@rancher/shell 3.0.5-rc.1 → 3.0.5-rc.3

package/edit/auth/ldap/index.vue

@@ -99,7 +99,7 @@ export default {
           </template>
         </AuthBanner>
 
-        <hr>
+        <hr role="none">
 
         <AllowedPrincipals
           :provider="NAME"

package/edit/auth/oidc.vue

@@ -209,7 +209,7 @@ export default {
           </template>
         </AuthBanner>
 
-        <hr>
+        <hr role="none">
 
         <AllowedPrincipals
           :provider="NAME"

package/edit/auth/saml.vue

@@ -223,7 +223,7 @@ export default {
           </template>
         </AuthBanner>
 
-        <hr>
+        <hr role="none">
 
         <AllowedPrincipals
           :provider="NAME"

package/edit/cloudcredential.vue

@@ -100,6 +100,30 @@ export default {
   computed: {
     rke2Enabled: mapFeature(RKE2_FEATURE),
 
+    hasCustomCloudCredentialComponent() {
+      const driverName = this.driverName;
+
+      return this.$store.getters['type-map/hasCustomCloudCredentialComponent'](driverName);
+    },
+
+    cloudCredentialComponent() {
+      const driverName = this.driverName;
+
+      return this.$store.getters['type-map/importCloudCredential'](driverName);
+    },
+
+    genericCloudCredentialComponent() {
+      return this.$store.getters['type-map/importCloudCredential']('generic');
+    },
+
+    cloudComponent() {
+      if (this.hasCustomCloudCredentialComponent) {
+        return this.cloudCredentialComponent;
+      }
+
+      return this.genericCloudCredentialComponent;
+    },
+
     validationPassed() {
       return this.credCustomComponentValidation && this.nameRequiredValidation;
     },
@@ -112,14 +136,6 @@ export default {
       return this.value?.provider;
     },
 
-    cloudComponent() {
-      if (this.$store.getters['type-map/hasCustomCloudCredentialComponent'](this.driverName)) {
-        return this.$store.getters['type-map/importCloudCredential'](this.driverName);
-      }
-
-      return this.$store.getters['type-map/importCloudCredential']('generic');
-    },
-
     // array of id, label, description, initials for type selection step
     secretSubTypes() {
       const out = [];
@@ -194,7 +210,6 @@ export default {
   },
 
   methods: {
-
     createValidationChanged(passed) {
       this.credCustomComponentValidation = passed;
     },
@@ -276,7 +291,6 @@ export default {
     <Loading v-if="$fetchState.pending" />
     <CruResource
       v-else
-      :done-params="$attrs['done-params'] /* Without this, changes to the validationPassed prop end up propagating all the way to the root of the app and force a re-render when the input becomes valid. I haven't found a reasonable explanation for why this happens. */"
       :mode="mode"
       :validation-passed="validationPassed"
       :selected-subtype="value._type"

package/edit/management.cattle.io.user.vue

@@ -15,6 +15,8 @@ export default {
     ChangePassword, GlobalRoleBindings, CruResource, LabeledInput, Loading
   },
 
+  emits: ['update:mode'],
+
   mixins: [
     CreateEditView
   ],
@@ -40,6 +42,7 @@ export default {
         roles:        !showGlobalRoles,
         rolesChanged: false,
       },
+      watchOverride: false,
     };
   },
 
@@ -115,7 +118,11 @@ export default {
         this.$router.replace({ name: this.doneRoute });
         buttonDone(true);
       } catch (err) {
-        this.errors = exceptionToErrorsArray(err);
+        if (err?.message?.includes('errors due to escalation')) {
+          this.errors = [this.t('rbac.errors.escalation')];
+        } else {
+          this.errors = exceptionToErrorsArray(err);
+        }
         buttonDone(false);
       }
     },
@@ -150,7 +157,7 @@ export default {
 
       const normanUser = await this.$store.dispatch('rancher/find', {
         type: NORMAN.USER,
-        id:   this.value.id,
+        id:   this.value.id || this.user?.id,
       });
 
       // Save change of password
@@ -181,8 +188,25 @@ export default {
     },
 
     async updateRoles(userId) {
-      if (this.$refs.grb) {
+      if (!this.$refs.grb) {
+        return;
+      }
+
+      try {
         await this.$refs.grb.save(userId);
+      } catch (err) {
+        if (this.isCreate) {
+          this.watchOverride = true;
+          this.$emit(
+            'update:mode',
+            {
+              userId,
+              mode:     _EDIT,
+              resource: 'management.cattle.io.user',
+            }
+          );
+        }
+        throw err;
       }
     }
   }
@@ -255,6 +279,7 @@ export default {
         :user-id="value.id || liveValue.id"
         :mode="mode"
         :real-mode="realMode"
+        :watch-override="watchOverride"
         type="user"
         @hasChanges="validation.rolesChanged = $event"
         @canLogIn="validation.roles = $event"

package/edit/namespace.vue

@@ -11,7 +11,6 @@ import Tab from '@shell/components/Tabbed/Tab';
 import ResourceTabs from '@shell/components/form/ResourceTabs/index.vue';
 import CruResource from '@shell/components/CruResource';
 import { PROJECT_ID, _VIEW, FLAT_VIEW, _CREATE } from '@shell/config/query-params';
-import MoveModal from '@shell/components/MoveModal';
 import ResourceQuota from '@shell/components/form/ResourceQuota/Namespace';
 import Loading from '@shell/components/Loading';
 import { HARVESTER_TYPES, RANCHER_TYPES } from '@shell/components/form/ResourceQuota/shared';
@@ -31,8 +30,7 @@ export default {
     PodSecurityAdmission,
     ResourceQuota,
     Tab,
-    ResourceTabs,
-    MoveModal
+    ResourceTabs
   },
 
   mixins:       [CreateEditView],
@@ -277,6 +275,5 @@ export default {
         />
       </Tab>
     </ResourceTabs>
-    <MoveModal v-if="projects" />
   </CruResource>
 </template>

package/edit/networking.k8s.io.networkpolicy/PolicyRule.vue

@@ -5,6 +5,9 @@ import ArrayListGrouped from '@shell/components/form/ArrayListGrouped';
 import { _EDIT } from '@shell/config/query-params';
 import PolicyRuleTarget from '@shell/edit/networking.k8s.io.networkpolicy/PolicyRuleTarget';
 
+// Components shown for Network Policy --> Ingress/Egress Rules --> Rule Type are...
+// Edit Network Policy --> `PolicyRules` 1 --> M `PolicyRule` 1 --> M `PolicyRuleTarget`
+
 export default {
   components: {
     ArrayListGrouped, PolicyRulePort, PolicyRuleTarget
@@ -28,18 +31,6 @@ export default {
       type:    String,
       default: ''
     },
-    allPods: {
-      type:    Array,
-      default: () => {
-        return [];
-      },
-    },
-    allNamespaces: {
-      type:    Array,
-      default: () => {
-        return [];
-      },
-    },
   },
   data() {
     return { targetKey: this.type === 'ingress' ? 'from' : 'to' };
@@ -71,8 +62,6 @@ export default {
               :mode="mode"
               :type="type"
               :namespace="namespace"
-              :all-namespaces="allNamespaces"
-              :all-pods="allPods"
               :data-testid="`policy-rule-target-${props.i}`"
             />
           </template>

package/edit/networking.k8s.io.networkpolicy/PolicyRuleTarget.vue

@@ -4,12 +4,13 @@ import { LabeledInput } from '@components/Form/LabeledInput';
 import LabeledSelect from '@shell/components/form/LabeledSelect';
 import { _EDIT } from '@shell/config/query-params';
 import MatchExpressions from '@shell/components/form/MatchExpressions';
-import { convert, matching, simplify } from '@shell/utils/selector';
-import { POD } from '@shell/config/types';
+import { convert, simplify } from '@shell/utils/selector';
+import { NAMESPACE, POD } from '@shell/config/types';
 import ArrayList from '@shell/components/form/ArrayList';
 import { Banner } from '@components/Banner';
-import throttle from 'lodash/throttle';
+import debounce from 'lodash/debounce';
 import { isValidCIDR } from '@shell/utils/validators/cidr';
+import { matching } from '@shell/utils/selector-typed';
 
 const TARGET_OPTIONS = {
   IP_BLOCK:                   'ipBlock',
@@ -18,6 +19,9 @@ const TARGET_OPTIONS = {
   NAMESPACE_AND_POD_SELECTOR: 'namespaceAndPodSelector',
 };
 
+// Components shown for Network Policy --> Ingress/Egress Rules --> Rule Type are...
+// Edit Network Policy --> `PolicyRules` 1 --> M `PolicyRule` 1 --> M `PolicyRuleTarget`
+
 export default {
   components: {
     ArrayList, Banner, LabeledInput, LabeledSelect, MatchExpressions
@@ -41,18 +45,6 @@ export default {
       type:    String,
       default: ''
     },
-    allPods: {
-      type:    Array,
-      default: () => {
-        return [];
-      },
-    },
-    allNamespaces: {
-      type:    Array,
-      default: () => {
-        return [];
-      },
-    },
   },
   data() {
     if (!this.value[TARGET_OPTIONS.IP_BLOCK] &&
@@ -66,18 +58,26 @@ export default {
     }
 
     return {
-      portOptions:        ['TCP', 'UDP'],
-      matchingPods:       {},
-      matchingNamespaces: {},
-      invalidCidr:        null,
-      invalidCidrs:       [],
+      portOptions:  ['TCP', 'UDP'],
+      matchingPods: {
+        matches: [], matched: 0, total: 0
+      },
+      matchingNamespaces: {
+        matches: [], matched: 0, total: 0
+      },
+      invalidCidr:            null,
+      invalidCidrs:           [],
       POD,
       TARGET_OPTIONS,
-      targetOptions:      Object.values(TARGET_OPTIONS),
-      throttleTime:       250,
+      targetOptions:          Object.values(TARGET_OPTIONS),
+      inStore:                this.$store.getters['currentProduct'].inStore,
+      debouncedUpdateMatches: debounce(this.updateMatches, 500)
     };
   },
   computed: {
+    /**
+     * of type matchExpression aka `KubeLabelSelectorExpression[]`
+     */
     podSelectorExpressions: {
       get() {
         return convert(
@@ -89,6 +89,9 @@ export default {
         this.value[TARGET_OPTIONS.POD_SELECTOR] = simplify(podSelectorExpressions);
       }
     },
+    /**
+     * of type matchExpression aka `KubeLabelSelectorExpression[]`
+     */
     namespaceSelectorExpressions: {
       get() {
         return convert(
@@ -145,39 +148,40 @@ export default {
   },
   watch: {
     namespace: {
-      handler:   'updateMatches',
-      immediate: true
-    },
-    allNamespaces: {
-      handler:   'updateMatches',
+      handler:   'debouncedUpdateMatches',
       immediate: true
     },
     'value.podSelector': {
-      handler:   'updateMatches',
+      handler:   'debouncedUpdateMatches',
       immediate: true
     },
     'value.namespaceSelector': {
-      handler:   'updateMatches',
+      handler:   'debouncedUpdateMatches',
       immediate: true
     },
     'value.ipBlock.cidr':   'validateCIDR',
     'value.ipBlock.except': 'validateCIDR',
     podSelectorExpressions: {
-      handler:   'updateMatches',
+      handler:   'debouncedUpdateMatches',
       immediate: true
     },
     namespaceSelectorExpressions: {
-      handler:   'updateMatches',
+      handler:   'debouncedUpdateMatches',
       immediate: true
     }
   },
+
+  fetch() {
+    this.debouncedUpdateMatches();
+  },
+
   methods: {
-    updateMatches() {
-      throttle(() => {
-        this.matchingNamespaces = this.getMatchingNamespaces();
-        this.matchingPods = this.getMatchingPods();
-      }, this.throttle, { leading: true })();
+    async updateMatches() {
+      // Note - needs to be sequential as getMatchingPods requires matchingNamespaces to be up-to-date
+      this.matchingNamespaces = await this.getMatchingNamespaces();
+      this.matchingPods = await this.getMatchingPods();
     },
+
     validateCIDR() {
       const exceptCidrs = this.value[TARGET_OPTIONS.IP_BLOCK]?.except || [];
 
@@ -191,34 +195,25 @@ export default {
         this.invalidCidr = null;
       }
     },
-    getMatchingPods() {
-      const namespaces = this.targetType === TARGET_OPTIONS.NAMESPACE_AND_POD_SELECTOR ? this.matchingNamespaces.matches : [{ id: this.namespace }];
-      const allInNamespace = this.allPods.filter((pod) => namespaces.some((ns) => ns.id === pod.metadata.namespace));
-      const match = matching(allInNamespace, this.podSelectorExpressions);
-      const matched = match.length || 0;
-      const sample = match[0]?.nameDisplay;
 
-      return {
-        matched,
-        matches: match,
-        none:    matched === 0,
-        sample,
-        total:   allInNamespace.length,
-      };
+    async getMatchingPods() {
+      return await matching({
+        labelSelector: { matchExpressions: this.podSelectorExpressions },
+        type:          POD,
+        $store:        this.$store,
+        inStore:       this.inStore,
+        namespace:     this.targetType === TARGET_OPTIONS.NAMESPACE_AND_POD_SELECTOR ? this.matchingNamespaces.matches.map((ns) => ns.id) : this.namespace,
+        transient:     true,
+      });
     },
-    getMatchingNamespaces() {
-      const allNamespaces = this.allNamespaces;
-      const match = matching(allNamespaces, this.namespaceSelectorExpressions);
-      const matched = match.length || 0;
-      const sample = match[0]?.nameDisplay;
-
-      return {
-        matched,
-        matches: match,
-        none:    matched === 0,
-        sample,
-        total:   allNamespaces.length,
-      };
+    async getMatchingNamespaces() {
+      return await matching({
+        labelSelector: { matchExpressions: this.namespaceSelectorExpressions },
+        type:          NAMESPACE,
+        $store:        this.$store,
+        inStore:       this.inStore,
+        transient:     true,
+      });
     },
   }
 };

package/edit/networking.k8s.io.networkpolicy/PolicyRules.vue

@@ -6,6 +6,9 @@ import Tab from '@shell/components/Tabbed/Tab';
 import Tabbed from '@shell/components/Tabbed';
 import { removeAt } from '@shell/utils/array';
 
+// Components shown for Network Policy --> Ingress/Egress Rules --> Rule Type are...
+// Edit Network Policy --> `PolicyRules` 1 --> M `PolicyRule` 1 --> M `PolicyRuleTarget`
+
 export default {
   components: {
     PolicyRule, Tabbed, Tab
@@ -24,18 +27,6 @@ export default {
       type:    String,
       default: 'ingress'
     },
-    allPods: {
-      type:    Array,
-      default: () => {
-        return [];
-      },
-    },
-    allNamespaces: {
-      type:    Array,
-      default: () => {
-        return [];
-      },
-    },
   },
   data() {
     if (!this.value.spec[this.type]) {
@@ -82,8 +73,6 @@ export default {
               :mode="mode"
               :type="type"
               :namespace="value.metadata.namespace"
-              :all-namespaces="allNamespaces"
-              :all-pods="allPods"
             />
           </Tab>
         </Tabbed>

package/edit/networking.k8s.io.networkpolicy/__tests__/PolicyRuleTarget.test.ts

@@ -2,6 +2,8 @@ import { mount } from '@vue/test-utils';
 import PolicyRuleTarget from '@shell/edit/networking.k8s.io.networkpolicy/PolicyRuleTarget';
 import mock from '@shell/edit/networking.k8s.io.networkpolicy/__tests__/utils/mock.json';
 import { PolicyRuleTargetSelectors } from '@shell/edit/networking.k8s.io.networkpolicy/__tests__/utils/selectors.test.ts';
+import { nextTick } from 'vue';
+import { COUNT, NAMESPACE, POD } from '@shell/config/types';
 
 type MatchData = {
   matched: number;
@@ -11,29 +13,6 @@ type MatchData = {
   sample?: string;
 }
 
-const newNamespace = {
-  id:       'new-namespace',
-  type:     'namespace',
-  kind:     'Namespace',
-  spec:     { finalizers: ['kubernetes'] },
-  status:   { phase: 'Active' },
-  metadata: {
-    annotations:       { user: 'john' },
-    name:              'default',
-    creationTimestamp: '2024-01-31T10:24:03Z',
-    fields:            ['default', 'Active', '1d'],
-    labels:            { user: 'john' },
-    relationships:     null,
-    resourceVersion:   '1',
-    state:             {
-      error:         false,
-      message:       '',
-      name:          'active',
-      transitioning: false
-    }
-  }
-};
-
 describe.each([
   'view',
   'edit',
@@ -45,18 +24,60 @@ describe.each([
       return { throttleTime: 0 };
     },
     props: {
-      namespace:     mock.defaultNamespace,
-      allNamespaces: mock.allNamespaces,
-      allPods:       mock.allPods,
-      type:          'ingress',
+      namespace: mock.defaultNamespace,
+      type:      'ingress',
       mode
     },
     global: {
       mocks: {
         $store: {
+          dispatch: (action: string, { type }: { type: string}) => {
+            switch (action) {
+            case 'cluster/findAll':
+              switch (type) {
+              case NAMESPACE:
+                return mock.allNamespaces;
+              case POD:
+                return mock.allPods;
+              default:
+                throw new Error(`unknown type ${ type }`);
+              }
+            default:
+              throw new Error(`unknown action ${ action }`);
+            }
+          },
           getters: {
-            'i18n/exists': mockExists,
-            'i18n/t':      (key: string, matchData: MatchData) => matchData ? `${ key }-${ matchData.total }` : key,
+            'i18n/exists':  mockExists,
+            'i18n/t':       (key: string, matchData: MatchData) => matchData ? `${ key }-${ matchData.total }` : key,
+            currentProduct: { inStore: 'cluster' },
+            'cluster/all':  (type: string) => {
+              switch (type) {
+              case COUNT:
+                return mock.counts;
+              default:
+                throw new Error(`unknown type ${ type }`);
+              }
+            },
+            'cluster/findAll': ({ type }: {type: string}) => {
+              switch (type) {
+              case NAMESPACE:
+                return mock.allNamespaces;
+              case POD:
+                return mock.allPods;
+              default:
+                throw new Error(`unknown type ${ type }`);
+              }
+            },
+            'cluster/schemaFor': (type: string) => {
+              switch (type) {
+              case NAMESPACE:
+                return { attributes: { namespaced: false } };
+              case POD:
+                return { attributes: { namespaced: true } };
+              default:
+                throw new Error(`unknown type ${ type }`);
+              }
+            }
           }
         }
       },
@@ -64,6 +85,20 @@ describe.each([
   });
 
   describe(`${ mode } mode`, () => {
+    beforeEach(() => {
+      jest.useFakeTimers();
+    });
+
+    afterEach(() => {
+      jest.runOnlyPendingTimers();
+      jest.useRealTimers();
+    });
+
+    const waitForUpdatedMatched = async() => {
+      jest.advanceTimersByTime(1000); // Wait for debounced call to fetch updated cluster list
+      await nextTick(); // Wait for changes to cluster list to trigger changes
+    };
+
     it('should display ip-block selector rule', async() => {
       const ipBlock = mock.selectors.ipBlock;
 
@@ -83,6 +118,7 @@ describe.each([
     });
 
     it('should display namespace selector rule', async() => {
+      // This test needs improving - mock data needs to contain more than applicable to selector
       const namespaceSelector = mock.selectors.namespace;
 
       await wrapper.setProps({ value: { namespaceSelector } });
@@ -92,6 +128,12 @@ describe.each([
       // Check rule type selector
       expect(wrapper.vm.targetType).toBe('namespaceSelector');
 
+      // Check the matching namespaces displayed by the banner
+      expect(wrapper.vm.$data.matchingNamespaces.matched).toBe(0);
+
+      await wrapper.vm.updateMatches();
+      await waitForUpdatedMatched();
+
       // Check the matching namespaces displayed by the banner
       expect(wrapper.vm.$data.matchingNamespaces.matched).toBe(1);
 
@@ -105,21 +147,10 @@ describe.each([
       expect(selectors.namespaceAndPod.podRule.exists()).toBe(false);
 
       expect(selectors.namespace.element).toBeDefined();
-
-      // Updating allNamespace should update the matching namespaces message too
-      await wrapper.setProps({
-        allNamespaces: [
-          ...wrapper.vm.$props.allNamespaces,
-          newNamespace
-        ]
-      });
-
-      const expectedTotal = 3;
-
-      expect(wrapper.vm.$data.matchingNamespaces.total).toBe(expectedTotal);
     });
 
     it('should display pod selector rule', async() => {
+      // This test needs improving - mock data needs to contain more than applicable to selector
       const podSelector = mock.selectors.pod;
 
       await wrapper.setProps({ value: { podSelector } });

package/edit/networking.k8s.io.networkpolicy/__tests__/utils/mock.json

@@ -154,5 +154,21 @@
         }
       }
     }
-  ]
+  ],
+  "counts": [{
+    "counts": {
+      "namespace": {
+        "summary": {
+          "count": 1
+        }
+      },
+      "pod": {
+        "namespaces": {
+          "default": {
+            "count": 1
+          }
+        }
+      }
+    }
+  }]
 }