@rancher/shell 3.0.12-rc.3 → 3.0.12-rc.5

package/models/management.cattle.io.cluster.js

@@ -1,4 +1,4 @@
-import { CATALOG, CLUSTER_BADGE, NODE_ARCHITECTURE } from '@shell/config/labels-annotations';
+import { CATALOG, CLUSTER_BADGE, NODE_ARCHITECTURE, OPERATION_ANNOTATIONS } from '@shell/config/labels-annotations';
 import {
   NODE, FLEET, MANAGEMENT, CAPI, EXT,
   NORMAN,
@@ -9,7 +9,7 @@ import { downloadFile } from '@shell/utils/download';
 import { parseSi } from '@shell/utils/units';
 import { parseColor, textColor } from '@shell/utils/color';
 import { isEmpty, isEqual } from '@shell/utils/object';
-import { HARVESTER_NAME as HARVESTER } from '@shell/config/features';
+import { HARVESTER_NAME as HARVESTER, IMPORTED_DAY_2_OPS } from '@shell/config/features';
 import { isHarvesterCluster } from '@shell/utils/cluster';
 import SteveModel from '@shell/plugins/steve/steve-class';
 import { LINUX, WINDOWS } from '@shell/store/catalog';
@@ -17,10 +17,10 @@ import { KEV1 } from './management.cattle.io.kontainerdriver';
 import { requireAsset } from '@shell/utils/require-asset';
 import { PINNED_CLUSTERS } from '@shell/store/prefs';
 import { copyTextToClipboard } from '@shell/utils/clipboard';
-import { isHostedProvider } from '@shell/utils/provider';
+import { isHostedProvider, isCAPIProvider } from '@shell/utils/provider';
 import { ucFirst } from '@shell/utils/string';
 import { sortBy } from '@shell/utils/sort';
-
+import { SETTING } from '@shell/config/settings';
 const DEFAULT_BADGE_COLOR = '#707070';
 
 // See translation file cluster.providers for list of providers
@@ -180,7 +180,7 @@ export default class MgmtCluster extends SteveModel {
   }
 
   get machineProvider() {
-    return this.status?.info.machineProvider;
+    return this.status?.info?.machineProvider;
   }
 
   get machineProviderDisplay() {
@@ -261,6 +261,22 @@ export default class MgmtCluster extends SteveModel {
     return !!capiMachines;
   }
 
+  get isCAPIProvider() {
+    if (!this.isCapiHybrid || !this.machineProvider) {
+      return false;
+    }
+
+    const context = {
+      dispatch:   this.$dispatch,
+      getters:    this.$getters,
+      axios:      this.$axios,
+      $extension: this.$extension,
+      t:          (...args) => this.t.apply(this, args),
+    };
+
+    return isCAPIProvider(context, this.machineProvider.toLowerCase());
+  }
+
   get isHostedKubernetesProvider() {
     const context = {
       dispatch:   this.$dispatch,
@@ -373,6 +389,24 @@ export default class MgmtCluster extends SteveModel {
     return this.spec?.internal === true;
   }
 
+  get isDayTwoOpsFeatureEnabled() {
+    return this.$rootGetters['management/byId'](MANAGEMENT.FEATURE, IMPORTED_DAY_2_OPS)?.enabled || false;
+  }
+
+  /**
+   * Whether day 2 operations are enabled for this cluster.
+   * Reads the `operations.cattle.io/ops-enabled` annotation.
+   */
+  get isDayTwoOpsEnabled() {
+    const isImportedRke2K3s = !this.isLocal && (this.isImportedK3s || this.isImportedRke2);
+    const annotationExists = typeof this.metadata?.annotations?.[OPERATION_ANNOTATIONS.ENABLED] !== 'undefined';
+    const annotationEnabled = this.metadata?.annotations?.[OPERATION_ANNOTATIONS.ENABLED] === 'true';
+    const globalDefaultIsTrue = this.$rootGetters['management/byId'](MANAGEMENT.SETTING, SETTING.IMPORTED_CLUSTER_DAY2_OPS_DEFAULT)?.value === 'true';
+    const annotationEnabledOrDefault = annotationExists ? annotationEnabled : globalDefaultIsTrue;
+
+    return this.isDayTwoOpsFeatureEnabled && isImportedRke2K3s && annotationEnabledOrDefault;
+  }
+
   get isHarvester() {
     return isHarvesterCluster(this);
   }

package/models/management.cattle.io.node.js

@@ -10,7 +10,8 @@ import { notOnlyOfRole } from '@shell/models/cluster.x-k8s.io.machine';
 const RKE1_ALLOWED_ACTIONS = [
   'goToViewYaml',
   'download',
-  'viewInApi'
+  'viewInApi',
+  'showConfiguration'
 ];
 
 export default class MgmtNode extends HybridModel {
@@ -63,6 +64,10 @@ export default class MgmtNode extends HybridModel {
   }
 
   get pool() {
+    if (!this.spec?.nodePoolName) {
+      return undefined;
+    }
+
     const nodePoolID = this.spec.nodePoolName.replace(':', '/');
 
     return this.$rootGetters['management/byId'](MANAGEMENT.NODE_POOL, nodePoolID);
@@ -118,6 +123,42 @@ export default class MgmtNode extends HybridModel {
     return this.status?.addresses || this.status?.internalNodeStatus?.addresses || [];
   }
 
+  get internalIps() {
+    const internal = this.addresses.filter(({ type }) => {
+      return type === ADDRESSES.INTERNAL_IP;
+    });
+
+    if (!internal.length) {
+      // For RKE1 clusters in EC2, node addresses are
+      // under status.rkeNode.address and status.rkeNode.internalAddress
+      if (this.status?.rkeNode) {
+        return this.status.rkeNode.internalAddress ? [this.status.rkeNode.internalAddress] : [];
+      }
+
+      return [];
+    }
+
+    return internal.map(({ address }) => address);
+  }
+
+  get externalIps() {
+    const external = this.addresses.filter(({ type }) => {
+      return type === ADDRESSES.EXTERNAL_IP;
+    });
+
+    if (!external.length) {
+      // For RKE1 clusters in EC2, node addresses are
+      // under status.rkeNode.address and status.rkeNode.internalAddress
+      if (this.status?.rkeNode) {
+        return this.status.rkeNode.address ? [this.status.rkeNode.address] : [];
+      }
+
+      return [];
+    }
+
+    return external.map(({ address }) => address);
+  }
+
   get internalIp() {
     // This shows in the IP address column for RKE1 nodes in the
     // list of nodes in the cluster detail page of Cluster Management.
@@ -131,7 +172,7 @@ export default class MgmtNode extends HybridModel {
 
     // For RKE1 clusters in EC2, node addresses are
     // under status.rkeNode.address and status.rkeNode.internalAddress
-    if (!internal && this.status.rkeNode) {
+    if (!internal && this.status?.rkeNode) {
       return this.status.rkeNode.internalAddress;
     }
 
@@ -147,7 +188,7 @@ export default class MgmtNode extends HybridModel {
 
     // For RKE1 clusters in EC2, node addresses are
     // under status.rkeNode.address and status.rkeNode.internalAddress
-    if (!statusAddress && this.status.rkeNode) {
+    if (!statusAddress && this.status?.rkeNode) {
       return this.status.rkeNode.address;
     }
 

package/models/namespace.js

@@ -68,7 +68,7 @@ export default class Namespace extends SteveModel {
         label:      this.t('namespace.move'),
         bulkable:   true,
         bulkAction: 'move',
-        enabled:    true,
+        enabled:    this.canUpdate,
         icon:       'icon icon-fork',
         weight:     3,
       });

package/models/pod.js

@@ -1,10 +1,12 @@
 import { insertAt } from '@shell/utils/array';
-import { colorForState, stateDisplay } from '@shell/plugins/dashboard-store/resource-class';
+import { colorForState, simpleColorForState, stateDisplay } from '@shell/plugins/dashboard-store/resource-class';
 import { NODE, WORKLOAD_TYPES } from '@shell/config/types';
 import { escapeHtml, shortenedImage } from '@shell/utils/string';
 import WorkloadService from '@shell/models/workload.service';
 import { deleteProperty } from '@shell/utils/object';
 import { POD_RESTARTS_REG_EX } from '@shell/types/resources/pod';
+import { useResourceCardRow } from '@shell/components/Resource/Detail/Card/StateCard/composables';
+import { POD_SHELL } from '@shell/store/features';
 
 export const WORKLOAD_PRIORITY = {
   [WORKLOAD_TYPES.DEPLOYMENT]:             1,
@@ -63,11 +65,16 @@ export default class Pod extends WorkloadService {
 
   get _availableActions() {
     const out = super._availableActions;
+    const podShellFeatureEnabled = !!this.$rootGetters['features/get'](POD_SHELL);
 
     // Add backwards, each one to the top
     insertAt(out, 0, { divider: true });
     insertAt(out, 0, this.openLogsMenuItem);
-    insertAt(out, 0, this.openShellMenuItem);
+
+    // Only add the menu item for the pod shell if the feature flag is enabled
+    if (podShellFeatureEnabled) {
+      insertAt(out, 0, this.openShellMenuItem);
+    }
 
     return out;
   }
@@ -94,9 +101,14 @@ export default class Pod extends WorkloadService {
 
   get containerActions() {
     const out = [];
+    const podShellFeatureEnabled = !!this.$rootGetters['features/get'](POD_SHELL);
 
     insertAt(out, 0, this.openLogsMenuItem);
-    insertAt(out, 0, this.openShellMenuItem);
+
+    // Only add the menu item for the container shell if the feature flag is enabled
+    if (podShellFeatureEnabled) {
+      insertAt(out, 0, this.openShellMenuItem);
+    }
 
     return out;
   }
@@ -156,6 +168,37 @@ export default class Pod extends WorkloadService {
     return initContainers.includes(container);
   }
 
+  get resourceContainers() {
+    const statuses = [...(this.status?.containerStatuses || []), ...(this.status?.initContainerStatuses || [])];
+
+    return statuses.map((s) => {
+      const state = Object.keys(s.state || {})[0] || 'unknown';
+
+      return {
+        stateDisplay:     stateDisplay(state),
+        stateSimpleColor: simpleColorForState(state),
+      };
+    });
+  }
+
+  get resourcesCardRows() {
+    const rows = [...this._resourcesCardRows];
+
+    if (this.resourceContainers.length) {
+      rows.unshift(useResourceCardRow(this.t('workload.container.titles.containers'), this.resourceContainers, 'stateSimpleColor', 'stateDisplay', '#containers'));
+    }
+
+    return rows;
+  }
+
+  get cards() {
+    return [
+      this.resourcesCard,
+      this.insightCard,
+      ...this._cards
+    ].filter((c) => c);
+  }
+
   get imageNames() {
     return this.spec.containers.map((container) => shortenedImage(container.image));
   }

package/models/provisioning.cattle.io.cluster.js

@@ -1,13 +1,16 @@
 import {
   CAPI, MANAGEMENT, NAMESPACE, NORMAN, SNAPSHOT, LOCAL_CLUSTER,
   CONFIG_MAP, AUTOSCALER_CONFIG_MAP_ID,
-  EVENT
+  EVENT, OPERATION
 } from '@shell/config/types';
 import SteveModel from '@shell/plugins/steve/steve-class';
 import { findBy } from '@shell/utils/array';
 import { get, set } from '@shell/utils/object';
 import { compare } from '@shell/utils/version';
-import { CAPI as CAPI_ANNOTATIONS } from '@shell/config/labels-annotations';
+import { IMPORTED_DAY_2_OPS } from '@shell/config/features';
+import { CAPI as CAPI_ANNOTATIONS, OPERATION_ANNOTATIONS } from '@shell/config/labels-annotations';
+import { SETTING } from '@shell/config/settings';
+import { createOperationCR } from '@shell/utils/operation-cr';
 import jsyaml from 'js-yaml';
 import { defineAsyncComponent, markRaw } from 'vue';
 import stevePaginationUtils from '@shell/plugins/steve/steve-pagination-utils';
@@ -97,7 +100,7 @@ export default class ProvCluster extends SteveModel {
 
   get canEdit() {
     // If the cluster is a KEV1 cluster, Harvester cluster, or v2 provisioning cluster that uses upstream capi infrastructure providers, then prevent edit
-    if (this.isKev1 || this.isHarvester || this.isCapiHybrid) {
+    if (this.isKev1 || this.isHarvester || this.isCapiWithoutExtension) {
       return false;
     }
 
@@ -105,7 +108,7 @@ export default class ProvCluster extends SteveModel {
   }
 
   get canCustomEdit() {
-    return !this.isCapiHybrid && super.canCustomEdit;
+    return !this.isCapiWithoutExtension && super.canCustomEdit;
   }
 
   get _availableActions() {
@@ -122,10 +125,9 @@ export default class ProvCluster extends SteveModel {
     }
     const ready = this.mgmt?.isReady;
 
+    const canDayTwoOps = ready && this.isDayTwoOpsEnabled && this.canUpdate;
     const canEditRKE2cluster = this.isRke2 && ready && this.canUpdate;
 
-    const canSnapshot = ready && this.isRke2 && this.canUpdate;
-
     const actions = [
       // Note: Actions are not supported in the Steve API, so we check
       // available actions for RKE1 clusters, but not RKE2 clusters.
@@ -153,12 +155,12 @@ export default class ProvCluster extends SteveModel {
         icon:       'icon icon-snapshot',
         bulkAction: 'snapshotBulk',
         bulkable:   true,
-        enabled:    canSnapshot,
+        enabled:    canDayTwoOps,
       }, {
         action:  'restoreSnapshotAction',
         label:   this.$rootGetters['i18n/t']('nav.restoreSnapshot'),
         icon:    'icon icon-backup-restore',
-        enabled: canSnapshot,
+        enabled: canDayTwoOps,
       }, {
         action:  'rotateCertificates',
         label:   this.$rootGetters['i18n/t']('nav.rotateCertificates'),
@@ -168,7 +170,7 @@ export default class ProvCluster extends SteveModel {
         action:  'rotateEncryptionKey',
         label:   this.$rootGetters['i18n/t']('nav.rotateEncryptionKeys'),
         icon:    'icon icon-refresh',
-        enabled: canEditRKE2cluster
+        enabled: canDayTwoOps
       },
       {
         action:  'toggleAutoscalerRunner',
@@ -301,6 +303,35 @@ export default class ProvCluster extends SteveModel {
     return this.mgmt?.isImportedRke2;
   }
 
+  get isImportedRke2K3s() {
+    return this.isImportedRke2 || this.isImportedK3s;
+  }
+
+  /**
+   * Whether day 2 operations (snapshot, restore, cert rotation, encryption key rotation)
+   * are enabled for this cluster.
+   */
+  get isDayTwoOpsEnabled() {
+    return !!(this.isRke2 || this.isImportedWithDayTwoOps);
+  }
+
+  get isDayTwoOpsFeatureEnabled() {
+    return this.$rootGetters['management/byId'](MANAGEMENT.FEATURE, IMPORTED_DAY_2_OPS)?.enabled || false;
+  }
+
+  /**
+   * Whether this is an imported RKE2/K3s cluster with day 2 operations enabled.
+   */
+  get isImportedWithDayTwoOps() {
+    const annotationExists = typeof this.metadata?.annotations?.[OPERATION_ANNOTATIONS.ENABLED] !== 'undefined';
+    const annotationEnabled = this.mgmt?.metadata?.annotations?.[OPERATION_ANNOTATIONS.ENABLED] === 'true';
+    const globalDefaultIsTrue = this.$rootGetters['management/byId'](MANAGEMENT.SETTING, SETTING.IMPORTED_CLUSTER_DAY2_OPS_DEFAULT)?.value === 'true';
+    const annotationOrGlobalEnabled = annotationEnabled || (!annotationExists && globalDefaultIsTrue);
+    const canGetOpSchema = this.$getters['schemaFor'](OPERATION.ETCD_SNAPSHOT);
+
+    return !this.isLocal && canGetOpSchema && this.isDayTwoOpsFeatureEnabled && this.isImportedRke2K3s && annotationOrGlobalEnabled;
+  }
+
   get isK3s() {
     return this.mgmt?.isK3s;
   }
@@ -319,8 +350,8 @@ export default class ProvCluster extends SteveModel {
   }
 
   // identify v2 provisioning clusters created using upstream capi infrastructure providers instead of rancher/machine
-  get isCapiHybrid() {
-    return this.mgmt?.isCapiHybrid;
+  get isCapiWithoutExtension() {
+    return this.mgmt?.isCapiHybrid && !this.mgmt?.isCAPIProvider;
   }
 
   get mgmtClusterId() {
@@ -565,6 +596,21 @@ export default class ProvCluster extends SteveModel {
         url:    `/v3/clusters/${ escape(this.mgmt.id) }?action=backupEtcd`,
         method: 'post',
       }, { root: true });
+    } else if ( this.isImportedWithDayTwoOps ) {
+      // For imported clusters with day 2 ops, create an operation CRD
+      const namespace = this.mgmt?.id;
+      const safePrefix = this.mgmt?.metadata?.name || this.mgmt?.id;
+      const spec = {
+        clusterRef: {
+          apiVersion: 'management.cattle.io/v3',
+          kind:       'Cluster',
+          name:       this.mgmt?.id,
+        }
+      };
+
+      return createOperationCR(this.$dispatch, OPERATION.ETCD_SNAPSHOT, spec, namespace, safePrefix);
+    } else if (this.isImportedRke2K3s && !this.isDayTwoOpsFeatureEnabled) {
+      throw new Error(this.$rootGetters['i18n/t']('cluster.snapshot.day2OpsNotEnabled'));
     } else {
       const now = this.spec?.rkeConfig?.etcdSnapshotCreate?.generation || 0;
       const args = { generation: now + 1 };
@@ -582,6 +628,11 @@ export default class ProvCluster extends SteveModel {
   get etcdSnapshots() {
     const allSnapshots = this.$rootGetters['management/all']({ type: SNAPSHOT });
 
+    if (this.isImportedWithDayTwoOps) {
+      return allSnapshots
+        .filter((s) => s.metadata.namespace === this.mgmt?.id && s.spec?.clusterName === this.mgmt?.metadata?.name );
+    }
+
     return allSnapshots
       .filter((s) => s.metadata.namespace === this.namespace && s.clusterName === this.name );
   }
@@ -593,8 +644,7 @@ export default class ProvCluster extends SteveModel {
   rotateCertificates(cluster = this) {
     this.$dispatch('promptModal', {
       componentProps: { cluster },
-
-      component: 'RotateCertificatesDialog'
+      component:      'RotateCertificatesDialog'
     });
   }
 
@@ -789,7 +839,7 @@ export default class ProvCluster extends SteveModel {
   }
 
   get disableResourceDetailDrawerConfigTab() {
-    return !!this.isHarvester || this.isCapiHybrid;
+    return !!this.isHarvester || this.isCapiWithoutExtension;
   }
 
   get fullDetailPageOverride() {

package/models/rke.cattle.io.etcdsnapshot.js

@@ -1,6 +1,6 @@
 import NormanModel from '@shell/plugins/steve/norman-class';
 import { SNAPSHOT } from '@shell/config/labels-annotations';
-import { CAPI } from '@shell/config/types';
+import { CAPI, DEFAULT_WORKSPACE } from '@shell/config/types';
 import { get } from '@shell/utils/object';
 import { base64Decode } from '@shell/utils/crypto';
 import { ucFirst } from '@shell/utils/string';
@@ -11,13 +11,11 @@ export default class EtcdBackup extends NormanModel {
    * Restrict actions for snapshots to restore only
    */
   get _availableActions() {
-    const enabled = this.snapshotFile?.status === STATES_ENUM.SUCCESSFUL;
-
     return [{
-      action: 'promptRestore',
-      enabled,
-      icon:   'icon icon-backup-restore',
-      label:  'Restore'
+      action:  'promptRestore',
+      enabled: this.restoreEnabled,
+      icon:    'icon icon-backup-restore',
+      label:   'Restore'
     }];
   }
 
@@ -30,7 +28,7 @@ export default class EtcdBackup extends NormanModel {
   }
 
   get clusterId() {
-    return this.cluster.id;
+    return this.cluster?.id;
   }
 
   get name() {
@@ -38,7 +36,9 @@ export default class EtcdBackup extends NormanModel {
   }
 
   get cluster() {
-    return this.$rootGetters['management/byId'](CAPI.RANCHER_CLUSTER, `${ this.metadata.namespace }/${ this.clusterName }`);
+    const ns = this.metadata?.namespace || DEFAULT_WORKSPACE;
+
+    return this.$rootGetters['management/byId'](CAPI.RANCHER_CLUSTER, `${ ns }/${ this.clusterName }`);
   }
 
   get rke2() {
@@ -49,6 +49,14 @@ export default class EtcdBackup extends NormanModel {
     return this.snapshotFile?.name || this.name;
   }
 
+  get restoreEnabled() {
+    return this.snapshotFile?.status === STATES_ENUM.SUCCESSFUL && !this.isSnapshotTooOld;
+  }
+
+  get isSnapshotTooOld() {
+    return this.snapshotFile?.createdAt <= this.cluster?.metadata?.creationTimestamp;
+  }
+
   get errorMessage() {
     const inError = get(this, 'snapshotFile.status') === STATES_ENUM.FAILED;
 

package/models/secret.js

@@ -1,5 +1,6 @@
 import r from 'jsrsasign';
 import { CERTMANAGER, KUBERNETES, UI_PROJECT_SECRET, UI_PROJECT_SECRET_COPY } from '@shell/config/labels-annotations';
+import { GITHUB_APP_SECRET_KEYS } from '@shell/config/secret';
 import { base64Decode, base64Encode } from '@shell/utils/crypto';
 import { removeObjects } from '@shell/utils/array';
 import { MANAGEMENT, SERVICE_ACCOUNT, VIRTUAL_TYPES } from '@shell/config/types';
@@ -57,6 +58,14 @@ export default class Secret extends SteveModel {
     return this._type === TYPES.SSH && !!this.data && 'known_hosts' in this.data;
   }
 
+  // A GitHub App auth secret is an Opaque secret holding the GitHub App data keys
+  get isGithubApp() {
+    return this._type === TYPES.OPAQUE && !!this.data &&
+      GITHUB_APP_SECRET_KEYS.APP_ID in this.data &&
+      GITHUB_APP_SECRET_KEYS.INSTALLATION_ID in this.data &&
+      GITHUB_APP_SECRET_KEYS.PRIVATE_KEY in this.data;
+  }
+
   get issuer() {
     const { metadata:{ annotations = {} } } = this;
 
@@ -237,6 +246,11 @@ export default class Secret extends SteveModel {
       return this.sshUser;
     } else if ( this._type === TYPES.SERVICE_ACCT ) {
       return this.metadata?.annotations?.['kubernetes.io/service-account.name'];
+    } else if ( this.isGithubApp ) {
+      const appId = base64Decode(this.data[GITHUB_APP_SECRET_KEYS.APP_ID]);
+      const installationId = base64Decode(this.data[GITHUB_APP_SECRET_KEYS.INSTALLATION_ID]);
+
+      return `${ appId } / ${ installationId }`;
     }
 
     return this.keysDisplay;
@@ -274,6 +288,11 @@ export default class Secret extends SteveModel {
 
   get subTypeDisplay() {
     const type = this._type || '';
+
+    if ( this.isGithubApp ) {
+      return this.$rootGetters['i18n/withFallback'](`secret.githubApp.label`, null, 'GitHub App');
+    }
+
     const fallback = type.replace(/^kubernetes.io\//, '');
 
     return this.$rootGetters['i18n/withFallback'](`secret.types."${ type }"`, null, fallback);