@skyhook-io/k8s-ui 1.18.2 → 1.20.0

package/src/components/gitops/insights/insights-helpers.ts

@@ -47,9 +47,11 @@ export function changeHealth(change: GitOpsChange): GitOpsHealthStatus {
   return normalizeHealthStatus(change.health)
 }
 
-export function missingResourceMessage(sync?: string): string {
-  return sync === 'Synced'
-    ? 'Argo reports this resource as synced, but it is not present in the cluster. Refresh the application to check its status.'
+export function missingResourceMessage(sync?: string, context?: { hazard?: string; rolledBack?: boolean }): string {
+  if (sync === 'Synced') return 'Argo reports this resource as synced, but it is not present in the cluster. Refresh the application to check its status.'
+  if (context?.hazard) return 'Not present in the cluster. See the sync warning above before syncing this Application.'
+  return context?.rolledBack
+    ? 'Declared in Git but not present in the cluster after a rollback. Sync can recreate it and undo the rollback.'
     : 'Not present in the cluster. Sync the application to create it.'
 }
 
@@ -158,6 +160,18 @@ export function entryTone(item: GitOpsHistoryItem): EntryTone {
   return { dot: SEVERITY_DOT.neutral, inferredFrom: 'no phase information' }
 }
 
+// historyRollbackBlockedReason is why a history row's Rollback button is
+// disabled, or undefined when it can roll back. An entry the backend marks
+// not rollbackable is refused by the rollback API whatever else changes, so
+// its reason wins over the app-wide one (auto-sync), which the operator can
+// fix. A Radar that predates `rollbackable` omits it; the API decides there.
+export function historyRollbackBlockedReason(item: GitOpsHistoryItem, appBlockedReason?: string): string | undefined {
+  if (item.rollbackable === false) {
+    return "This entry records no source, so Argo CD can't roll back to it. Sync to its revision instead."
+  }
+  return appBlockedReason
+}
+
 // Compact a source string for inline display. Argo emits the full GitHub URL
 // followed by " · path/within/repo", which dominates the timeline row when
 // rendered raw. Strip the protocol+host (full string still shown on hover via

package/src/components/issues/IssueGuidance.test.tsx

@@ -0,0 +1,190 @@
+// @vitest-environment jsdom
+import { act } from 'react'
+import { createRoot, type Root } from 'react-dom/client'
+import { afterEach, beforeEach, describe, expect, it } from 'vitest'
+import { GitOpsIssuesBand } from '../gitops/insights/GitOpsInsightViews'
+import { IssueRow } from './IssuesView'
+import { ResourceIssuesSection } from './ResourceIssuesSection'
+import type { GitOpsIssue } from '../../types/gitops-insights'
+import type { Issue } from './types'
+
+Object.assign(globalThis, { IS_REACT_ACT_ENVIRONMENT: true })
+
+const primary = 'The render includes none of the resources this Application manages. A sync with Prune enabled could delete all of them. Prune=false blocks direct Argo pruning; Prune=confirm requires confirmation. Pruning a rendered Namespace deletes its contents, regardless of their Prune options. Check the source path, targetRevision, Helm values, and Kustomize or directory include/exclude settings first.'
+const secondary = [
+  'If this Application should go away: remove it from the ApplicationSet generator if generated; while the generator still emits it, the ApplicationSet recreates it. Check whether the generated Application survives; its ApplicationSet sync policy may keep it. If it survives, delete it explicitly with the intended cascade choice. For a plain Application, delete the Application. Cleanup follows the cascade/resources finalizer choice and Delete=false / Delete=confirm, not Prune options.',
+  'If it should render empty: set syncPolicy.automated.allowEmpty: true in the Application or its ApplicationSet template. This turns off the empty-render guard for all future syncs.',
+]
+const title = 'If removing all managed resources is intended'
+const cause = 'Argo CD blocked auto-sync because the render includes none of the resources this Application manages.'
+const guard: GitOpsIssue = {
+  severity: 'critical', scope: 'condition', reason: 'AutoSyncBlockedEmpty',
+  message: 'Auto-sync blocked: the render includes none of the managed resources', cause,
+  action: [primary, ...secondary].join(' '), actionPrimary: primary,
+  actionSecondaryTitle: title, actionSecondary: secondary,
+}
+const issue: Issue = {
+  id: 'guard', severity: 'critical', source: 'problem',
+  category: 'gitops_sync_failed', category_group: 'gitops', grouping_scope: 'unknown',
+  kind: 'Application', group: 'argoproj.io', namespace: 'argocd', name: 'empty',
+  reason: guard.reason, message: guard.message, cause,
+  action: guard.action, action_primary: primary,
+  action_secondary_title: title, action_secondary: secondary,
+}
+
+let root: Root
+let element: HTMLDivElement
+beforeEach(() => {
+  element = document.createElement('div')
+  document.body.appendChild(element)
+  root = createRoot(element)
+})
+afterEach(async () => {
+  await act(async () => root.unmount())
+  element.remove()
+})
+
+function disclosure() {
+  const button = [...element.querySelectorAll('button')].find((b) => b.textContent?.includes(title))!
+  expect(button).toBeDefined()
+  return { button, panel: document.getElementById(button.getAttribute('aria-controls')!)! }
+}
+
+function checkPrimaryVisible() {
+  for (const text of [primary, cause]) {
+    const paragraph = [...element.querySelectorAll('p')].find((p) => p.textContent === text)!
+    expect(paragraph).toBeDefined()
+    expect(paragraph.closest('[inert]')).toBeNull()
+  }
+  expect(element.querySelector('button button')).toBeNull()
+}
+
+async function checkDisclosure() {
+  const { button, panel } = disclosure()
+  expect(button.getAttribute('aria-expanded')).toBe('false')
+  expect(panel.style.gridTemplateRows).toBe('0fr')
+  expect(panel.querySelector('[inert]')).not.toBeNull()
+  checkPrimaryVisible()
+  await act(async () => button.click())
+  expect(button.getAttribute('aria-expanded')).toBe('true')
+  expect(panel.style.gridTemplateRows).toBe('1fr')
+  expect(panel.querySelector('[inert]')).toBeNull()
+  for (const paragraph of secondary) expect(panel.textContent).toContain(paragraph)
+  await act(async () => button.click())
+  expect(button.getAttribute('aria-expanded')).toBe('false')
+  expect(panel.querySelector('[inert]')).not.toBeNull()
+}
+
+describe('empty-render guidance', () => {
+  it('shows primary guidance on the detail band and opens both intended-render paths', async () => {
+    await act(async () => root.render(<GitOpsIssuesBand issues={[guard]} />))
+    await checkDisclosure()
+  })
+
+  it('keeps the headline guidance independent of the collapsed detail stack', async () => {
+    const drift: GitOpsIssue = { severity: 'warning', scope: 'condition', reason: 'OtherWarning', message: 'Another condition' }
+    await act(async () => root.render(<GitOpsIssuesBand issues={[guard, drift]} />))
+    await checkDisclosure()
+    const stack = [...element.querySelectorAll('button')].find((b) => b.textContent?.includes('AutoSyncBlockedEmpty'))!
+    expect(stack.getAttribute('aria-expanded')).toBe('false')
+  })
+
+  it('opens guidance on a lower detail row after expanding the stack', async () => {
+    const first: GitOpsIssue = { severity: 'critical', scope: 'condition', reason: 'ComparisonError', message: 'Cannot render' }
+    await act(async () => root.render(<GitOpsIssuesBand issues={[first, guard]} />))
+    const stack = [...element.querySelectorAll('button')].find((b) => b.textContent?.includes('ComparisonError'))!
+    await act(async () => stack.click())
+    await checkDisclosure()
+  })
+
+  it.each([false, true])('shows split guidance on the cluster Issues row (open=%s)', async (open) => {
+    await act(async () => root.render(<IssueRow issue={issue} open={open} onToggle={() => {}} />))
+    await checkDisclosure()
+  })
+
+  it('shows primary guidance and disclosure in the resource drawer without expanding its issue', async () => {
+    await act(async () => root.render(<ResourceIssuesSection issues={[issue]} />))
+    await checkDisclosure()
+  })
+
+  it('shows complete action when presentation fields are absent', async () => {
+    const { actionPrimary: _primary, actionSecondaryTitle: _title, actionSecondary: _secondary, ...plain } = guard
+    await act(async () => root.render(<GitOpsIssuesBand issues={[plain]} />))
+    expect(element.textContent).toContain(guard.action)
+    expect(element.querySelectorAll('button[aria-controls]')).toHaveLength(0)
+  })
+})
+
+const moveSteps = [
+  "Check this Application's sync options for FailOnSharedResource=true. If set, the sync will refuse the takeover. Stop unless taking it over is intended and allowed.",
+  "Note the resource's live UID.",
+  'Sync this Application.',
+]
+const movePrimary = "To leave it with Application payments, remove it from this Application's source."
+const moveTitle = 'To move it to this Application'
+const move: GitOpsIssue = {
+  severity: 'warning', scope: 'condition', reason: 'SharedResourceWarning', message: 'Also tracked by payments',
+  action: `${movePrimary} ${moveTitle}: ${moveSteps.join(' ')}`, actionPrimary: movePrimary,
+  actionSecondaryTitle: moveTitle, actionSecondary: moveSteps,
+}
+
+describe('shared-resource move guidance', () => {
+  it.each(['detail', 'cluster'] as const)('renders numbered steps on the %s surface', async (surface) => {
+    const row: Issue = { ...issue, reason: move.reason, message: move.message, action: move.action,
+      action_primary: movePrimary, action_secondary_title: moveTitle, action_secondary: moveSteps }
+    await act(async () => root.render(surface === 'detail'
+      ? <GitOpsIssuesBand issues={[move]} />
+      : <IssueRow issue={row} open={true} onToggle={() => {}} />))
+    const button = [...element.querySelectorAll('button')].find((b) => b.textContent?.includes(moveTitle))!
+    expect(button).toBeDefined()
+    await act(async () => button.click())
+    const panel = document.getElementById(button.getAttribute('aria-controls')!)!
+    expect([...panel.querySelectorAll('ol > li')].map((li) => li.textContent)).toEqual(moveSteps)
+    expect(panel.querySelector('[inert]')).toBeNull()
+    expect(element.textContent).toContain(movePrimary)
+  })
+})
+
+describe('cluster sync hazards', () => {
+  const hazard = 'Resolve shared ownership before syncing: another Application can take tracking back.'
+  it.each([undefined, { nextStep: 'Host next step', cause: 'Host cause' }])('keeps a warning ahead of any next-step source (%j)', async (diagnosisSource) => {
+    await act(async () => root.render(<IssueRow
+      issue={{ ...issue, action_primary: undefined, action_secondary: undefined, action_secondary_title: undefined, hazard }}
+      open={true} onToggle={() => {}} diagnosisSource={diagnosisSource} />))
+    const warning = [...element.querySelectorAll('p')].find((p) => p.textContent === hazard)!
+    expect(warning).toBeDefined()
+    expect(warning.closest('.text-warning-text')).not.toBeNull()
+    expect(warning.closest('[inert]')).toBeNull()
+    expect(element.textContent!.indexOf(hazard)).toBeLessThan(element.textContent!.indexOf(diagnosisSource?.nextStep ?? primary))
+    if (diagnosisSource) expect(element.textContent).toContain(diagnosisSource.nextStep)
+  })
+
+  it('shows a hazard on a collapsed row with no split guidance or action', async () => {
+    await act(async () => root.render(<IssueRow
+      issue={{ ...issue, action: undefined, action_primary: undefined, action_secondary: undefined, action_secondary_title: undefined, hazard }}
+      open={false} onToggle={() => {}} diagnosisSource={{ nextStep: 'Host next step' }} />))
+    const warning = [...element.querySelectorAll('p')].find((p) => p.textContent === hazard)!
+    expect(warning).toBeDefined()
+    expect(warning.closest('[inert]')).toBeNull()
+    expect(warning.closest('.text-warning-text')).not.toBeNull()
+  })
+})
+
+describe('hazard text retained only once in presentation', () => {
+  it.each([false, true])('keeps empty-render guidance and one warning (open=%s)', async (open) => {
+    await act(async () => root.render(<IssueRow issue={{ ...issue, hazard: primary }} open={open} onToggle={() => {}} />))
+    expect([...element.querySelectorAll('p')].filter((p) => p.textContent === primary)).toHaveLength(1)
+    await checkDisclosure()
+  })
+
+  it.each(['hazard only', 'appended hazard'])('keeps one warning for %s actions', async (mode) => {
+    const hazard = 'Sync can take over shared tracking.'
+    const nextStep = "Open the application's sync operation details."
+    const action = mode === 'hazard only' ? hazard : `${nextStep} ${hazard}`
+    await act(async () => root.render(<IssueRow issue={{ ...issue, hazard, action,
+      action_primary: undefined, action_secondary: undefined, action_secondary_title: undefined }} open={true} onToggle={() => {}} />))
+    expect(element.textContent!.split(hazard)).toHaveLength(2)
+    if (mode === 'hazard only') expect(element.textContent).not.toContain('Next step')
+    else expect(element.textContent).toContain(nextStep)
+  })
+})

package/src/components/issues/IssueGuidance.tsx

@@ -0,0 +1,48 @@
+import { AlertTriangle } from 'lucide-react'
+import { Disclosure } from '../ui/Disclosure'
+
+export function issueGuidanceSummary(action?: string, primary?: string, hazard?: string) {
+  const summary = primary || action
+  if (!hazard || !summary) return summary
+  if (summary === hazard) return undefined
+  return summary.endsWith(` ${hazard}`) ? summary.slice(0, -hazard.length - 1) : summary
+}
+
+export function IssueGuidance({ action, primary, secondaryTitle, secondary, ordered, hazard, className }: {
+  action?: string
+  /** Replaces a supplied action; primary alone renders no action text. */
+  primary?: string
+  /** Paired with secondary; no disclosure is shown without both. */
+  secondaryTitle?: string
+  /** Paired with secondaryTitle; no disclosure is shown without both. */
+  secondary?: string[]
+  ordered?: boolean
+  hazard?: string
+  className?: string
+}) {
+  if (!action && !hazard && !(secondaryTitle && secondary?.length)) return null
+  return (
+    <div className={className}>
+      {hazard && (
+        <div className="mb-2 flex items-start gap-2 text-warning-text">
+          <AlertTriangle className="mt-0.5 h-4 w-4 shrink-0" />
+          <p>{hazard}</p>
+        </div>
+      )}
+      {action && <p>{primary || action}</p>}
+      {secondaryTitle && secondary && (
+        <Disclosure summary={secondaryTitle} className="mt-2" summaryClassName="font-medium">
+          {ordered ? (
+            <ol className="list-decimal space-y-2 pl-5 pt-2">
+              {secondary.map((step) => <li key={step}>{step}</li>)}
+            </ol>
+          ) : (
+            <div className="space-y-2 pt-2">
+              {secondary.map((paragraph) => <p key={paragraph}>{paragraph}</p>)}
+            </div>
+          )}
+        </Disclosure>
+      )}
+    </div>
+  )
+}

package/src/components/issues/IssuesView.tsx

@@ -1,7 +1,8 @@
+import { IssueGuidance, issueGuidanceSummary } from './IssueGuidance'
 import { summarizeSchedulerMessage } from '../resources/resource-utils'
 import { useMemo, useState, type ComponentType, type ReactNode } from 'react';
 import { AlertOctagon, AlertTriangle, ArrowRight, CircleCheck, Clock, Eraser, ExternalLink, Layers, Terminal, Workflow } from 'lucide-react';
-import { CardBody, CardSection, ClusterName, Disclosure, EmptyState, KIND_CHIP_CLASS, TerminalBlock } from '../ui';
+import { CardSection, ClusterName, Disclosure, EmptyState, KIND_CHIP_CLASS, TerminalBlock } from '../ui';
 import { Collapse, CollapseChevron, useDisclosure } from '../ui/Collapse';
 import { Tooltip } from '../ui/Tooltip';
 import { formatCompactAge, formatRelativeAgeTime } from '../../utils/format';
@@ -368,6 +369,15 @@ export function IssueRow({
         </div>
       </div>
 
+      {(issue.action_primary || issue.hazard) && (
+        <Collapse open={!open} unmountOnExit>
+          <div className="px-4 pb-3 pl-6 text-xs">
+            {issue.cause && <p className="mb-1 text-theme-text-primary">{issue.cause}</p>}
+            <IssueGuidance hazard={issue.hazard} action={issue.action_primary ? issueGuidanceSummary(issue.action, issue.action_primary, issue.hazard) : undefined} secondaryTitle={issue.action_secondary_title} secondary={issue.action_secondary} ordered={issue.reason === 'SharedResourceWarning'} className="text-theme-text-tertiary" />
+          </div>
+        </Collapse>
+      )}
+
       {/* Details unmount after the close transition: a list can hold hundreds
           of rows and the body is the expensive part, so closed rows stay light. */}
       <Collapse open={open} unmountOnExit id={panelId}>
@@ -509,11 +519,13 @@ function Diagnosis({ issue, source }: { issue: Issue; source?: IssueDiagnosisSou
       </>
     ) : undefined;
 
+  const guidanceSummary = issueGuidanceSummary(issue.action, issue.action_primary, issue.hazard);
   const hasNextStep =
-    !!issue.action || !!sourceNextStep || (issue.remediation_kind === 'create-namespace' && !!issue.remediation_target);
+    !!guidanceSummary || !!issue.action_secondary?.length || !!sourceNextStep || (issue.remediation_kind === 'create-namespace' && !!issue.remediation_target);
 
   return (
     <div className="flex flex-col divide-y divide-theme-border/70 [&>*]:py-4 [&>*:first-child]:pt-0 [&>*:last-child]:pb-0">
+      <IssueGuidance hazard={issue.hazard} className="text-sm leading-relaxed" />
       {/* When a parsed cause replaces the detector text, the terse reason code
           (CrashLoopBackOff, FailedMount…) rides the eyebrow — it's the greppable
           identifier operators anchor on, and the collapsed header drops it while
@@ -547,7 +559,7 @@ function Diagnosis({ issue, source }: { issue: Issue; source?: IssueDiagnosisSou
           tone="fix"
           labelExtra={nextStepAttribution ?? undefined}
         >
-          {sourceNextStep ?? (issue.action ? <CardBody>{issue.action}</CardBody> : null)}
+          {sourceNextStep ?? <IssueGuidance action={guidanceSummary} secondaryTitle={issue.action_secondary_title} secondary={issue.action_secondary} ordered={issue.reason === 'SharedResourceWarning'} className="text-sm leading-relaxed text-theme-text-secondary" />}
           {/* Survives an override: this is a structured one-click fix with an
               apply path, not advice competing with the host's. */}
           {issue.remediation_kind === 'create-namespace' && issue.remediation_target ? (

package/src/components/issues/ResourceIssuesSection.tsx

@@ -10,10 +10,12 @@ export function ResourceIssuesSection({
   subjectResource,
   compact,
   renderDetailSection,
+  heading = "Operational issues",
 }: {
   compact?: boolean
   renderDetailSection?: (ctx: IssueRowSlotContext) => ReactNode
   issues: Issue[] | undefined
+  heading?: string
   /** When provided, related resources in a causal link become clickable. */
   onResourceClick?: (ref: IssueResourceRef) => void
   /** The resource this section is embedded under. When an issue's subject IS
@@ -31,7 +33,7 @@ export function ResourceIssuesSection({
     <section className="space-y-2">
       <div className="flex items-center gap-2 px-1 text-xs font-semibold uppercase tracking-wide text-theme-text-secondary">
         <AlertTriangle className="h-4 w-4 text-theme-text-tertiary" aria-hidden />
-        <span>Operational issues ({sorted.length})</span>
+        <span>{heading} ({sorted.length})</span>
       </div>
       <ol className="flex flex-col gap-1.5">
         {sorted.map((issue) => {

package/src/components/issues/diagnostic.ts

@@ -26,8 +26,10 @@ export function diagnosticFactLabel(type: string): string {
       return 'Missing reference';
     case 'node_startup_corroboration':
       return 'Same-node failures';
+    case 'evicted_from_node':
+      return 'Evicted by node';
     case 'owner_rollup':
-      return 'Grouped from pods';
+      return 'Grouped resources';
     case 'selected_backend_issue':
       return 'Backend pods';
     case 'service_config_mismatch':
@@ -56,6 +58,16 @@ export function diagnosticFactLabel(type: string): string {
       return 'Affected resources';
     case 'tls_certificate_consumers':
       return 'Used for TLS by';
+    case 'kueue_admission':
+      return 'Kueue admission';
+    case 'kueue_queue':
+      return 'Queue';
+    case 'kueue_affected_runs':
+      return 'Blocked runs';
+    case 'kueue_admission_check':
+      return 'Admission check';
+    case 'kueue_provisioning_request':
+      return 'Provisioning request';
     default:
       return type.replace(/_/g, ' ');
   }
@@ -70,6 +82,7 @@ export function incidentParentLabel(factType?: string, confidence?: string): str
     case 'pvc_blast_radius':
     case 'secret_not_ready':
     case 'admission_webhook_backend':
+    case 'kueue_queue':
       return 'Caused by';
     case 'apiservice_hpa':
       return 'Likely cause';

package/src/components/issues/index.ts

@@ -15,6 +15,7 @@ export {
   memberRef,
   issueSortAnchor,
   compareIssueSortAnchors,
+  compareIssues,
 } from './types';
 export type { Issue, IssueConditionalCleanup, IssueFinalizerRemoval, IssueSeverity, IssueAffected, IssueResourceRef, IssueDiagnosticContext, IssueDiagnosticFact, IssueDiagnosticConfidence, IssueDiagnosticIssueRef, IssueDiagnosticRole, IssueIncidentParent, IssueChangeContext, IssueRecentChange, IssueRecentChangeField, IssueRunningPreviousValue, IssueWithheld } from './types';
 export {

package/src/components/issues/severity.ts

@@ -57,6 +57,7 @@ const CATEGORY_LABEL: Record<string, string> = {
   unschedulable: "Can't be scheduled",
   quota_exceeded: 'Quota exceeded',
   admission_webhook_blocking: 'Admission blocked',
+  queue_admission_blocked: 'Queue admission blocked',
   image_pull_failed: 'Image pull failed',
   container_waiting: 'Container waiting',
   init_container_failed: 'Init container failed',
@@ -66,6 +67,7 @@ const CATEGORY_LABEL: Record<string, string> = {
   readiness_failed: 'Not ready for traffic',
   workload_degraded: 'Workload degraded',
   high_restart: 'High restart count',
+  pod_evicted: 'Pod evicted',
   missing_config_ref: 'Missing reference',
   pdb_blocks_evictions: 'Evictions blocked',
   secret_sync_failed: 'Secret sync failed',
@@ -89,10 +91,12 @@ const CATEGORY_LABEL: Record<string, string> = {
   backup_stalled: 'Backup not progressing',
   job_failed: 'Job failed',
   cronjob_failed: 'CronJob needs attention',
+  batch_run_stopped: 'Run stopped by Kueue',
   rollout_stalled: 'Rollout stalled',
   hpa_limited_or_failed: 'Autoscaling limited',
   rbac_forbidden: 'Permission denied',
   certificate_not_ready: 'Certificate not ready',
+  certificate_renewal_failed: 'Certificate renewal failed',
   pod_security_violation: 'Pod Security blocked',
   node_not_ready: 'Node not ready',
   node_provisioning_failed: 'Node provisioning failed',
@@ -100,6 +104,7 @@ const CATEGORY_LABEL: Record<string, string> = {
   crossplane_reconcile_failed: 'Crossplane reconcile failed',
   termination_stuck: 'Stuck terminating',
   operator_condition_failed: 'Controller reports a problem',
+  gitops_resource_warning: 'GitOps resource warning',
   gitops_sync_failed: 'GitOps sync failed',
   gitops_render_failed: 'GitOps render failed',
   gitops_spec_invalid: 'GitOps spec invalid',
@@ -153,6 +158,16 @@ const REASON_TITLE: Record<string, string> = {
   CNPGInstanceReadinessMismatch: "Instance Pods contradict Cluster readiness",
   CNPGPrimaryLabelMismatch: "Primary Pod label contradicts Cluster status",
   CNPGScheduledRunNoBackup: "No successful backup since a scheduled run",
+  KueueAdmissionCheckRejected: 'Admission check rejected the run',
+  KueueClusterQueueInactive: 'ClusterQueue admits nothing',
+  KueueClusterQueueMissing: 'ClusterQueue missing',
+  KueueLocalQueueMissing: 'LocalQueue missing',
+  KueueRequeuingLimitExceeded: 'Kueue stopped retrying the run',
+  KueueMaximumExecutionTimeExceeded: 'Run hit its maximum execution time',
+  KueueDeactivatedByKueue: 'Kueue withdrew the run',
+  KueueResourceUnavailable: 'Queue offers no quota for a requested resource',
+  KueueNamespaceNotEligible: "Queue doesn't admit this namespace",
+  KueueInvalidWorkload: "Kueue can't admit the run's spec",
 };
 
 /** The title a reason has wherever it is shown, when its category's label would name the wrong operation. */

package/src/components/issues/types.ts

@@ -231,6 +231,16 @@ export interface Issue {
    *  Server-emitted (omitempty); empty for issues without a parser. */
   cause?: string;
   action?: string;
+  /** What the suggested or most obvious action could destroy or take over,
+   *  such as a GitOps sync that would prune every managed resource. Show it
+   *  even when replacing cause or action with other guidance; action also
+   *  contains it. Absence means no warning was supplied, not that the action
+   *  is safe; older producers omit it. */
+  hazard?: string;
+  /** Optional presentation split; action always retains the complete guidance. */
+  action_primary?: string;
+  action_secondary_title?: string;
+  action_secondary?: string[];
   remediation_kind?: string;
   remediation_target?: string;
   /** A cleanup that is right only when its condition holds — never part of