@skyhook-io/k8s-ui 1.8.5 → 1.8.6

package/src/components/resources/renderers/IstioGatewayRenderer.tsx

@@ -1,23 +1,12 @@
 import { Globe, Lock } from 'lucide-react'
 import { clsx } from 'clsx'
 import { Section, PropertyList, Property, ConditionsSection, AlertBanner, KeyValueBadgeList } from '../../ui/drawer-components'
+import { Badge } from '../../ui/Badge'
 import {
   getIstioGatewayStatus,
   getIstioGatewayServers,
   getIstioGatewaySelector,
 } from '../resource-utils-istio'
-import { BADGE_INACTIVE } from '../../../utils/badge-colors'
-
-const protocolColors: Record<string, string> = {
-  HTTP: 'bg-blue-500/20 text-blue-400',
-  HTTPS: 'bg-green-500/20 text-green-400',
-  HTTP2: 'bg-blue-500/20 text-blue-400',
-  GRPC: 'bg-purple-500/20 text-purple-400',
-  TCP: 'bg-orange-500/20 text-orange-400',
-  TLS: 'bg-green-500/20 text-green-400',
-  MONGO: 'bg-emerald-500/20 text-emerald-400',
-  MYSQL: 'bg-cyan-500/20 text-cyan-400',
-}
 
 interface IstioGatewayRendererProps {
   data: any
@@ -72,12 +61,9 @@ export function IstioGatewayRenderer({ data }: IstioGatewayRendererProps) {
                       <span className="text-sm font-medium text-theme-text-primary">
                         {server.port.name || `Port ${server.port.number}`}
                       </span>
-                      <span className={clsx(
-                        'px-1.5 py-0.5 rounded text-[10px] font-medium',
-                        protocolColors[protocol] || BADGE_INACTIVE
-                      )}>
+                      <Badge protocol={protocol} size="sm">
                         {protocol}:{server.port.number}
-                      </span>
+                      </Badge>
                     </div>
                   </div>
 
@@ -93,16 +79,23 @@ export function IstioGatewayRenderer({ data }: IstioGatewayRendererProps) {
                       <>
                         <div>
                           <span className="text-theme-text-tertiary">TLS Mode: </span>
-                          <span className={clsx(
-                            'px-1.5 py-0.5 rounded text-[10px] font-medium',
-                            server.tls.mode === 'SIMPLE' || server.tls.mode === 'MUTUAL'
-                              ? 'bg-green-500/20 text-green-400'
-                              : server.tls.mode === 'PASSTHROUGH'
-                                ? 'bg-blue-500/20 text-blue-400'
-                                : BADGE_INACTIVE
-                          )}>
+                          <Badge
+                            // Every TLS server row already shows a teal HTTPS/TLS protocol pill, so
+                            // a teal mode badge would collide. PASSTHROUGH uses `note` (the mode where
+                            // the gateway does not terminate TLS — the one worth flagging) to stay clear.
+                            tone={
+                              server.tls.mode === 'SIMPLE'
+                                ? 'accent1'
+                                : server.tls.mode === 'MUTUAL' || server.tls.mode === 'ISTIO_MUTUAL'
+                                  ? 'accent2'
+                                  : server.tls.mode === 'PASSTHROUGH' || server.tls.mode === 'AUTO_PASSTHROUGH'
+                                    ? 'note'
+                                    : 'structural'
+                            }
+                            size="sm"
+                          >
                             {server.tls.mode || 'SIMPLE'}
-                          </span>
+                          </Badge>
                         </div>
                         {server.tls.credentialName && (
                           <div>

package/src/components/resources/renderers/IstioVirtualServiceRenderer.tsx

@@ -1,6 +1,7 @@
 import { Network, Route } from 'lucide-react'
 import { clsx } from 'clsx'
 import { Section, PropertyList, Property, ConditionsSection, AlertBanner, ResourceLink } from '../../ui/drawer-components'
+import { Badge } from '../../ui/Badge'
 import {
   getVirtualServiceStatus,
   getVirtualServiceHostsList,
@@ -62,7 +63,7 @@ export function IstioVirtualServiceRenderer({ data, onNavigate }: IstioVirtualSe
                 {gateways.map((gw, i) => {
                   // Gateway reference can be "namespace/name" or just "name" or "mesh"
                   if (gw === 'mesh') {
-                    return <span key={i} className="badge-sm bg-theme-hover text-theme-text-secondary">mesh</span>
+                    return <Badge key={i} tone="structural" size="sm">mesh</Badge>
                   }
                   const parts = gw.split('/')
                   const gwNs = parts.length === 2 ? parts[0] : ns
@@ -95,19 +96,19 @@ export function IstioVirtualServiceRenderer({ data, onNavigate }: IstioVirtualSe
                     {route.name || `Route ${i + 1}`}
                   </span>
                   {route.timeout && (
-                    <span className="px-1.5 py-0.5 bg-theme-hover rounded text-[10px] text-theme-text-secondary">
+                    <Badge tone="structural" size="sm">
                       timeout: {route.timeout}
-                    </span>
+                    </Badge>
                   )}
                   {route.fault && (
-                    <span className="px-1.5 py-0.5 bg-yellow-500/20 text-yellow-400 rounded text-[10px] font-medium">
+                    <Badge severity="warning" size="sm">
                       fault injection
-                    </span>
+                    </Badge>
                   )}
                   {route.mirror && (
-                    <span className="px-1.5 py-0.5 bg-purple-500/20 text-purple-400 rounded text-[10px] font-medium">
+                    <Badge tone="note" size="sm">
                       mirroring
-                    </span>
+                    </Badge>
                   )}
                 </div>
 
@@ -119,19 +120,19 @@ export function IstioVirtualServiceRenderer({ data, onNavigate }: IstioVirtualSe
                       {route.match.map((m: any, mi: number) => (
                         <div key={mi} className="flex flex-wrap gap-1 text-xs">
                           {m.uri && (
-                            <span className="px-1.5 py-0.5 bg-blue-500/10 text-blue-400 rounded">
+                            <Badge tone="structural" size="sm">
                               URI {Object.keys(m.uri)[0]}: {Object.values(m.uri)[0] as string}
-                            </span>
+                            </Badge>
                           )}
                           {m.method && (
-                            <span className="px-1.5 py-0.5 bg-blue-500/10 text-blue-400 rounded">
+                            <Badge tone="structural" size="sm">
                               Method: {m.method.exact || Object.values(m.method)[0]}
-                            </span>
+                            </Badge>
                           )}
                           {m.headers && Object.entries(m.headers).map(([hk, hv]: [string, any]) => (
-                            <span key={hk} className="px-1.5 py-0.5 bg-blue-500/10 text-blue-400 rounded">
+                            <Badge key={hk} tone="structural" size="sm">
                               Header {hk}: {typeof hv === 'object' ? Object.values(hv)[0] as string : String(hv)}
-                            </span>
+                            </Badge>
                           ))}
                         </div>
                       ))}
@@ -174,9 +175,9 @@ export function IstioVirtualServiceRenderer({ data, onNavigate }: IstioVirtualSe
                               <span className="text-theme-text-tertiary">:{destPort}</span>
                             )}
                             {destSubset && (
-                              <span className="px-1.5 py-0.5 bg-theme-hover rounded text-theme-text-secondary">
+                              <Badge tone="structural" size="sm">
                                 subset: {destSubset}
-                              </span>
+                              </Badge>
                             )}
                           </div>
                         )
@@ -201,16 +202,16 @@ export function IstioVirtualServiceRenderer({ data, onNavigate }: IstioVirtualSe
                 {route.fault && (
                   <div className="flex flex-wrap gap-2 text-xs">
                     {route.fault.delay && (
-                      <span className="px-1.5 py-0.5 bg-yellow-500/10 text-yellow-400 rounded">
+                      <Badge severity="warning" size="sm">
                         Delay: {route.fault.delay.fixedDelay}
                         {route.fault.delay.percentage?.value && ` (${route.fault.delay.percentage.value}%)`}
-                      </span>
+                      </Badge>
                     )}
                     {route.fault.abort && (
-                      <span className="px-1.5 py-0.5 bg-red-500/10 text-red-400 rounded">
+                      <Badge severity="error" size="sm">
                         Abort: HTTP {route.fault.abort.httpStatus}
                         {route.fault.abort.percentage?.value && ` (${route.fault.abort.percentage.value}%)`}
-                      </span>
+                      </Badge>
                     )}
                   </div>
                 )}

package/src/components/resources/renderers/JobRenderer.tsx

@@ -35,11 +35,6 @@ function getJobProblems(data: any): string[] {
     }
   }
 
-  // Check for suspended
-  if (spec.suspend) {
-    problems.push('Job is suspended — pods will not be created')
-  }
-
   return problems
 }
 
@@ -62,6 +57,7 @@ export function JobRenderer({ data }: JobRendererProps) {
 
   // Check if job completed successfully
   const isComplete = conditions.some((c: any) => c.type === 'Complete' && c.status === 'True')
+  const isSuspended = spec.suspend === true
 
   return (
     <>
@@ -70,6 +66,11 @@ export function JobRenderer({ data }: JobRendererProps) {
         <AlertBanner variant="error" title="Job Issues" items={problems} />
       )}
 
+      {/* Suspended is an intentional state, not a fault — keep it informational. */}
+      {isSuspended && !hasProblems && (
+        <AlertBanner variant="info" title="Job Suspended" message="Pods will not be created until this Job is resumed." />
+      )}
+
       {/* Success banner */}
       {isComplete && !hasProblems && (
         <AlertBanner variant="success" title="Job Completed Successfully" />

package/src/components/resources/renderers/KnativeNetworkingRenderer.tsx

@@ -1,6 +1,7 @@
 import { Network, ShieldCheck, Server, Globe } from 'lucide-react'
 import { clsx } from 'clsx'
 import { Section, PropertyList, Property, ConditionsSection, KnativeNotReadyBanner, ResourceLink } from '../../ui/drawer-components'
+import { Badge } from '../../ui/Badge'
 import { kindToPlural } from '../../../utils/navigation'
 import { getKnativeConditionStatus } from '../resource-utils-knative'
 
@@ -43,14 +44,14 @@ export function KnativeIngressRenderer({ data }: RendererProps) {
               <div key={i} className="card-inner-lg">
                 <div className="flex flex-wrap gap-1 mb-2">
                   {(rule.hosts || []).map((host: string, hi: number) => (
-                    <span key={hi} className="badge-sm bg-blue-500/10 text-blue-400">
+                    <Badge key={hi} size="sm" tone="structural">
                       {host}
-                    </span>
+                    </Badge>
                   ))}
                   {rule.visibility && (
-                    <span className="px-1.5 py-0.5 bg-theme-hover rounded text-[10px] text-theme-text-secondary">
+                    <Badge size="sm" tone="structural">
                       {rule.visibility}
-                    </span>
+                    </Badge>
                   )}
                 </div>
                 {rule.http?.paths && rule.http.paths.length > 0 && (
@@ -117,9 +118,9 @@ export function KnativeCertificateRenderer({ data }: RendererProps) {
         <Section title={`DNS Names (${dnsNames.length})`} defaultExpanded>
           <div className="flex flex-wrap gap-1">
             {dnsNames.map((name: string, i: number) => (
-              <span key={i} className="badge-sm bg-theme-elevated text-theme-text-secondary">
+              <Badge key={i} size="sm" tone="structural">
                 {name}
-              </span>
+              </Badge>
             ))}
           </div>
         </Section>
@@ -157,12 +158,9 @@ export function ServerlessServiceRenderer({ data, onNavigate }: RendererProps) {
             </span>
           } />
           <Property label="Mode" value={mode ? (
-            <span className={clsx(
-              'badge',
-              mode === 'Proxy' ? 'bg-yellow-500/20 text-yellow-400' : 'bg-green-500/20 text-green-400'
-            )}>
+            <Badge tone={mode === 'Proxy' ? 'accent1' : 'accent2'}>
               {mode}
-            </span>
+            </Badge>
           ) : undefined} />
           <Property label="Activators" value={numActivators != null ? String(numActivators) : undefined} />
           <Property label="Protocol" value={protocolType} />

package/src/components/resources/renderers/SimpleRouteRenderer.tsx

@@ -1,6 +1,6 @@
 import { Globe, ArrowRight, Network } from 'lucide-react'
-import { clsx } from 'clsx'
 import { Section, PropertyList, Property, ConditionsSection, AlertBanner, ResourceRefBadge } from '../../ui/drawer-components'
+import { Badge } from '../../ui/Badge'
 import type { ResourceRef } from '../../../types'
 
 interface SimpleRouteRendererProps {
@@ -81,7 +81,7 @@ export function SimpleRouteRenderer({ data, kind, onNavigate }: SimpleRouteRende
                 hostnames.length > 0 ? (
                   <div className="flex flex-wrap gap-1">
                     {hostnames.map((h: string) => (
-                      <span key={h} className="badge bg-theme-elevated text-theme-text-secondary">{h}</span>
+                      <Badge key={h} tone="structural">{h}</Badge>
                     ))}
                   </div>
                 ) : (
@@ -163,20 +163,14 @@ export function SimpleRouteRenderer({ data, kind, onNavigate }: SimpleRouteRende
                   </div>
                   <div className="flex flex-wrap gap-2">
                     {accepted && (
-                      <span className={clsx(
-                        'badge',
-                        accepted.status === 'True' ? 'bg-green-500/20 text-green-400' : 'bg-red-500/20 text-red-400'
-                      )}>
+                      <Badge severity={accepted.status === 'True' ? 'success' : 'error'}>
                         {accepted.status === 'True' ? 'Accepted' : 'Not Accepted'}
-                      </span>
+                      </Badge>
                     )}
                     {resolved && (
-                      <span className={clsx(
-                        'badge',
-                        resolved.status === 'True' ? 'bg-green-500/20 text-green-400' : 'bg-yellow-500/20 text-yellow-400'
-                      )}>
+                      <Badge severity={resolved.status === 'True' ? 'success' : 'warning'}>
                         {resolved.status === 'True' ? 'Refs Resolved' : 'Unresolved Refs'}
-                      </span>
+                      </Badge>
                     )}
                   </div>
                   {accepted?.message && accepted.status === 'False' && (

package/src/components/resources/renderers/TraefikIngressRouteRenderer.tsx

@@ -1,5 +1,6 @@
 import { Globe, Route, Layers, Lock } from 'lucide-react'
 import { Section, PropertyList, Property, AlertBanner, ResourceLink } from '../../ui/drawer-components'
+import { Badge } from '../../ui/Badge'
 
 interface TraefikIngressRouteRendererProps {
   data: any
@@ -84,14 +85,14 @@ export function TraefikIngressRouteRenderer({ data, onNavigate }: TraefikIngress
                     {route.match || 'No match rule'}
                   </span>
                   {route.priority && (
-                    <span className="px-1.5 py-0.5 bg-theme-hover rounded text-[10px] text-theme-text-secondary shrink-0">
+                    <Badge tone="structural" size="sm" className="shrink-0">
                       priority: {route.priority}
-                    </span>
+                    </Badge>
                   )}
                   {route.kind && route.kind !== 'Rule' && (
-                    <span className="px-1.5 py-0.5 bg-theme-hover rounded text-[10px] text-theme-text-secondary shrink-0">
+                    <Badge tone="structural" size="sm" className="shrink-0">
                       {route.kind}
-                    </span>
+                    </Badge>
                   )}
                 </div>
 
@@ -110,9 +111,9 @@ export function TraefikIngressRouteRenderer({ data, onNavigate }: TraefikIngress
                         return (
                           <div key={si} className="flex items-center gap-2 text-xs">
                             {isTraefikSvc && (
-                              <span className="px-1.5 py-0.5 bg-cyan-500/10 text-cyan-400 rounded text-[10px]">
+                              <Badge kind="TraefikService" size="sm">
                                 TraefikService
-                              </span>
+                              </Badge>
                             )}
                             <ResourceLink
                               name={svc.name}
@@ -152,9 +153,9 @@ export function TraefikIngressRouteRenderer({ data, onNavigate }: TraefikIngress
                             kind="middlewares"
                             namespace={mwNs}
                             label={
-                              <span className="px-1.5 py-0.5 bg-purple-500/10 text-purple-400 rounded text-[10px] inline-block">
+                              <Badge tone="accent1" size="sm" className="inline-block">
                                 {mw.namespace && mw.namespace !== ns ? `${mw.namespace}/` : ''}{mw.name}
-                              </span>
+                              </Badge>
                             }
                             onNavigate={onNavigate}
                           />
@@ -242,9 +243,9 @@ export function TraefikIngressRouteRenderer({ data, onNavigate }: TraefikIngress
                     onNavigate={onNavigate}
                   />
                   {isCrossNs && (
-                    <span className="px-1.5 py-0.5 bg-yellow-500/10 text-yellow-400 rounded text-[10px]">
+                    <Badge tone="note" size="sm">
                       {mw.namespace}
-                    </span>
+                    </Badge>
                   )}
                 </div>
               )

package/src/components/resources/renderers/TraefikMiddlewareRenderer.tsx

@@ -0,0 +1,185 @@
+import { SlidersHorizontal, Layers, ShieldCheck } from 'lucide-react'
+import { Section, PropertyList, Property, AlertBanner, ResourceLink } from '../../ui/drawer-components'
+import { Badge } from '../../ui/Badge'
+import { getMiddlewareType } from '../resource-utils-traefik'
+
+interface TraefikMiddlewareRendererProps {
+  data: any
+  onNavigate?: (ref: { kind: string; namespace: string; name: string }) => void
+}
+
+// Keys whose value is inline credential MATERIAL — redacted in the generic
+// config view. Mirrors the backend's value-key set (pkg/ai/context/redact.go)
+// plus `users` (basicAuth htpasswd). Deliberately excludes reference keys like
+// `secret`/`secretName` (the NAME of a Secret, which is safe and useful to show).
+const SECRET_VALUE_KEYS = new Set([
+  'password', 'passwd', 'passphrase', 'token', 'clientsecret', 'privatekey',
+  'apikey', 'apitoken', 'accesstoken', 'sessiontoken', 'secretaccesskey',
+  'secretkey', 'authtoken', 'bearertoken', 'users',
+])
+
+function isSecretKey(key: string): boolean {
+  return SECRET_VALUE_KEYS.has(key.toLowerCase().replace(/[-_]/g, ''))
+}
+
+function formatScalar(v: any): string {
+  if (Array.isArray(v)) return v.length === 0 ? '[]' : v.join(', ')
+  if (typeof v === 'object' && v !== null) return JSON.stringify(v)
+  return String(v)
+}
+
+// Deep-redact: replace any credential-keyed value with "(hidden)" at EVERY
+// depth, so a secret under e.g. plugin.config.clientSecret can't survive a
+// later JSON.stringify of a nested object. Non-secret values are kept — the
+// drawer is not a secrecy boundary (the YAML tab shows the full spec the user
+// already has RBAC to read); hiding only credential KEYS keeps the generic
+// config legible for unknown/plugin middleware types.
+function redactConfig(v: any): any {
+  if (Array.isArray(v)) return v.map(redactConfig)
+  if (v && typeof v === 'object') {
+    const out: Record<string, any> = {}
+    for (const [k, val] of Object.entries(v)) {
+      out[k] = isSecretKey(k) ? '(hidden)' : redactConfig(val)
+    }
+    return out
+  }
+  return v
+}
+
+// Renders a middleware config object as a property list, collapsing nested
+// objects/arrays to a compact one-line summary. Credential keys are redacted
+// at every depth (redactConfig) before rendering.
+function ConfigProperties({ config }: { config: Record<string, any> }) {
+  const safe = redactConfig(config) as Record<string, any>
+  const entries = Object.entries(safe)
+  if (entries.length === 0) {
+    return <Property label="Config" value="(empty)" />
+  }
+  return (
+    <>
+      {entries.map(([key, value]) => {
+        if (Array.isArray(value)) {
+          return <Property key={key} label={key} value={value.length === 0 ? '[]' : value.map(formatScalar).join(', ')} />
+        }
+        if (typeof value === 'object' && value !== null) {
+          const inner = Object.entries(value)
+            .map(([k, v]) => `${k}: ${formatScalar(v)}`)
+            .join('  ·  ')
+          return <Property key={key} label={key} value={inner || '{}'} />
+        }
+        return <Property key={key} label={key} value={formatScalar(value)} />
+      })}
+    </>
+  )
+}
+
+export function TraefikMiddlewareRenderer({ data, onNavigate }: TraefikMiddlewareRendererProps) {
+  const spec = data.spec || {}
+  const type = getMiddlewareType(data)
+  const ns = data.metadata?.namespace || ''
+  const kindLabel = data.kind || 'Middleware'
+  // A middleware spec carries exactly one top-level key (its type). For known
+  // types that's `type`; for unrecognized ones fall back to whatever key the
+  // spec actually has, so the generic config section isn't rendered empty.
+  const typeKey = type === 'unknown' ? Object.keys(spec)[0] : type
+  const config = (typeKey && spec[typeKey]) || {}
+
+  const isChain = type === 'chain'
+  // A MiddlewareTCP chain references MiddlewareTCP members, not Middleware.
+  const chainMemberKind = data.kind === 'MiddlewareTCP' ? 'middlewaretcps' : 'middlewares'
+  const isAuth = type === 'basicAuth' || type === 'digestAuth'
+  const isForwardAuth = type === 'forwardAuth'
+  const isErrors = type === 'errors'
+
+  return (
+    <>
+      {type === 'unknown' && (
+        <AlertBanner
+          variant="info"
+          title="Unrecognized middleware type"
+          message="This middleware uses a type Radar doesn't render specially (e.g. a plugin or a newer/commercial middleware). The raw configuration is shown below."
+        />
+      )}
+
+      <Section title={kindLabel} icon={SlidersHorizontal} defaultExpanded>
+        <PropertyList>
+          <Property label="Type" value={type === 'unknown' ? Object.keys(spec)[0] || 'unknown' : type} />
+        </PropertyList>
+      </Section>
+
+      {isChain ? (
+        <Section title="Chain" icon={Layers} defaultExpanded>
+          <div className="space-y-1">
+            {(config.middlewares || []).map((m: any, i: number) => (
+              <div key={i} className="flex items-center gap-2 text-xs">
+                <span className="text-theme-text-tertiary w-4 text-right">{i + 1}.</span>
+                <ResourceLink
+                  name={m.name}
+                  kind={chainMemberKind}
+                  namespace={m.namespace || ns}
+                  onNavigate={onNavigate}
+                />
+                {m.namespace && m.namespace !== ns && (
+                  <Badge tone="note" size="sm">{m.namespace}</Badge>
+                )}
+              </div>
+            ))}
+            {(config.middlewares || []).length === 0 && (
+              <span className="text-xs text-theme-text-tertiary">No middlewares in chain</span>
+            )}
+          </div>
+        </Section>
+      ) : isAuth ? (
+        <Section title="Authentication" icon={ShieldCheck} defaultExpanded>
+          <PropertyList>
+            {config.secret && (
+              <Property label="Secret" value={
+                <ResourceLink name={config.secret} kind="secrets" namespace={ns} onNavigate={onNavigate} />
+              } />
+            )}
+            {Array.isArray(config.users) && (
+              <Property label="Inline users" value={<span className="text-theme-text-tertiary italic">{config.users.length} — hidden</span>} />
+            )}
+            {config.usersFile && <Property label="Users file" value={config.usersFile} />}
+            {config.realm && <Property label="Realm" value={config.realm} />}
+            {config.removeHeader !== undefined && <Property label="Remove header" value={String(config.removeHeader)} />}
+          </PropertyList>
+        </Section>
+      ) : isForwardAuth ? (
+        <Section title="Forward Auth" icon={ShieldCheck} defaultExpanded>
+          <PropertyList>
+            {config.address && <Property label="Address" value={config.address} />}
+            {config.trustForwardHeader !== undefined && <Property label="Trust forward header" value={String(config.trustForwardHeader)} />}
+            {Array.isArray(config.authResponseHeaders) && config.authResponseHeaders.length > 0 && (
+              <Property label="Auth response headers" value={config.authResponseHeaders.join(', ')} />
+            )}
+            {config.authResponseHeadersRegex && <Property label="Headers regex" value={config.authResponseHeadersRegex} />}
+            {config.tls?.caSecret && (
+              <Property label="CA secret" value={
+                <ResourceLink name={config.tls.caSecret} kind="secrets" namespace={ns} onNavigate={onNavigate} />
+              } />
+            )}
+          </PropertyList>
+        </Section>
+      ) : isErrors ? (
+        <Section title="Errors" defaultExpanded>
+          <PropertyList>
+            {config.status && <Property label="Status" value={Array.isArray(config.status) ? config.status.join(', ') : String(config.status)} />}
+            {config.service?.name && (
+              <Property label="Service" value={
+                <ResourceLink name={config.service.name} kind="services" namespace={config.service.namespace || ns} onNavigate={onNavigate} />
+              } />
+            )}
+            {config.query && <Property label="Query" value={config.query} />}
+          </PropertyList>
+        </Section>
+      ) : (
+        <Section title="Configuration" defaultExpanded>
+          <PropertyList>
+            <ConfigProperties config={config} />
+          </PropertyList>
+        </Section>
+      )}
+    </>
+  )
+}

package/src/components/resources/renderers/TraefikServersTransportRenderer.tsx

@@ -0,0 +1,84 @@
+import { ArrowRightLeft } from 'lucide-react'
+import { Section, PropertyList, Property, AlertBanner, ResourceLink } from '../../ui/drawer-components'
+
+interface TraefikServersTransportRendererProps {
+  data: any
+  onNavigate?: (ref: { kind: string; namespace: string; name: string }) => void
+}
+
+// Covers ServersTransport (HTTP) and ServersTransportTCP — overlapping shapes;
+// fields absent on one kind simply don't render.
+export function TraefikServersTransportRenderer({ data, onNavigate }: TraefikServersTransportRendererProps) {
+  const spec = data.spec || {}
+  const ns = data.metadata?.namespace || ''
+  const kindLabel = data.kind || 'ServersTransport'
+  const insecure = !!spec.insecureSkipVerify
+  const rootCAs: any[] = spec.rootCAsSecrets || []
+  const certs: any[] = spec.certificatesSecrets || []
+  const timeouts = spec.forwardingTimeouts
+
+  return (
+    <>
+      {insecure && (
+        <AlertBanner
+          variant="warning"
+          title="TLS verification disabled"
+          message="insecureSkipVerify is enabled — Traefik will not validate the upstream's certificate. Connections to the backend are vulnerable to interception."
+        />
+      )}
+
+      <Section title={kindLabel} icon={ArrowRightLeft} defaultExpanded>
+        <PropertyList>
+          {spec.serverName && <Property label="Server Name (SNI)" value={spec.serverName} />}
+          <Property
+            label="Insecure Skip Verify"
+            value={<span className={insecure ? 'text-orange-400' : undefined}>{String(insecure)}</span>}
+          />
+          {spec.peerCertURI && <Property label="Peer Cert URI" value={spec.peerCertURI} />}
+          {spec.maxIdleConnsPerHost !== undefined && <Property label="Max Idle Conns / Host" value={String(spec.maxIdleConnsPerHost)} />}
+          {spec.disableHTTP2 !== undefined && <Property label="Disable HTTP/2" value={String(spec.disableHTTP2)} />}
+          {spec.terminationDelay !== undefined && <Property label="Termination Delay" value={String(spec.terminationDelay)} />}
+        </PropertyList>
+      </Section>
+
+      {(rootCAs.length > 0 || certs.length > 0) && (
+        <Section title="Certificates" defaultExpanded>
+          <PropertyList>
+            {rootCAs.length > 0 && (
+              <Property label="Root CA Secrets" value={
+                <div className="flex flex-wrap gap-1">
+                  {rootCAs.map((s: any, i: number) => {
+                    const name = typeof s === 'string' ? s : s?.secret || s?.name
+                    return name ? <ResourceLink key={i} name={name} kind="secrets" namespace={ns} onNavigate={onNavigate} /> : null
+                  })}
+                </div>
+              } />
+            )}
+            {certs.length > 0 && (
+              <Property label="Client Cert Secrets" value={
+                <div className="flex flex-wrap gap-1">
+                  {certs.map((s: any, i: number) => {
+                    const name = typeof s === 'string' ? s : s?.secret || s?.name
+                    return name ? <ResourceLink key={i} name={name} kind="secrets" namespace={ns} onNavigate={onNavigate} /> : null
+                  })}
+                </div>
+              } />
+            )}
+          </PropertyList>
+        </Section>
+      )}
+
+      {timeouts && (
+        <Section title="Forwarding Timeouts">
+          <PropertyList>
+            {timeouts.dialTimeout !== undefined && <Property label="Dial" value={String(timeouts.dialTimeout)} />}
+            {timeouts.responseHeaderTimeout !== undefined && <Property label="Response Header" value={String(timeouts.responseHeaderTimeout)} />}
+            {timeouts.idleConnTimeout !== undefined && <Property label="Idle Conn" value={String(timeouts.idleConnTimeout)} />}
+            {timeouts.readIdleTimeout !== undefined && <Property label="Read Idle" value={String(timeouts.readIdleTimeout)} />}
+            {timeouts.pingTimeout !== undefined && <Property label="Ping" value={String(timeouts.pingTimeout)} />}
+          </PropertyList>
+        </Section>
+      )}
+    </>
+  )
+}