@rancher/shell 3.0.12-rc.2 → 3.0.12-rc.3

package/edit/networking.k8s.io.ingress/index.vue

@@ -87,21 +87,21 @@ export default {
           path: 'spec.rules.http.paths.path', rules: ['absolutePath'], translationKey: 'ingress.rules.path.label'
         },
         {
-          path: 'spec.rules.http.paths.backend.service.port.number', rules: ['required'], translationKey: 'ingress.rules.port.label'
+          path: 'spec.rules.http.paths.backend.service.port', rules: ['portRequired', 'portRange'], translationKey: 'ingress.rules.port.label'
         },
         {
           path: 'spec.rules.http.paths.backend.service.name', rules: ['required'], translationKey: 'ingress.rules.target.label'
         },
         { path: 'spec', rules: ['backEndOrRules'] },
         {
-          path: 'spec.defaultBackend.service.name', rules: ['required'], translationKey: 'ingress.defaultBackend.targetService.label'
+          path: 'spec.defaultBackend.service.name', rules: ['defaultBackendNameRequired'], translationKey: 'ingress.defaultBackend.targetService.label'
         },
         {
-          path: 'spec.defaultBackend.service.port.number', rules: ['required', 'requiredInt', 'portNumber'], translationKey: 'ingress.defaultBackend.port.label'
+          path: 'spec.defaultBackend.service.port', rules: ['defaultBackendPortRequired', 'portRange'], translationKey: 'ingress.defaultBackend.port.label'
         },
         { path: 'spec.tls.hosts', rules: ['required', 'wildcardHostname'] }
       ],
-      fvReportedValidationPaths: ['spec.rules.http.paths.backend.service.port.number', 'spec.rules.http.paths.path', 'spec.rules.http.paths.backend.service.name']
+      fvReportedValidationPaths: ['spec.rules.http.paths.backend.service.port', 'spec.rules.http.paths.path', 'spec.rules.http.paths.backend.service.name']
     };
   },
 
@@ -125,35 +125,89 @@ export default {
         }
       };
 
-      return { backEndOrRules };
+      const portLabel = this.t('ingress.rules.port.label');
+
+      // Built-in `required` won't work: it passes for empty objects like {} or { name: '' }.
+      const portRequired = (port) => {
+        if (typeof port === 'string' || typeof port === 'number') {
+          if (!port) {
+            return this.t('validation.required', { key: portLabel });
+          }
+        } else if (!port || (!port.number && !port.name)) {
+          return this.t('validation.required', { key: portLabel });
+        }
+      };
+
+      const portRange = (port) => {
+        let num;
+
+        if (typeof port === 'number') {
+          num = port;
+        } else if (typeof port === 'string') {
+          num = Number.parseInt(port);
+        } else if (port?.number) {
+          num = port.number;
+        }
+
+        if (num !== undefined && !Number.isNaN(num) && (num < 1 || num > 65535)) {
+          return this.t('validation.number.between', {
+            key: portLabel, min: '1', max: '65535'
+          });
+        }
+      };
+
+      const hasDefaultBackendService = () => {
+        const backend = get(this.value?.spec, this.value.defaultBackendPath);
+
+        return !!get(backend, this.value.serviceNamePath);
+      };
+
+      const nameLabel = this.t('ingress.defaultBackend.targetService.label');
+
+      // Only enforce required on the default backend when a service is selected.
+      // Selecting "None" means the user wants to remove the backend; willSave() handles cleanup.
+      const defaultBackendNameRequired = (name) => {
+        if (hasDefaultBackendService() && !name) {
+          return this.t('validation.required', { key: nameLabel });
+        }
+      };
+
+      const defaultBackendPortRequired = (port) => {
+        if (!hasDefaultBackendService()) {
+          return;
+        }
+
+        return portRequired(port);
+      };
+
+      return {
+        backEndOrRules,
+        portRequired,
+        portRange,
+        defaultBackendNameRequired,
+        defaultBackendPortRequired,
+      };
     },
     tabErrors() {
       return {
-        rules:          this.fvGetPathErrors(['spec.rules.host', 'spec.rules.http.paths.path', 'spec.rules.http.paths.backend.service.port.number', 'spec.rules.http.paths.backend.service.name'])?.length > 0,
-        defaultBackend: this.fvGetPathErrors(['spec.defaultBackend.service.name', 'spec.defaultBackend.service.port.number'])?.length > 0
+        rules:          this.fvGetPathErrors(['spec.rules.host', 'spec.rules.http.paths.path', 'spec.rules.http.paths.backend.service.port', 'spec.rules.http.paths.backend.service.name'])?.length > 0,
+        defaultBackend: this.fvGetPathErrors(['spec.defaultBackend.service.name', 'spec.defaultBackend.service.port'])?.length > 0
       };
     },
     rulesPathRules() {
       return {
         requestHost: this.fvGetAndReportPathRules('spec.rules.host'),
         path:        this.fvGetAndReportPathRules('spec.rules.http.paths.path'),
-        port:        this.fvGetAndReportPathRules('spec.rules.http.paths.backend.service.port.number'),
+        port:        this.fvGetAndReportPathRules('spec.rules.http.paths.backend.service.port'),
         target:      this.fvGetAndReportPathRules('spec.rules.http.paths.backend.service.name'),
 
       };
     },
     defaultBackendPathRules() {
-      const rulesExist = (this.value?.spec?.rules || []).length > 0;
-      const defaultBackendExist = !!this.value?.spec?.defaultBackend?.service;
-
-      if (!rulesExist || defaultBackendExist) {
-        return {
-          name: this.fvGetAndReportPathRules('spec.defaultBackend.service.name'),
-          port: this.fvGetAndReportPathRules('spec.defaultBackend.service.port.number'),
-        };
-      }
-
-      return { name: [], port: [] };
+      return {
+        name: this.fvGetAndReportPathRules('spec.defaultBackend.service.name'),
+        port: this.fvGetAndReportPathRules('spec.defaultBackend.service.port'),
+      };
     },
     serviceTargets() {
       return this.ingressHelper.findAndMapServiceTargets(this.services);
@@ -188,7 +242,8 @@ export default {
     willSave() {
       const backend = get(this.value.spec, this.value.defaultBackendPath);
       const serviceName = get(backend, this.value.serviceNamePath);
-      const servicePort = get(backend, this.value.servicePortPath);
+      const servicePort = get(backend, this.value.servicePortPath) ||
+        get(backend, this.value.servicePortNamePath);
 
       if (backend && (!serviceName || !servicePort)) {
         const path = this.value.defaultBackendPath;

package/edit/provisioning.cattle.io.cluster/__tests__/MachinePool.test.ts

@@ -0,0 +1,104 @@
+import { shallowMount } from '@vue/test-utils';
+import MachinePool from '@shell/edit/provisioning.cattle.io.cluster/tabs/MachinePool.vue';
+
+const TRANSLATION_KEY = '%cluster.machinePool.name.unique%';
+
+function createPool(name: string, { remove = false } = {}) {
+  return {
+    id:     `pool-${ name }`,
+    remove,
+    create: false,
+    update: true,
+    pool:   {
+      name,
+      etcdRole:         false,
+      controlPlaneRole: false,
+      workerRole:       true,
+      quantity:         1,
+    },
+    config: null,
+  };
+}
+
+function mountMachinePool(currentPool: ReturnType<typeof createPool>, allPools: ReturnType<typeof createPool>[]) {
+  return shallowMount(MachinePool, {
+    props: {
+      value:          currentPool,
+      mode:           'create',
+      provider:       'custom',
+      idx:            0,
+      machinePools:   allPools,
+      poolId:         currentPool.id,
+      poolCreateMode: true,
+    },
+    global: {
+      mocks: {
+        $store: {
+          getters: {
+            'i18n/t':                                   (key: string) => key,
+            'i18n/exists':                              () => false,
+            'type-map/hasCustomMachineConfigComponent': () => false,
+            'type-map/importMachineConfig':             () => null,
+            'features/get':                             () => false,
+          },
+          dispatch: jest.fn(),
+        },
+      },
+      stubs: {
+        LabeledInput:    true,
+        Checkbox:        true,
+        Taints:          true,
+        KeyValue:        true,
+        AdvancedSection: true,
+        Banner:          true,
+        UnitInput:       true,
+      },
+    },
+  });
+}
+
+describe('component: MachinePool', () => {
+  describe('uniquePoolName validation', () => {
+    it('should return undefined when the name is empty', () => {
+      const pool = createPool('');
+      const wrapper = mountMachinePool(pool, [pool]);
+
+      expect(wrapper.vm.fvExtraRules.uniquePoolName('')).toBeUndefined();
+    });
+
+    it('should return undefined when the pool name is unique', () => {
+      const pool1 = createPool('pool1');
+      const pool2 = createPool('pool2');
+      const wrapper = mountMachinePool(pool1, [pool1, pool2]);
+
+      expect(wrapper.vm.fvExtraRules.uniquePoolName('pool1')).toBeUndefined();
+    });
+
+    it('should return an error message when the pool name is duplicated', () => {
+      const pool1 = createPool('same-name');
+      const pool2 = createPool('same-name');
+      const wrapper = mountMachinePool(pool1, [pool1, pool2]);
+
+      expect(wrapper.vm.fvExtraRules.uniquePoolName('same-name')).toStrictEqual(TRANSLATION_KEY);
+    });
+
+    it('should ignore pools marked for removal', () => {
+      const pool1 = createPool('same-name');
+      const pool2 = createPool('same-name', { remove: true });
+      const wrapper = mountMachinePool(pool1, [pool1, pool2]);
+
+      expect(wrapper.vm.fvExtraRules.uniquePoolName('same-name')).toBeUndefined();
+    });
+
+    it.each([
+      ['Pool1', 'pool1'],
+      ['POOL', 'pool'],
+    ])('should flag names that differ only by case as duplicates (%s vs %s)', (nameA, nameB) => {
+      const pool1 = createPool(nameA);
+      const pool2 = createPool(nameB);
+      const wrapper = mountMachinePool(pool1, [pool1, pool2]);
+
+      expect(wrapper.vm.fvExtraRules.uniquePoolName(nameA)).toStrictEqual(TRANSLATION_KEY);
+    });
+  });
+});

package/edit/provisioning.cattle.io.cluster/index.vue

@@ -5,7 +5,7 @@ import { Banner } from '@components/Banner';
 import CruResource from '@shell/components/CruResource';
 import SelectIconGrid from '@shell/components/SelectIconGrid';
 import {
-  CHART, FROM_CLUSTER, SUB_TYPE, RKE_TYPE, _EDIT, _IMPORT, _CONFIG, _VIEW
+  CHART, FROM_CLUSTER, SUB_TYPE, RKE_TYPE, _EDIT, _IMPORT, _CONFIG, _VIEW, _CREATE
 } from '@shell/config/query-params';
 import { mapGetters } from 'vuex';
 import { sortBy } from '@shell/utils/sort';
@@ -80,16 +80,20 @@ export default {
   },
 
   async fetch() {
-    const hash = {
-      // These aren't explicitly used, but need to be listening for change events
-      mgmtClusters: this.$store.dispatch('management/findAll', { type: MANAGEMENT.CLUSTER }),
-      provClusters: this.$store.dispatch('management/findAll', { type: CAPI.RANCHER_CLUSTER }),
-    };
+    const hash = {};
+
+    if (this.mode === _CREATE) {
+      // After we create we wait for these to exist, so start watching
+      await this.$store.dispatch('management/watch', { type: MANAGEMENT.CLUSTER, registerType: true });
+      await this.$store.dispatch('management/watch', { type: CAPI.RANCHER_CLUSTER, registerType: true });
+    } else {
+      hash.mgmtClusters = this.value.waitForMgmt();
+    }
 
     // No need to fetch charts when editing an RKE1 cluster
     // The computed property `isRke1` in this file is based on the RKE1/RKE2 toggle, which is not applicable in this case
     // Instead, we should rely on the value from the model: `this.value.isRke1`
-    if (!this.value.isRke1 || (this.value.isRke1 && this.mode !== 'edit')) {
+    if (!this.value.isRke1 || (this.value.isRke1 && this.mode !== _EDIT)) {
       hash['catalog'] = this.$store.dispatch('catalog/load');
     }
 

package/edit/provisioning.cattle.io.cluster/rke2.vue

@@ -174,7 +174,7 @@ export default {
     Object.entries(this.chartValues).forEach(([name, value]) => {
       const key = this.chartVersionKey(name);
 
-      this.set(this.userChartValues, key, value);
+      this.userChartValues[key] = value;
     });
     this.setAgentConfiguration();
   },
@@ -298,6 +298,7 @@ export default {
       isEmpty,
       AGENT_CONFIGURATION_TYPES,
       basicsValid:                              true,
+      registryConfigValid:                      true,
       originalIngressController:                this.value.spec.rkeConfig.machineGlobalConfig?.[INGRESS_CONTROLLER] || INGRESS_NONE,
     };
   },
@@ -906,7 +907,8 @@ export default {
       return this.validationPassed &&
             this.fvFormIsValid &&
             this.etcdConfigValid &&
-            this.basicsValid;
+            this.basicsValid &&
+            this.registryConfigValid;
     },
     nginxSupported() {
       if (this.serverArgs?.disable?.options.includes(RKE2_INGRESS_NGINX)) {
@@ -2518,14 +2520,14 @@ export default {
           >
             <template
               v-for="(obj, idx) in machinePools"
-              :key="idx"
+              :key="obj.id"
             >
               <Tab
                 v-if="!obj.remove"
                 :key="obj.id"
                 :weight="-1 * idx"
                 :name="obj.id"
-                :label="obj.pool.name || '(Not Named)'"
+                :label="obj.pool.name || t('cluster.machinePool.name.notNamed')"
                 :show-header="false"
                 :error="!machinePoolValidation[obj.id]"
               >
@@ -2688,6 +2690,7 @@ export default {
           <Tab
             :name="REGISTRIES_TAB_NAME"
             label-key="cluster.tabs.registry"
+            :error="!registryConfigValid"
           >
             <Registries
               v-if="isActiveTabRegistries"
@@ -2703,6 +2706,7 @@ export default {
               @custom-registry-changed="toggleCustomRegistry"
               @registry-host-changed="handleRegistryHostChanged"
               @registry-secret-changed="handleRegistrySecretChanged"
+              @registry-validation-changed="(val) => registryConfigValid = val"
             />
           </Tab>
 

package/edit/provisioning.cattle.io.cluster/tabs/MachinePool.vue

@@ -106,6 +106,16 @@ export default {
           const max = this.value?.pool?.autoscalingMaxSize || 0;
 
           return max - min >= 0 ? undefined : this.t('cluster.machinePool.autoscaler.validation.isAutoscalerMaxGreaterThanMin');
+        },
+        uniquePoolName: (name) => {
+          if (!name) {
+            return undefined;
+          }
+
+          const otherPools = (this.machinePools || []).filter((p) => !p.remove && p !== this.value);
+          const isDuplicate = otherPools.some((p) => p.pool.name?.toLowerCase() === name.toLowerCase());
+
+          return isDuplicate ? this.t('cluster.machinePool.name.unique') : undefined;
         }
       }
     };
@@ -295,6 +305,7 @@ export default {
           :label="t('cluster.machinePool.name.label')"
           :required="true"
           :disabled="!value.config || !!value.config.id || busy"
+          :require-dirty="false"
           :rules="fvGetAndReportPathRules(MACHINE_POOL_VALIDATION.FIELDS.NAME)"
           data-testid="machine-pool-name-input"
         />

package/edit/provisioning.cattle.io.cluster/tabs/registries/RegistryConfigs.vue

@@ -7,11 +7,11 @@ import SelectOrCreateAuthSecret from '@shell/components/form/SelectOrCreateAuthS
 import CreateEditView from '@shell/mixins/create-edit-view';
 import SecretSelector from '@shell/components/form/SecretSelector';
 import { SECRET_TYPES as TYPES } from '@shell/config/secret';
-import { isBase64 } from '@shell/utils/string';
+import { isBase64EncodedCert } from '@shell/utils/string';
 import { base64Decode, base64Encode } from '@shell/utils/crypto';
 
 export default {
-  emits: ['updateConfigs'],
+  emits: ['updateConfigs', 'validation-changed'],
 
   components: {
     ArrayListGrouped,
@@ -62,6 +62,34 @@ export default {
         return TYPES.TLS;
       },
     },
+
+    caBundleRules() {
+      return [
+        (value) => {
+          if (!value) {
+            return undefined;
+          }
+
+          const isPem = value.trimStart().startsWith('-----BEGIN ');
+          const isValidBase64 = isBase64EncodedCert(value);
+
+          return (!isPem && !isValidBase64) ? this.t('registryConfig.caBundle.validationError') : undefined;
+        }
+      ];
+    },
+
+    // Derives validation state from entries directly, so it auto-updates when entries are added or removed
+    allCaBundlesValid() {
+      return this.entries.every((entry) => {
+        return this.caBundleRules.every((rule) => !rule(entry.caBundle));
+      });
+    },
+  },
+
+  watch: {
+    allCaBundlesValid(valid) {
+      this.$emit('validation-changed', valid);
+    },
   },
 
   mounted() {
@@ -78,7 +106,8 @@ export default {
 
         const caBundle = configMap[hostname].caBundle ?? this.defaultAddValue.caBundle;
 
-        configMap[hostname].caBundle = isBase64(caBundle) ? base64Decode(caBundle) : caBundle;
+        // Decode base64 for display so the user sees readable PEM text
+        configMap[hostname].caBundle = isBase64EncodedCert(caBundle) ? base64Decode(caBundle) : caBundle;
 
         configMap[hostname].tlsSecretName = configMap[hostname].tlsSecretName ?? this.defaultAddValue.tlsSecretName;
       }
@@ -103,7 +132,8 @@ export default {
 
         configs[h] = {
           ...entry,
-          caBundle: entry.caBundle ? base64Encode(entry.caBundle) : null
+          // If the value is already base64, use as-is to avoid double-encoding
+          caBundle: entry.caBundle ? (isBase64EncodedCert(entry.caBundle) ? entry.caBundle : base64Encode(entry.caBundle)) : null
         };
 
         delete configs[h].hostname;
@@ -192,6 +222,9 @@ export default {
               type="multiline"
               label="CA Cert Bundle"
               :mode="mode"
+              :rules="caBundleRules"
+              :require-dirty="false"
+              :tooltip="t('registryConfig.caBundle.tooltip')"
             />
 
             <div>

package/edit/provisioning.cattle.io.cluster/tabs/registries/__tests__/RegistryConfigs.test.ts

@@ -4,6 +4,9 @@ import { _EDIT } from '@shell/config/query-params';
 import { PROV_CLUSTER } from '@shell/edit/provisioning.cattle.io.cluster/__tests__/utils/cluster';
 import RegistryConfigs from '@shell/edit/provisioning.cattle.io.cluster/tabs/registries/RegistryConfigs.vue';
 
+const VALID_BASE64_CERT = 'LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0t';
+const VALID_PEM_TEXT = '-----BEGIN CERTIFICATE-----\nMIIBkTCB+wIJA';
+
 describe('component: RegistryConfigs', () => {
   let wrapper: Wrapper<InstanceType<typeof RegistryConfigs> & { [key: string]: any }>;
 
@@ -18,14 +21,14 @@ describe('component: RegistryConfigs', () => {
         SelectOrCreateAuthSecret: true,
         SecretSelector:           true,
       },
-      mocks: { $store: { getters: { 'i18n/t': jest.fn() } } }
+      mocks: { $store: { getters: { 'i18n/t': jest.fn((key: string) => key) } } }
     }
   };
 
   describe('key CA Cert Bundle', () => {
     it.each([
-      ['source is plain text', 'Zm9vYmFy', 'foobar'],
-      ['source is base64', 'foobar', 'foobar'],
+      ['source is base64', VALID_BASE64_CERT, '-----BEGIN CERTIFICATE-----'],
+      ['source is plain text', 'foobar', 'foobar'],
     ])('should display key, %p', (_, sourceCaBundle, displayedCaBundle) => {
       const value = clone(PROV_CLUSTER);
 
@@ -43,10 +46,10 @@ describe('component: RegistryConfigs', () => {
       expect(registry.props().value).toBe(displayedCaBundle);
     });
 
-    it('should update key in base64 format', async() => {
+    it('should base64 encode plain PEM text on save', async() => {
       const value = clone(PROV_CLUSTER);
 
-      value.spec.rkeConfig.registries.configs = { foo: { caBundle: 'Zm9vYmFy' } };
+      value.spec.rkeConfig.registries.configs = { foo: { caBundle: VALID_BASE64_CERT } };
 
       mountOptions.propsData.value = value;
 
@@ -57,10 +60,132 @@ describe('component: RegistryConfigs', () => {
 
       const registry = wrapper.findComponent('[data-testid^="registry-caBundle"]');
 
-      registry.vm.$emit('update:value', 'ssh key');
+      registry.vm.$emit('update:value', VALID_PEM_TEXT);
       wrapper.vm.update();
 
-      expect(wrapper.emitted('updateConfigs')[0][0]['foo']['caBundle']).toBe('c3NoIGtleQ==');
+      expect(wrapper.emitted('updateConfigs')[0][0]['foo']['caBundle']).toBe('LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJrVENCK3dJSkE=');
+    });
+
+    it('should keep base64 value as-is on save', async() => {
+      const value = clone(PROV_CLUSTER);
+
+      value.spec.rkeConfig.registries.configs = { foo: { caBundle: VALID_BASE64_CERT } };
+
+      mountOptions.propsData.value = value;
+
+      wrapper = mount(
+        RegistryConfigs,
+        mountOptions
+      );
+
+      const registry = wrapper.findComponent('[data-testid^="registry-caBundle"]');
+
+      registry.vm.$emit('update:value', VALID_BASE64_CERT);
+      wrapper.vm.update();
+
+      expect(wrapper.emitted('updateConfigs')[0][0]['foo']['caBundle']).toBe(VALID_BASE64_CERT);
+    });
+  });
+
+  describe('cA Cert Bundle validation', () => {
+    it('should pass validation for valid base64 value', () => {
+      const value = clone(PROV_CLUSTER);
+
+      value.spec.rkeConfig.registries.configs = {};
+      mountOptions.propsData.value = value;
+
+      wrapper = mount(RegistryConfigs, mountOptions);
+
+      const rule = wrapper.vm.caBundleRules[0];
+
+      expect(rule(VALID_BASE64_CERT)).toBeUndefined();
+    });
+
+    it('should pass validation for PEM text', () => {
+      const value = clone(PROV_CLUSTER);
+
+      value.spec.rkeConfig.registries.configs = {};
+      mountOptions.propsData.value = value;
+
+      wrapper = mount(RegistryConfigs, mountOptions);
+
+      const rule = wrapper.vm.caBundleRules[0];
+
+      expect(rule(VALID_PEM_TEXT)).toBeUndefined();
+    });
+
+    it('should pass validation for empty value', () => {
+      const value = clone(PROV_CLUSTER);
+
+      value.spec.rkeConfig.registries.configs = {};
+      mountOptions.propsData.value = value;
+
+      wrapper = mount(RegistryConfigs, mountOptions);
+
+      const rule = wrapper.vm.caBundleRules[0];
+
+      expect(rule('')).toBeUndefined();
+      expect(rule(null)).toBeUndefined();
+      expect(rule(undefined)).toBeUndefined();
+    });
+
+    it('should fail validation for invalid value', () => {
+      const value = clone(PROV_CLUSTER);
+
+      value.spec.rkeConfig.registries.configs = {};
+      mountOptions.propsData.value = value;
+
+      wrapper = mount(RegistryConfigs, mountOptions);
+
+      const rule = wrapper.vm.caBundleRules[0];
+
+      expect(rule('not-valid-base64!')).toContain('registryConfig.caBundle.validationError');
+    });
+
+    it('should report allCaBundlesValid as true when all entries have valid caBundles', () => {
+      const value = clone(PROV_CLUSTER);
+
+      value.spec.rkeConfig.registries.configs = {
+        'reg1.example.com': { caBundle: VALID_BASE64_CERT },
+        'reg2.example.com': { caBundle: VALID_BASE64_CERT },
+      };
+      mountOptions.propsData.value = value;
+
+      wrapper = mount(RegistryConfigs, mountOptions);
+
+      expect(wrapper.vm.allCaBundlesValid).toBe(true);
+    });
+
+    it('should report allCaBundlesValid as false when any entry has an invalid caBundle', () => {
+      const value = clone(PROV_CLUSTER);
+
+      value.spec.rkeConfig.registries.configs = {
+        'reg1.example.com': { caBundle: VALID_BASE64_CERT },
+        'reg2.example.com': { caBundle: 'not-valid!' },
+      };
+      mountOptions.propsData.value = value;
+
+      wrapper = mount(RegistryConfigs, mountOptions);
+
+      expect(wrapper.vm.allCaBundlesValid).toBe(false);
+    });
+
+    it('should update validation when an invalid entry is removed', () => {
+      const value = clone(PROV_CLUSTER);
+
+      value.spec.rkeConfig.registries.configs = {
+        'reg1.example.com': { caBundle: VALID_BASE64_CERT },
+        'reg2.example.com': { caBundle: 'not-valid!' },
+      };
+      mountOptions.propsData.value = value;
+
+      wrapper = mount(RegistryConfigs, mountOptions);
+
+      expect(wrapper.vm.allCaBundlesValid).toBe(false);
+
+      wrapper.vm.entries.splice(1, 1);
+
+      expect(wrapper.vm.allCaBundlesValid).toBe(true);
     });
   });
 });

package/edit/provisioning.cattle.io.cluster/tabs/registries/index.vue

@@ -8,7 +8,7 @@ import RegistryConfigs from '@shell/edit/provisioning.cattle.io.cluster/tabs/reg
 import RegistryMirrors from '@shell/edit/provisioning.cattle.io.cluster/tabs/registries/RegistryMirrors';
 
 export default {
-  emits:      ['custom-registry-changed', 'registry-host-changed', 'registry-secret-changed', 'input', 'update-configs-changed'],
+  emits:      ['custom-registry-changed', 'registry-host-changed', 'registry-secret-changed', 'input', 'update-configs-changed', 'registry-validation-changed'],
   components: {
     LabeledInput,
     Banner,
@@ -142,6 +142,7 @@ export default {
           :cluster-register-before-hook="registerBeforeHook"
           @update:value="$emit('input', $event)"
           @updateConfigs="$emit('update-configs-changed', $event)"
+          @validation-changed="$emit('registry-validation-changed', $event)"
         />
       </AdvancedSection>
     </div>

package/edit/secret/__tests__/ssh.test.ts

@@ -1,18 +1,17 @@
 import { mount } from '@vue/test-utils';
+import { createStore } from 'vuex';
 import { _VIEW, _EDIT, _CREATE } from '@shell/config/query-params';
 import Ssh from '@shell/edit/secret/ssh.vue';
 
-const mockedStore = () => {
-  return { getters: { 'i18n/t': jest.fn() } };
-};
-
 const mockedRoute = { query: {} };
 
 const requiredSetup = () => {
+  const store = createStore({ getters: { 'i18n/t': () => jest.fn() } });
+
   return {
     global: {
-      mocks: {
-        $store:      mockedStore(),
+      plugins: [store],
+      mocks:   {
         $route:      mockedRoute,
         $fetchState: {},
       }