Check Success Threshold
-      description: If the number of times the prober continuously detects an address successfully reaches the success threshold, then the backend server can start to forward traffic.
-    healthCheckFailureThreshold:
-      label: Health Check Failure Threshold
-      description: The backend server will stop forwarding traffic if the number of health check failures reaches the failure threshold.
-    healthCheckPeriod:
-      label: Health Check Period
-    healthCheckTimeout:
-      label: Health Check Timeout
-    healthCheckEnabled:
-      label: Health Check
+
   ips:
     define: Service Ports
     clusterIpHelpText: The Cluster IP address must be within the CIDR range configured for the API server.
@@ -5944,15 +5956,19 @@ workload:
       antiAffinityTitle: Run pods on nodes without pods matching these selectors
       affinityOption: Affinity
       antiAffinityOption: Anti-Affinity
+      matchFields:
+        label: Fields
       matchExpressions:
+        label: Expressions
         addRule: Add Rule
         doesNotExist: is not set
         exists: is set
         greaterThan: ">"
         in: in list
-        inNamespaces: "Pods in these namespaces:"
+        inNamespaces: "Specific namespaces"
         key: Key
         lessThan: <
+        matchType: Match Type
         namespaces: Namespaces
         notIn: not in list
         operator: Operator
@@ -5968,6 +5984,7 @@ workload:
       schedulingRules: Run pods on node(s) matching scheduling rules
       specificNode: Run pods on specific node(s)
       thisPodNamespace: This pod's namespace
+      allNamespaces: All namespaces
       topologyKey:
         label: Topology Key
         placeholder: e.g. failure-domain.beta.kubernetes.io/zone
@@ -5995,9 +6012,9 @@ workload:
       effectOptions:
         all: All
         noExecute: NoExecute
-        noSchedule: "NoSchedule,"
+        noSchedule: "NoSchedule"
         preferNoSchedule: PreferNoSchedule
-      labelKey: Label Key
+      labelKey: Key
       operator: Operator
       operatorOptions:
         equal: =
@@ -6964,6 +6981,7 @@ performance:
       When enabled, resources will appear more quickly, but it may take slightly longer to load the entire set of resources. This setting only applies to resources that come from the Kubernetes API
     checkboxLabel: Enable incremental loading
     inputLabel: Resource Threshold
+    incompatibleDescription: "Incremental Loading is incomaptible with Namespace/Project filtering. Enabling this will disable it."
   manualRefresh:
     label: Manual Refresh
     setting: You can configure a threshold above which manual refresh will be enabled.
@@ -6972,6 +6990,7 @@ performance:
       When enabled, list data will not auto-update but instead the user must manually trigger a list-view refresh. This setting only applies to resources that come from the Kubernetes API
     checkboxLabel: Enable manual refresh of data for lists
     inputLabel: Resource Threshold
+    incompatibleDescription: "Manual Refresh is incomaptible with Namespace/Project filtering. Enabling this will disable it."
   websocketNotification:
     label: Websocket Notifications
     description: |-
@@ -6999,12 +7018,10 @@ performance:
         description: Resource types must exceed this amount to be considered for garbage collection.
         inputLabel: Resource Count
   nsFiltering:
-    label: Require Namespace Filtering
-    description: When there are too many resources to show in a list, require the user to select a single namespace and only fetch resources from within it.
-    checkboxLabel: Enable Required Namespace Filtering
-    count:
-      inputLabel: Resource Threshold
-      description: The threshold above which filtering by a namespace is required
+    label: Require Namespace / Project Filtering
+    description: Require the user to select namespaces and/or projects. This restricts the number of resources fetched when viewing lists and should help the responsiveness of the UI in systems with a lot of resources.
+    checkboxLabel: Enable Required Namespace / Project Filtering
+    incompatibleDescription: "Required Namespace / Project Filtering is incomaptible with Manual Refresh and Incremental Loading. Enabling this will disable them."
   advancedWorker:
     label: Websocket Web Worker
     description: Updates to resources pushed to the UI come via WebSocket and are handled in the UI thread. Enable this option to handle cluster WebSocket updates in a Web Worker in a separate thread. This should help the responsiveness of the UI in systems where resources change often.
@@ -7255,3 +7272,7 @@ auth:
 vncConsole:
   error:
     message: Web VNC console connection is disconnected
+
+networkAttachmentDefinition:
+  tabs:
+    config: Config

package/assets/translations/zh-hans.yaml

@@ -456,7 +456,13 @@ authConfig:
     objectClass: 对象类
     password: 密码
     port: 端口
+    protocol: 协议
+    protocols:
+      starttls: 启用 TLS
+      ldap: LDAP
+      tls: LDAPS (TLS)
     customizeSchema: 自定义模式
+    oktaSchema: '以下默认值适用于通用 OpenLDAP Server。有关使用 Okta LDAP 接口时要使用的值，请参阅 <a target="_blank" rel="noopener noreferrer nofollow" href="https://help.okta.com/en-us/Content/Topics/Directory/LDAP-interface-connection-settings.htm">Okta LDAP 接口连接设置</a>'
     users: 用户
     groups: 组
     searchAttribute: 搜索属性
@@ -466,7 +472,7 @@ authConfig:
     serviceAccountPassword: Service Account 密码
     serviceAccountInfo: '{vendor} 需要一个对所有能够登录的域名都有只读访问权的 Service Account，以在用户使用 API 密钥进行请求时，确定用户属于什么组。'
     starttls:
-      label: 启动 TLS
+      label: 启用 TLS
       tip: 通过在连接过程中使用 TLS 封装来升级非加密连接。不能与 TLS 结合使用。
     tls: TLS
     userEnabledAttribute: 用户启用属性
@@ -501,6 +507,13 @@ authConfig:
     shibboleth: 配置 Shibboleth 账号
     showLdap: 配置 OpenLDAP server
     userName: 用户名字段
+    search:
+      title: 用户和组搜索
+      message: SAML 协议不支持搜索或查找用户或组。要启用搜索，你必须配置 OpenLDAP Server。
+      on: 已配置 LDAP 用户和组搜索
+      off: 未配置 LDAP 用户和组搜索
+      show: 显示详情
+      hide: 隐藏详情
   azuread:
     tenantId: 租户 ID
     applicationId: 应用 ID
@@ -1244,7 +1257,7 @@ cluster:
       memory: 内存
       disk: 磁盘
       image: 镜像
-      network: 
+      network:
         title: 网络
         network: 网络
         addNetwork: 添加网络
@@ -1606,6 +1619,27 @@ cluster:
     additionalManifest:
       title: 其它清单文件
       tooltip: '集群启动时要应用的其它 Kubernetes 清单 YAML'
+  agentConfig:
+    tabs:
+      cluster: Cluster Agent
+      fleet: Fleet Agent
+    groups:
+      deploymentLabels: 部署标签
+      selector: 选择器
+      podAffinity: 亲和性
+      podTolerations: 容忍度
+      podRequestsAndLimits: 请求和限制
+    subGroups:
+      podAffinityAnti: Pod 亲和性/反亲和性
+      nodeAffinity: 节点亲和性
+    banners:
+      advanced: 以下是高级配置，通常不修改。
+      tolerations: 其他 Pod 容忍度将添加到 Rancher 应用的默认容忍度中。
+      limits: Pod 请求和限制没有默认配置。
+      windowsCompatibility: "不建议删除用于阻止 <b>Agent</b> 在 Windows 节点上运行的节点亲和性规则，因为这不是受支持的配置。"
+    affinity:
+      default: 使用 Rancher 定义的默认亲和性规则
+      custom: 使用自定义亲和性规则
   advanced:
     argInfo:
       title: 补充 Kubelet 参数
@@ -1822,7 +1856,7 @@ cluster:
       option: 默认 - 嵌入 RKE2
     defaultPodSecurityAdmissionConfigurationTemplateName:
       label: PSA 配置模板
-      option: 
+      option:
         none: (None)
         default: 默认 - 嵌入 RKE2
     cisProfile:
@@ -2197,11 +2231,11 @@ fleet:
     error: 错误
     ready: 就绪
     errors: 错误
-  workspaces: 
+  workspaces:
     tabs:
       restrictions: 允许的目标命名空间
     timeout: 工作空间创建超时。工作空间可能已创建，建议在创建另一个工作空间之前检查工作空间页面。
-  restrictions: 
+  restrictions:
     addTitle: 'allowedTargetNamespaces'
     addLabel: 添加
     banner: "{count, plural, =0 { 在这里添加命名空间会创建一个 GitRepoRestriction。} other { 只有 Git Repo Restriction 的 <code>allowedTargetNamespaces</code> 在此处管理，你可以对 Git Repo Restriction 进行其他更改。} }"
@@ -2216,6 +2250,7 @@ footer:
     modalText: 扫码关注 Rancher 中国微信技术群
 
 gatekeeperConstraint:
+  downloadViolations: 下载违规
   match:
     title: 匹配
   tab:
@@ -2247,14 +2282,14 @@ gatekeeperConstraint:
     action: 执行动作
   violations:
     title: "违反规定：{total}"
-    notAll: 没有显示全部 - 仅包含 {shown} 的详细信息
+    notAll: 由于配置的 OPA Gatekeeper 约束违规限制，未显示全部内容 - 该约束仅包含 {shown} 的详细信息。
 
 gatekeeperIndex:
   poweredBy: OPA Gatekeeper
   unavailable: OPA Gatekeeper 不在 system-charts 应用商店中.
   violations: 违反规定
 
-gatekeeperInstall: 
+gatekeeperInstall:
   auditInterval: 自动间隔
   constraintViolationsLimit: 约束违规限制
   runtimeDefaultSeccompProfile: 启用运行时默认 Seccomp 配置文件
@@ -2756,6 +2791,10 @@ logging:
     clientKeyPass: 传自密文的客户端密钥
     verifySsl: 验证 SSL
     sslVersion: SSL 版本
+    suppressTypeName:
+      label: 抑制类型名称
+      elasticSearchTips: 默认抑制类型名称，用于兼容日志服务器。如果你的 Elasticsearch >= 8.0.0，则需要启用。
+      openSearchTips: 默认抑制类型名称，用于兼容日志服务器。如果你的 OpenSearch >= 2.0.0，则需要启用。
   redis:
     host: 主机
     port: 端口
@@ -2795,6 +2834,7 @@ logging:
     sslClientCertKey: SSL 客户端证书密钥
   loki:
     url: URL
+    urlInvalid: URL 格式不正确。请在保存前检查并更正 URL 格式。
     tenant: 租户
     username: 用户名
     password: 密码
@@ -3945,6 +3985,15 @@ podDisruptionBudget:
   maxUnavailable:
     label: 最大不可用 Pod
 
+inactivity:
+  title: 会话即将过期
+  titleExpired: 会话已过期
+  banner: 由于不活动，你的会话即将过期。任何未保存的更改都将丢失。
+  bannerExpired: 由于不活动，此选项卡中的会话已过期。
+  content: 单击“恢复会话”来让选项卡中的会话保持活动状态，或在会话过期后刷新浏览器。
+  contentExpired: 要返回此页面，请单击下面的“刷新”或刷新浏览器。
+  cta: 恢复会话
+  ctaExpired: 刷新
 
 # Rancher Extensions
 plugins:
@@ -4044,7 +4093,7 @@ plugins:
 podSecurityAdmission:
   name: Pod 安全准入
   description: 定义要用于 Pod 安全的准入控制模式
-  banner: 
+  banner:
     modifications: '如果你更改正在使用的模板，在下次更新集群时会更新这些活动集群'
   labels:
     enforce: 执行
@@ -4058,7 +4107,7 @@ podSecurityAdmission:
     restricted: restricted
   version:
     placeholder: '版本（默认：latest）'
-  exemptions: 
+  exemptions:
     title: 豁免
     description: 允许为特定的用户名、RuntimeClassName 和命名空间创建 Pod，否则它们会被上方设置的策略禁止。
     placeholder: 输入以逗号分隔的 {psaExemptionsControl} 列表
@@ -5179,7 +5228,7 @@ storageClass:
     warning: '{provisioner} 树内插件已弃用。你可以在<a target="_blank" rel="noopener noreferrer nofollow" href="https://kubernetes-csi.github.io/docs/drivers.html">这里</a>查找 CSI 驱动。'
   harvesterhci:
     title: Harvester (CSI)
-    warning: 
+    warning:
       unSatisfiesVersion: 请升级 Harvester CSI 驱动版本来使用此功能(csi-driver >= v0.1.15)
     hostStorageClass:
       label: 主机存储类
@@ -5221,6 +5270,7 @@ tableHeaders:
   clusterGroups: 集群组
   commit: Commit
   condition: 状态
+  constraint: 约束
   completions: 完成 Job 历史数
   count: 数量
   createdAt: 创建于 
@@ -5386,6 +5436,7 @@ tableHeaders:
   target: 目标
   targetKind: 目标类型
   targetPort: 目标
+  template: 模板
   type: 类型
   updated: 更新时间
   up-to-date: 最新
@@ -5926,15 +5977,19 @@ workload:
       antiAffinityTitle: 在不与选择器匹配的节点上运行 Pod
       affinityOption: 亲和性
       antiAffinityOption: 反亲和性
+      matchFields:
+        label: 字段
       matchExpressions:
+        label: 表达式
         addRule: 添加规则
         doesNotExist: 未设置
         exists: 已设置
         greaterThan: ">"
         in: 在列表中
-        inNamespaces: "这些命名空间中的 Pod："
+        inNamespaces: "特定命名空间"
         key: 键
         lessThan: <
+        matchType: 匹配类型
         namespaces: 命名空间
         notIn: 不在列表中
         operator: 运算符
@@ -5950,6 +6005,7 @@ workload:
       schedulingRules: 在匹配调度规则的节点上运行 Pod
       specificNode: 在指定节点上运行 Pod
       thisPodNamespace: 此 Pod 的命名空间
+      allNamespaces: 所有命名空间
       topologyKey:
         label: 拓扑键
         placeholder: 例如：failure-domain.beta.kubernetes.io/zone
@@ -5969,10 +6025,10 @@ workload:
       podScheduling: Pod 调度
       priority: 优先级
       tab: 调度
-      tolerations: 容忍
+      tolerations: 容忍度
       limits: 限制和预留
     tolerations:
-      addToleration: 添加容忍
+      addToleration: 添加容忍度
       effect: 效果
       effectOptions:
         all: 全部
@@ -6122,8 +6178,6 @@ workload:
       pod: Pod
       containers: 容器
 
-
-
 ##############################
 # Model Properties
 ##############################
@@ -6769,7 +6823,7 @@ typeLabel:
     {count, plural,
       one { 集群注册 Token }
       other { 集群注册 Token }
-    } 
+    }
 
 action:
   clone: 克隆
@@ -7003,6 +7057,14 @@ performance:
     label: Websocket Web Worker
     description: 推送到 UI 的资源更新来自 WebSocket，并在 UI 线程中处理。启用此选项可在单独的线程中处理 Web Worker 中的集群 WebSocket 更新。这有助于提高 UI 在资源经常变化的系统中的响应能力。
     checkboxLabel: 启用高级 Websocket Web Worker
+  inactivity:
+    title: 闲置状态
+    checkboxLabel: 启用闲置会话过期
+    inputLabel: 闲置超时时间（分钟）
+    information: 要更改自动注销行为，请在"设置"页面编辑授权和/或会话 Token 超时值（<code>auth-user-session-ttl-minutes</code> 和 <code>auth-token-max-ttl-minutes</code>)。
+    description: 启用后，如果用户在指定的超时时间内未有活动，UI 将不再刷新页面内容，用户必须重新加载页面才能继续。
+    authUserTTL: 该超时时间不能超过用户会话超时时间 auth-user-session-ttl-minutes（当前为 {current} 分钟）。
+
 
 banner:
   label: 固定横幅
@@ -7486,3 +7548,7 @@ charts:
     ingress.host:
       label: 7 层负载均衡主机名
       description: "7 层负载均衡主机名"
+
+networkAttachmentDefinition:
+  tabs:
+    config: 配置

package/babel.config.js

@@ -1,5 +1,6 @@
-module.exports = {
-  presets: [
+module.exports = function(api) {
+  api.cache(true);
+  const presets = [
     [
       '@vue/cli-plugin-babel/preset',
       { useBuiltIns: false }
@@ -8,6 +9,18 @@ module.exports = {
       '@babel/preset-env',
       { targets: { node: 'current' } }
     ]
-  ],
-  env: { test: { presets: [['@babel/env', { targets: { node: 'current' } }]] } }
+  ];
+  const env = { test: { presets: [['@babel/env', { targets: { node: 'current' } }]] } };
+
+  const plugins = [];
+
+  if (process.env.NODE_ENV === 'test') {
+    plugins.push('transform-require-context');
+  }
+
+  return {
+    presets,
+    plugins,
+    env
+  };
 };

package/chart/istio.vue

@@ -231,17 +231,17 @@ export default {
         />
       </div>
       <div class="col span-4" />
-      <div
-        v-if="showKialiBanner"
-        class="row"
-      >
-        <div class="col span-12">
-          <Banner color="info">
-            <span
-              v-clean-html="t('istio.pilotRequired', {}, true)"
-            />
-          </Banner>
-        </div>
+    </div>
+    <div
+      v-if="showKialiBanner"
+      class="row"
+    >
+      <div class="col span-12">
+        <Banner color="info">
+          <span
+            v-clean-html="t('istio.pilotRequired', {}, true)"
+          />
+        </Banner>
       </div>
     </div>
 

package/chart/rancher-backup/S3.vue

@@ -139,7 +139,7 @@ export default {
           />
           <div class="ca-tooltip">
             <i
-              v-tooltip="t('backupRestoreOperator.s3.endpointCA.prompt')"
+              v-clean-tooltip="t('backupRestoreOperator.s3.endpointCA.prompt')"
               class="icon icon-info"
             />
           </div>

package/components/AsyncButton.vue

@@ -275,12 +275,12 @@ export default Vue.extend({
   >
     <i
       v-if="displayIcon"
-      v-tooltip="tooltip"
+      v-clean-tooltip="tooltip"
       :class="{icon: true, 'icon-lg': true, [displayIcon]: true}"
     />
     <span
       v-if="labelAs === 'text' && displayLabel"
-      v-tooltip="tooltip"
+      v-clean-tooltip="tooltip"
       v-clean-html="displayLabel"
     />
   </button>

package/components/ButtonGroup.vue

@@ -75,7 +75,7 @@ export default {
     <button
       v-for="(opt,idx) in optionObjects"
       :key="idx"
-      v-tooltip="opt.tooltipKey ? t(opt.tooltipKey) : opt.tooltip"
+      v-clean-tooltip="opt.tooltipKey ? t(opt.tooltipKey) : opt.tooltip"
       :data-testid="`button-group-child-${idx}`"
       type="button"
       :class="opt.class"