@skyhook-io/k8s-ui 1.8.10 → 1.8.12

package/src/components/workload/index.ts

@@ -1,2 +1,2 @@
-export { WorkloadView, type WorkloadTabType } from './WorkloadView'
+export { WorkloadView, type ResourceOwnershipContext, type ServingResourceDetail, type WorkloadTabType } from './WorkloadView'
 export { ResourceDetailDrawer } from './ResourceDetailDrawer'

package/src/theme/tailwind-theme.css

@@ -20,6 +20,7 @@
   --color-theme-text-secondary: var(--text-secondary);
   --color-theme-text-tertiary: var(--text-tertiary);
   --color-theme-text-disabled: var(--text-disabled);
+  --color-warning-text: var(--warning-text);
 
   /* Borders */
   --color-theme-border: var(--border-default);

package/src/theme/variables.css

@@ -49,6 +49,7 @@
   --text-secondary: light-dark(#555860, #D8DAE0);
   --text-tertiary: light-dark(#6B7080, #B0B5C0);
   --text-disabled: light-dark(#A0A4AC, #6A7080);
+  --warning-text: light-dark(#92400E, #FBBF24);
 
   /* ── Borders (lightly blue-tinted in light mode) ── */
   --border-default: light-dark(#D8E0EE, #222840);
@@ -156,6 +157,6 @@
   --shadow-sm: 0 1px 3px rgba(0,0,0,0.3), 0 1px 2px rgba(0,0,0,0.2), 0 0 0 1px rgba(255,255,255,0.06);
   --shadow-md: 0 4px 12px -2px rgba(0,0,0,0.35), 0 2px 4px rgba(0,0,0,0.15), 0 0 0 1px rgba(255,255,255,0.06);
   --shadow-lg: 0 12px 32px -6px rgba(0,0,0,0.3), 0 4px 8px rgba(0,0,0,0.1);
-  --shadow-drawer: -16px 0 60px rgba(0,0,0,0.6), -6px 0 20px rgba(0,0,0,0.4);
+  --shadow-drawer: -12px 0 36px rgba(0,0,0,0.45), -4px 0 14px rgba(0,0,0,0.3), 0 0 0 1px rgba(255,255,255,0.06);
   --topology-node-shadow: 0 2px 6px rgba(0,0,0,0.2), 0 6px 16px rgba(0,0,0,0.15);
 }

package/src/types/core.ts

@@ -11,6 +11,7 @@ export interface ResourcePermissions {
   statefulSets: boolean
   replicaSets: boolean
   ingresses: boolean
+  ingressClasses: boolean
   configMaps: boolean
   secrets: boolean
   events: boolean
@@ -94,7 +95,6 @@ export interface Deployment {
 // When adding a new kind here, also update:
 // - ALL_NODE_KINDS in App.tsx
 // - TopologyFilterSidebar.tsx RESOURCE_KINDS array
-// - index.css .topology-icon-* class
 // - K8sResourceNode.tsx NODE_DIMENSIONS
 // - resource-icons.ts KIND_ICON_MAP
 // - kindToPlural in navigation.ts (if irregular plural)
@@ -123,9 +123,17 @@ export type CoreNodeKind =
   | 'PodGroup'
   | 'ConfigMap'
   | 'Secret'
+  | 'ServiceAccount'
+  | 'SealedSecret'
+  | 'ServiceMonitor'
+  | 'PodMonitor'
   | 'HorizontalPodAutoscaler'
   | 'Job'
   | 'CronJob'
+  | 'Workflow'
+  | 'CronWorkflow'
+  | 'WorkflowTemplate'
+  | 'ClusterWorkflowTemplate'
   | 'PersistentVolumeClaim'
   | 'Node'
   | 'Namespace'
@@ -168,6 +176,10 @@ export function displayKind(kind: string): string {
   const shortNames: Record<string, string> = {
     HorizontalPodAutoscaler: 'HPA',
     PersistentVolumeClaim: 'PVC',
+    ServiceAccount: 'Service Account',
+    SealedSecret: 'Sealed Secret',
+    ServiceMonitor: 'Service Monitor',
+    PodMonitor: 'Pod Monitor',
     EC2NodeClass: 'NodeClass',
     KnativeService: 'Knative Svc',
     KnativeConfiguration: 'Knative Config',
@@ -275,6 +287,10 @@ export interface TimelineEvent {
   id: string
   timestamp: string // ISO date string
   source: EventSource // Where event originated: 'informer', 'k8s_event', 'historical'
+  // Store-assigned arrival number (monotonic per store instance). The delta
+  // cursor keys on it — arrival order, not event time, so late-arriving
+  // events can't slip behind a client's cursor.
+  seq?: number
 
   // Resource identity
   kind: string
@@ -339,6 +355,20 @@ export function isWorkloadKind(kind: string): boolean {
   ].includes(kind)
 }
 
+export function isDeploymentLikeWorkloadKind(kind: string, group = ''): boolean {
+  switch (kind) {
+    case 'Deployment':
+    case 'ReplicaSet':
+    case 'StatefulSet':
+    case 'DaemonSet':
+      return group === '' || group === 'apps'
+    case 'Rollout':
+      return group === '' || group === 'argoproj.io'
+    default:
+      return false
+  }
+}
+
 // Check if a resource kind is typically managed by another
 export function isManagedKind(kind: string): boolean {
   return ['ReplicaSet', 'Pod', 'Event'].includes(kind)
@@ -353,7 +383,7 @@ export interface TimelineFilters {
   timeRange: TimeRange
 }
 
-export type TimeRange = '5m' | '30m' | '1h' | '6h' | '24h' | 'all'
+export type TimeRange = '5m' | '30m' | '1h' | '6h' | '24h' | '7d' | '30d' | 'all'
 
 // Cluster info
 export interface ClusterInfo {
@@ -445,6 +475,7 @@ export interface Relationships {
   configRefs?: ResourceRef[]
   consumers?: ResourceRef[]
   scalers?: ResourceRef[]
+  storageRefs?: ResourceRef[]
   scaleTarget?: ResourceRef
   pdbs?: ResourceRef[]              // PodDisruptionBudgets protecting this workload
   networkPolicies?: ResourceRef[]   // NetworkPolicy / CiliumNetworkPolicy / ClusterNetworkPolicy variants selecting this workload
@@ -822,9 +853,11 @@ export interface UpgradeInfo {
   // oci:// chart reference an OCI-sourced upgrade lives at (display only).
   chartRef?: string
   error?: string
+  // Machine-readable source-resolution failure, used to make the Helm drawer
+  // explain whether tracking an OCI source can help.
+  sourceIssue?: 'untracked' | 'repo_index_error' | 'ambiguous_repository'
   // True only when the error is a genuinely untracked source (registering a
-  // chart source could fix it) — NOT for repo-side errors like a stale index or
-  // classic ambiguity. Gates the "track source" affordance.
+  // chart source could fix it). Kept for compatibility; prefer sourceIssue.
   untracked?: boolean
 }
 
@@ -836,6 +869,8 @@ export interface BatchUpgradeInfo {
 // Request body for applying new values to a release
 export interface ApplyValuesRequest {
   values: Record<string, unknown>
+  version?: string
+  repository?: string
 }
 
 // Response for previewing values changes
@@ -1234,10 +1269,28 @@ export interface ImageMetadata {
 // ============================================================================
 
 // Pod info returned from workload pods endpoint
+export interface WorkloadPodContainerInfo {
+  name: string
+  init?: boolean
+  ready: boolean
+  restartCount: number
+}
+
 export interface WorkloadPodInfo {
   name: string
   containers: string[]
   ready: boolean
+  phase?: string
+  healthLevel?: HealthStatus
+  reason?: string
+  message?: string
+  restartCount?: number
+  lastTerminationReason?: string
+  createdAt?: string
+  containerStatuses?: WorkloadPodContainerInfo[]
+  stepID?: string
+  stepName?: string
+  stepPhase?: string
 }
 
 // SSE event types for workload log streaming

package/src/types/gitops-insights.ts

@@ -32,7 +32,13 @@ export type GitOpsCategory =
   | 'Suspended'
   | 'Unknown'
 
-export type GitOpsDriftSource = 'lastAppliedAnnotation'
+// How a Drift's field entries were computed. `lastAppliedAnnotation` is the
+// built-in path (kubectl.kubernetes.io/last-applied-configuration); `argocd-api`
+// means the diff came from a connected Argo CD server's managed-resource diff.
+// The `(string & {})` arm keeps the union open: a library consumer may lag the
+// backend and receive a source it doesn't recognize — such values MUST render
+// with the neutral fallback (no source label), never crash a switch.
+export type GitOpsDriftSource = 'lastAppliedAnnotation' | 'argocd-api' | (string & {})
 
 export interface GitOpsInsightSummary {
   tool: GitOpsTool
@@ -66,6 +72,21 @@ export interface GitOpsInsightSummary {
   // Finalizers blocking deletion. When stuck, naming the finalizer points
   // the user at the controller they need to investigate.
   finalizers?: string[]
+  // Argo comparison-coverage disclosure: the field exclusions declared in
+  // spec.ignoreDifferences that suppress drift from comparison (both Argo's
+  // and Radar's). Undefined for Flux roots and Applications without any
+  // exclusions. unsupportedRuleCount counts entries Radar does NOT evaluate
+  // (jqPathExpressions / managedFieldsManagers rules) — the
+  // drift panel may surface fields Argo's own UI suppresses.
+  ignoredDifferences?: GitOpsIgnoredDifferences
+}
+
+export interface GitOpsIgnoredDifferences {
+  ruleCount: number
+  unsupportedRuleCount: number
+  // Sorted unique "Group/Kind" targets ("Kind" for core resources,
+  // "group/*" for a group-wide rule that omits kind).
+  kinds: string[]
 }
 
 export interface GitOpsInsightRef {
@@ -192,6 +213,53 @@ export interface GitOpsCapabilities {
   syncWithSource: boolean
   selectiveSync: boolean
   rollback: boolean
+  // True on an Argo CD Application detail when the Argo CD integration is
+  // connected, meaning the full Git-rendered desired-vs-live diff endpoint
+  // (/api/argo/applications/{ns}/{name}/resource-diff) can be called for this
+  // app's managed resources. Absent/false → offer only the last-applied field
+  // diff and (for disconnected Argo apps) the "connect Argo CD" hint.
+  argoDiffAvailable?: boolean
+  // True when the Argo CD integration has settings saved, even if the live
+  // connection is down / the token is rejected. Paired with argoDiffAvailable to
+  // tell "not set up" (offer Connect) from "set up but disconnected" (offer
+  // Reconnect) — instead of advertising a diff that would fail.
+  argoConfigured?: boolean
+  // True on an Argo CD Application detail when the integration is connected,
+  // meaning the revision-metadata endpoint can resolve Git commit details
+  // (author, message, signature) for this app's deployed revisions.
+  revisionMetadataAvailable?: boolean
   unsupportedReason?: string
   warnings?: string[]
 }
+
+// Response of GET /api/argo/applications/{ns}/{name}/revision-metadata — the Git
+// commit metadata for one deployed revision. Every field is best-effort (varies
+// across Argo CD versions); signatureInfo non-empty means a signature was checked.
+export interface ArgoRevisionMetadata {
+  author?: string
+  date?: string
+  tags?: string[]
+  message?: string
+  signatureInfo?: string
+}
+
+// Response of GET /api/argo/applications/{ns}/{name}/resource-diff. `desired`
+// is the Git-rendered manifest, `live` the normalized cluster state — both YAML
+// for the line-by-line view. `fieldEntries` is the same diff structured per
+// path for a compact summary. `redacted` is set when Secret values were masked
+// server-side; `hook` marks Argo sync-hook resources.
+export interface GitOpsResourceDiff {
+  source: string
+  desired: string
+  live: string
+  fieldEntries: GitOpsResourceDiffFieldEntry[]
+  redacted: boolean
+  hook: boolean
+}
+
+export interface GitOpsResourceDiffFieldEntry {
+  path: string
+  op: 'added' | 'removed' | 'changed'
+  desired?: string
+  live?: string
+}

package/src/types/gitops.ts

@@ -254,7 +254,7 @@ export interface ArgoAppStatus {
  * ArgoCD status patterns:
  * - sync.status: Synced, OutOfSync, Unknown
  * - health.status: Healthy, Progressing, Degraded, Suspended, Missing, Unknown
- * - operationState.phase: Running, Succeeded, Failed, Error
+ * - operationState.phase: Running, Terminating, Succeeded, Failed, Error
  */
 export function argoStatusToGitOpsStatus(status: ArgoAppStatus): GitOpsStatus {
   const syncStatus = status.sync?.status
@@ -267,7 +267,7 @@ export function argoStatusToGitOpsStatus(status: ArgoAppStatus): GitOpsStatus {
     sync = 'Synced'
   } else if (syncStatus === 'OutOfSync') {
     sync = 'OutOfSync'
-  } else if (opPhase === 'Running') {
+  } else if (opPhase === 'Running' || opPhase === 'Terminating') {
     sync = 'Reconciling'
   }
 
@@ -288,7 +288,7 @@ export function argoStatusToGitOpsStatus(status: ArgoAppStatus): GitOpsStatus {
   }
 
   // Override with operation state if active
-  if (opPhase === 'Running') {
+  if (opPhase === 'Running' || opPhase === 'Terminating') {
     health = 'Progressing'
   } else if (opPhase === 'Failed' || opPhase === 'Error') {
     health = 'Degraded'