@skyhook-io/radar-app 1.14.6 → 1.15.0

package/src/components/execution/JobSetAdmission.test.tsx

@@ -1,42 +1,165 @@
-import { renderToStaticMarkup } from 'react-dom/server'
-import { beforeEach, describe, expect, it, vi } from 'vitest'
-import type { KueueAdmissionResponse } from '@skyhook-io/k8s-ui/types/scheduling'
-import { JobSetAdmission } from './JobSetAdmission'
-
-const state = vi.hoisted(() => ({ data: undefined as KueueAdmissionResponse | undefined, query: vi.fn() }))
-vi.mock('../../api/client', () => ({
-  ApiError: class extends Error {},
-  useKueueAdmission: (...args: unknown[]) => {
-    state.query(...args)
-    return { data: state.data, isLoading: false, refetch: vi.fn() }
+import { renderToStaticMarkup } from "react-dom/server";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { KueueAdmission } from "./JobSetAdmission";
+const mock = vi.hoisted(() => ({ result: {} as any, calls: [] as any[] }));
+vi.mock("../../api/client", () => ({
+  ApiError: class extends Error {
+    status = 403;
+  },
+  useKueueAdmission: (...args: any[]) => {
+    mock.calls.push(args);
+    return mock.result;
+  },
+}));
+const job = {
+  apiVersion: "batch/v1",
+  kind: "Job",
+  metadata: { name: "train", namespace: "ml", uid: "current" },
+  spec: { suspend: true },
+};
+const empty = {
+  uid: "current",
+  installed: true,
+  workloads: [],
+  total: 0,
+  truncated: false,
+};
+const evidence = {
+  ...empty,
+  total: 1,
+  workloads: [
+    {
+      name: "owned-workload",
+      uid: "w",
+      apiVersion: "kueue.x-k8s.io/v1beta2",
+      projection: "unsupported",
+    },
+  ],
+};
+const hinted = {
+  ...job,
+  metadata: {
+    ...job.metadata,
+    labels: { "kueue.x-k8s.io/queue-name": "ready" },
   },
-}))
+};
+const render = (resource: any = job) =>
+  renderToStaticMarkup(
+    <KueueAdmission resource={resource} namespace="ml" name="train" />,
+  );
+describe("Job admission host", () => {
+  beforeEach(() => {
+    mock.result = {};
+    mock.calls = [];
+  });
+  it.each([
+    { isLoading: true },
+    { data: empty },
+    { error: new Error("denied") },
+  ])("keeps plain suspended Jobs quiet: %j", (result) => {
+    mock.result = result;
+    expect(render()).toBe("");
+    expect(mock.calls[0][3]).toEqual({
+      isJob: true,
+      isRayJob: false,
+      hinted: false,
+      terminal: false,
+    });
+  });
+  it("discovers unlabeled evidence but hides it after errors", () => {
+    mock.result = { data: evidence };
+    expect(render()).toContain("owned-workload");
+    mock.result.error = new Error("cache unavailable");
+    expect(render()).toContain("cache unavailable");
+    expect(render()).not.toContain("owned-workload");
+  });
+  it("rejects reused-name evidence", () => {
+    mock.result = { data: { ...evidence, uid: "old" } };
+    expect(render(hinted)).toContain("different workload instance");
+    expect(render(hinted)).not.toContain("owned-workload");
+  });
+  it("shows missing evidence and conditional owner guidance for a hinted child", () => {
+    mock.result = { data: empty };
+    const html = render({
+      ...hinted,
+      metadata: {
+        ...hinted.metadata,
+        ownerReferences: [{ controller: true, kind: "JobSet", name: "parent" }],
+      },
+    });
+    expect(html).toContain("Admission may be tracked on the owning resource");
+    expect(html).not.toContain("Admission is tracked");
+  });
+  it("does not use failed Pod counts as terminal or arbitrary managedBy as Kueue hint", () => {
+    render({
+      ...job,
+      spec: { managedBy: "other.io/controller" },
+      status: { failed: 1 },
+    });
+    expect(mock.calls[0][3]).toEqual({
+      isJob: true,
+      isRayJob: false,
+      hinted: false,
+      terminal: false,
+    });
+  });
+  it("preserves JobSet errors", () => {
+    mock.result = { error: new Error("denied") };
+    expect(
+      render({
+        ...job,
+        apiVersion: "jobset.x-k8s.io/v1alpha2",
+        kind: "JobSet",
+      }),
+    ).toContain("denied");
+  });
+});
 
-beforeEach(() => {
-  state.query.mockClear()
-  state.data = { uid: 'old-uid', installed: true, total: 1, truncated: false, workloads: [{
-    apiVersion: 'kueue.x-k8s.io/v1beta2', namespace: 'ml', name: 'old-workload', uid: 'workload-uid', generation: 1,
-    createdAt: null, deleting: false, projection: 'unsupported', linksLimited: false,
-  }] }
-})
+describe("JobSet admission identity", () => {
+  it("rejects evidence and absence for a different root instance", () => {
+    const resource = {
+      ...job,
+      apiVersion: "jobset.x-k8s.io/v1alpha2",
+      kind: "JobSet",
+    };
+    mock.result = { data: evidence };
+    expect(render(resource)).toContain("owned-workload");
+    mock.result = { data: { ...evidence, uid: "old" } };
+    expect(render(resource)).toContain("different workload instance");
+    expect(render(resource)).not.toContain("owned-workload");
+    mock.result = { data: { ...empty, uid: "old", installed: false } };
+    expect(render(resource)).toContain("different workload instance");
+    mock.result.data.uid = "current";
+    expect(render(resource)).toBe("");
+  });
+});
 
-function render(uid: string) {
-  return renderToStaticMarkup(<JobSetAdmission resource={{ metadata: { uid } }} namespace="ml" name="training" />)
-}
+it("does not suggest parent admission for a CronJob-created Job", () => {
+  mock.result = { data: empty };
+  const html = render({
+    ...hinted,
+    metadata: {
+      ...hinted.metadata,
+      ownerReferences: [
+        { apiVersion: "batch/v1", kind: "CronJob", controller: true },
+      ],
+    },
+  });
+  expect(html).toContain("No controller-owned Kueue Workload observed");
+  expect(html).not.toContain("Admission may be tracked");
+});
 
-describe('JobSet admission identity', () => {
-  it('rejects old evidence after recreation under the same name', () => {
-    expect(render('old-uid')).toContain('old-workload')
-    const html = render('new-uid')
-    expect(state.query).toHaveBeenLastCalledWith('ml', 'training', 'new-uid')
-    expect(html).not.toContain('old-workload')
-    expect(html).toContain('different JobSet instance')
-  })
 
-  it('accepts absence only for the displayed root instance', () => {
-    state.data = { uid: 'old-uid', installed: false, total: 0, truncated: false, workloads: [] }
-    expect(render('new-uid')).toContain('different JobSet instance')
-    state.data.uid = 'new-uid'
-    expect(render('new-uid')).toBe('')
-  })
-})
+describe("RayJob admission", () => {
+  it("uses RayJob identity and controller terminal status without inventing a Kueue hint", () => {
+    mock.result = { data: empty };
+    expect(render({ ...job, apiVersion: "ray.io/v1", kind: "RayJob", spec: { managedBy: "ray.io/kuberay-operator" }, status: { jobDeploymentStatus: "Complete" } })).toBe("");
+    expect(mock.calls.at(-1)?.[3]).toEqual({ isJob: false, isRayJob: true, hinted: false, terminal: true });
+  });
+  it("keeps MultiKueue admission visible separately from remote execution", () => {
+    mock.result = { data: empty };
+    const html = render({ ...job, apiVersion: "ray.io/v1", kind: "RayJob", spec: { managedBy: "kueue.x-k8s.io/multikueue" } });
+    expect(html).toContain("No controller-owned Kueue Workload observed");
+    expect(mock.calls.at(-1)?.[3]).toEqual({ isJob: false, isRayJob: true, hinted: true, terminal: false });
+  });
+});

package/src/components/execution/JobSetAdmission.tsx

@@ -1,17 +1,26 @@
 import { KueueAdmissionSection } from '@skyhook-io/k8s-ui/components/resources/KueueAdmissionSection'
 import { ApiError, useKueueAdmission } from '../../api/client'
 
-export function JobSetAdmission({ resource, namespace, name, onNavigate }: {
+export function KueueAdmission({ resource, namespace, name, onNavigate, presentation }: {
+  presentation?: 'card' | 'drawer'
   resource: any
   namespace: string
   name: string
   onNavigate?: (ref: { kind: string; namespace: string; name: string; group?: string }) => void
 }) {
-  const query = useKueueAdmission(namespace, name, resource.metadata?.uid)
-  const data = query.data?.uid === resource.metadata?.uid ? query.data : undefined
-  const error = query.error?.message ?? (query.data && !data ? 'Admission evidence belongs to a different JobSet instance; waiting for a fresh observation.' : undefined)
+  const isJob = resource.apiVersion === 'batch/v1' && resource.kind === 'Job'
+  const isRayJob = resource.apiVersion === 'ray.io/v1' && resource.kind === 'RayJob'
   const labels = resource.metadata?.labels
-  const externalExecution = Boolean(resource.spec?.managedBy && resource.spec.managedBy !== 'jobset.sigs.k8s.io/jobset-controller')
-  const hinted = Boolean(labels?.['kueue.x-k8s.io/queue-name'] || labels?.['kueue.x-k8s.io/prebuilt-workload-name'] || externalExecution)
-  return <KueueAdmissionSection data={data} loading={query.isLoading} error={error} forbidden={query.error instanceof ApiError && query.error.status === 403} hinted={hinted} externalExecution={externalExecution} onRetry={() => { void query.refetch() }} onNavigate={onNavigate} />
+  const annotations = resource.metadata?.annotations
+  const externalExecution = Boolean(resource.spec?.managedBy && resource.spec.managedBy !== (isRayJob ? 'ray.io/kuberay-operator' : isJob ? 'kubernetes.io/job-controller' : 'jobset.sigs.k8s.io/jobset-controller'))
+  const hinted = Boolean(labels?.['kueue.x-k8s.io/queue-name'] || labels?.['kueue.x-k8s.io/prebuilt-workload-name'] || annotations?.['kueue.x-k8s.io/prebuilt-workload-name'] || resource.spec?.managedBy === 'kueue.x-k8s.io/multikueue' || (!isJob && !isRayJob && externalExecution))
+  const terminal = (isRayJob && ['Complete', 'Failed', 'ValidationFailed'].includes(resource.status?.jobDeploymentStatus)) || (resource.status?.conditions ?? []).some((c: any) => ['Complete', 'Failed'].includes(c.type) && c.status === 'True')
+  const query = useKueueAdmission(namespace, name, resource.metadata?.uid, { isJob, isRayJob, hinted, terminal })
+  const data = query.data?.uid === resource.metadata?.uid ? query.data : undefined
+  const error = query.error?.message ?? (query.data && !data ? 'Admission evidence belongs to a different workload instance; waiting for a fresh observation.' : undefined)
+  if ((isJob || isRayJob) && !hinted && !data?.workloads.length) return null
+  const hasOwner = (resource.metadata?.ownerReferences ?? []).some((owner: any) => owner.controller === true && !(owner.apiVersion === 'batch/v1' && owner.kind === 'CronJob'))
+  return <KueueAdmissionSection presentation={presentation} data={data} loading={query.isLoading} error={error} forbidden={query.error instanceof ApiError && query.error.status === 403} hinted={hinted} externalExecution={externalExecution} hasOwner={isJob && hasOwner} onRetry={() => { void query.refetch() }} onNavigate={onNavigate} />
 }
+
+export { KueueAdmission as JobSetAdmission }

package/src/components/helm/TrackChartSourceDialog.tsx

@@ -1,4 +1,4 @@
-import { useState } from 'react'
+import { useState, useId } from 'react'
 import { DialogPortal } from '@skyhook-io/k8s-ui/components/ui/DialogPortal'
 import { X, Plus, Trash2, Link2, AlertTriangle } from 'lucide-react'
 import { clsx } from 'clsx'
@@ -50,6 +50,7 @@ function getSourceIssueCopy(sourceIssue: UpgradeInfo['sourceIssue'], sourceError
 // GitOps) Radar can only track upgrades once the user declares where they live.
 // Registering a registry/org prefix lets Radar probe "<prefix>/<chartName>".
 export function TrackChartSourceDialog({ open, onClose, chartName, sourceIssue, sourceError }: TrackChartSourceDialogProps) {
+  const titleId = useId()
   const [value, setValue] = useState('')
   const { data: sources } = useHelmOCISources()
   const { data: clusterInfo } = useClusterInfo()
@@ -78,13 +79,13 @@ export function TrackChartSourceDialog({ open, onClose, chartName, sourceIssue,
   }
 
   return (
-    <DialogPortal open={open} onClose={onClose} className="max-w-lg w-full">
+    <DialogPortal ariaLabelledBy={titleId} open={open} onClose={onClose} className="max-w-lg w-full">
       <div className="flex items-start gap-3 p-4 border-b border-theme-border">
         <div className="flex items-center justify-center w-10 h-10 rounded-full shrink-0 bg-theme-hover">
           <Link2 className="w-5 h-5 text-theme-text-secondary" />
         </div>
         <div className="flex-1 min-w-0">
-          <h3 className="text-lg font-semibold text-theme-text-primary">Track chart source</h3>
+          <h3 id={titleId} className="text-lg font-semibold text-theme-text-primary">Track chart source</h3>
           <p className="text-sm text-theme-text-secondary mt-1">
             Helm doesn&apos;t record where a chart was installed from. Radar checks registered OCI
             prefixes for newer versions of your charts.
@@ -92,6 +93,7 @@ export function TrackChartSourceDialog({ open, onClose, chartName, sourceIssue,
         </div>
         <button
           onClick={onClose}
+          aria-label="Close"
           className="p-1 text-theme-text-secondary hover:text-theme-text-primary hover:bg-theme-elevated rounded"
         >
           <X className="w-5 h-5" />

package/src/components/home/HomeView.tsx

@@ -52,9 +52,11 @@ interface HomeViewProps {
   onNavigateToUpgradeImpact?: () => void
   onNavigateToHelmRelease?: (namespace: string, release: string) => void
   onNavigateToManagerPath?: (path: string) => void
+  // Present only when release notes exist for this version.
+  onShowWhatsNew?: () => void
 }
 
-export function HomeView({ namespaces, topology, fallbackClusterLoadState, onNavigateToView, onNavigateToResourceKind, onNavigateToResource, onNavigateToCerts, onNavigateToUpgradeImpact, onNavigateToHelmRelease, onNavigateToManagerPath }: HomeViewProps) {
+export function HomeView({ namespaces, topology, fallbackClusterLoadState, onNavigateToView, onNavigateToResourceKind, onNavigateToResource, onNavigateToCerts, onNavigateToUpgradeImpact, onNavigateToHelmRelease, onNavigateToManagerPath, onShowWhatsNew }: HomeViewProps) {
   // The card itself decides whether the cluster has a capacity story
   // (available, softened-denied, or karpenterless-with-managers/groups) and
   // returns null otherwise — the outer gate only excludes states with nothing
@@ -138,9 +140,11 @@ export function HomeView({ namespaces, topology, fallbackClusterLoadState, onNav
         )}
         {/* Row 1: Cluster Health Card (combined health + resource counts) */}
         <ClusterHealthCard
-          radarVersion={deploymentMode === 'in-cluster' && versionInfo ? (
+          radarVersion={versionInfo && deploymentMode !== 'cloud' ? (
             <RadarVersionLine
               version={versionInfo}
+              showUpgrade={deploymentMode === 'in-cluster'}
+              onShowWhatsNew={onShowWhatsNew}
               manager={installationManager}
               managerLoading={installationManagerLoading}
               onNavigateToHelmRelease={onNavigateToHelmRelease}

package/src/components/home/RadarVersionLine.test.tsx

@@ -142,4 +142,18 @@ describe('RadarVersionLine', () => {
     expect(html).toContain('Open the in-cluster upgrade instructions and apply the change through GitOps')
     expect(html).not.toContain('Open it to upgrade through GitOps')
   })
+
+  it('offers What\'s new only when the host can open it', () => {
+    const upToDate = { ...version, latestVersion: '1.2.3', updateAvailable: false }
+    expect(renderToString(<RadarVersionLine version={upToDate} />)).not.toContain('What&#x27;s new')
+    expect(renderToString(<RadarVersionLine version={upToDate} onShowWhatsNew={() => {}} />)).toContain('What&#x27;s new')
+    expect(renderToString(<RadarVersionLine version={version} onShowWhatsNew={() => {}} />)).toContain('What&#x27;s new')
+  })
+
+  it('hides upgrade guidance when the host handles upgrades elsewhere', () => {
+    const html = renderToString(<RadarVersionLine version={version} showUpgrade={false} onShowWhatsNew={() => {}} />)
+    expect(html).toContain('v1.2.3')
+    expect(html).not.toContain('available')
+    expect(html).toContain('What&#x27;s new')
+  })
 })

package/src/components/home/RadarVersionLine.tsx

@@ -1,4 +1,4 @@
-import { ArrowUpCircle } from 'lucide-react'
+import { ArrowUpCircle, Megaphone } from 'lucide-react'
 import { gitOpsRouteForResource } from '@skyhook-io/k8s-ui'
 import type { CloudConnectSelf, VersionInfo } from '../../api/client'
 import {
@@ -14,6 +14,10 @@ interface RadarVersionLineProps {
   managerLoading?: boolean
   onNavigateToHelmRelease?: (namespace: string, release: string) => void
   onNavigateToGitOps?: (path: string) => void
+  // Local installs upgrade through the update notification, and this line's
+  // upgrade link points at in-cluster instructions.
+  showUpgrade?: boolean
+  onShowWhatsNew?: () => void
 }
 
 function displayVersion(version: string): string {
@@ -26,13 +30,33 @@ export function RadarVersionLine({
   managerLoading = false,
   onNavigateToHelmRelease,
   onNavigateToGitOps,
+  showUpgrade: upgradeAllowed = true,
+  onShowWhatsNew,
 }: RadarVersionLineProps) {
   const latestVersion = version.latestVersion
   const updateStatus = getVersionUpdateStatus(version.currentVersion, latestVersion)
-  const showUpgrade = version.updateAvailable && !!latestVersion && updateStatus.tier !== 'none'
+  const showUpgrade = upgradeAllowed && version.updateAvailable && !!latestVersion && updateStatus.tier !== 'none'
+  const whatsNew = onShowWhatsNew && (
+    <span className="inline-flex items-center gap-1">
+      <span aria-hidden>·</span>
+      <button
+        type="button"
+        onClick={onShowWhatsNew}
+        className="inline-flex items-center gap-1 text-accent-text hover:text-accent transition-colors"
+      >
+        <Megaphone className="h-3.5 w-3.5 shrink-0" aria-hidden />
+        What's new
+      </button>
+    </span>
+  )
 
   if (!showUpgrade) {
-    return <span>Radar <span className="font-mono">{displayVersion(version.currentVersion)}</span></span>
+    return (
+      <span className="inline-flex flex-wrap items-center gap-x-1">
+        <span>Radar <span className="font-mono">{displayVersion(version.currentVersion)}</span></span>
+        {whatsNew}
+      </span>
+    )
   }
 
   const controller = manager?.controllerRef
@@ -111,6 +135,7 @@ export function RadarVersionLine({
           {action}
         </Tooltip>
       </span>
+      {whatsNew}
     </span>
   )
 }

package/src/components/nav/PrimaryNavRail.test.tsx

@@ -2,13 +2,14 @@ import { describe, expect, it } from "vitest";
 import { renderToString } from "react-dom/server";
 import { PrimaryNavRail } from "./PrimaryNavRail";
 
-function renderRail() {
+function renderRail(whatsNew?: { unread: boolean; onOpen: () => void }) {
   return renderToString(
     <PrimaryNavRail
       activeView="home"
       onNavigate={() => {}}
       pinned
       onTogglePinned={() => {}}
+      whatsNew={whatsNew}
     />,
   );
 }
@@ -17,4 +18,12 @@ describe("PrimaryNavRail", () => {
   it("always surfaces Capacity — the view reads cluster capacity across every node manager, not just Karpenter", () => {
     expect(renderRail()).toContain("Capacity");
   });
+
+  it("shows What's new only when the host has notes, and marks it while unread", () => {
+    expect(renderRail()).not.toContain("What&#x27;s new");
+    const read = renderRail({ unread: false, onOpen: () => {} });
+    expect(read).toContain("What&#x27;s new");
+    expect(read).not.toContain("(unread)");
+    expect(renderRail({ unread: true, onOpen: () => {} })).toContain("(unread)");
+  });
 });

package/src/components/nav/PrimaryNavRail.tsx

@@ -14,6 +14,7 @@ import {
   Gauge,
   ShieldCheck,
   Settings,
+  Megaphone,
   PanelLeftClose,
   PanelLeftOpen,
 } from "lucide-react";
@@ -97,6 +98,8 @@ interface PrimaryNavRailProps {
   // which self-nulls without auth so the row vanishes in no-auth OSS).
   onOpenSettings?: () => void;
   accountSlot?: ReactNode;
+  // Present only when release notes exist for this version; unread adds a dot.
+  whatsNew?: { unread: boolean; onOpen: () => void };
 }
 
 export function PrimaryNavRail({
@@ -107,6 +110,7 @@ export function PrimaryNavRail({
   showPinToggle = true,
   onOpenSettings,
   accountSlot,
+  whatsNew,
 }: PrimaryNavRailProps) {
   return (
     <aside
@@ -157,6 +161,15 @@ export function PrimaryNavRail({
           accountSlot self-nulls without auth, so no-auth OSS shows only Settings. */}
       <nav className="flex flex-col gap-0.5 px-2 pt-1 border-t border-theme-border/50">
         {accountSlot}
+        {whatsNew && (
+          <RailActionRow
+            icon={Megaphone}
+            label="What's new"
+            pinned={pinned}
+            onClick={whatsNew.onOpen}
+            unread={whatsNew.unread}
+          />
+        )}
         {onOpenSettings && (
           <RailActionRow
             icon={Settings}
@@ -337,11 +350,13 @@ export function RailActionRow({
   label,
   pinned,
   onClick,
+  unread = false,
 }: {
   icon: ComponentType<{ className?: string }>;
   label: string;
   pinned: boolean;
   onClick: () => void;
+  unread?: boolean;
 }) {
   return (
     <div className={clsx("group/item relative", !pinned && "w-10")}>
@@ -353,11 +368,18 @@ export function RailActionRow({
           !pinned && "max-w-10 overflow-hidden",
         )}
       >
-        <span className="flex w-10 shrink-0 items-center justify-center">
-          <Icon className="w-[18px] h-[18px] text-theme-text-tertiary group-hover/item:text-theme-text-secondary" />
+        <span className="relative flex w-10 shrink-0 items-center justify-center">
+          <Icon className={clsx(
+            "w-[18px] h-[18px] group-hover/item:text-theme-text-secondary",
+            unread ? "text-accent" : "text-theme-text-tertiary",
+          )} />
+          {unread && (
+            <span aria-hidden className="absolute top-1.5 right-2 h-2 w-2 rounded-full bg-accent ring-2 ring-theme-sidebar" />
+          )}
         </span>
-        <span className={clsx("pr-3 truncate", !pinned && "opacity-0")}>
+        <span className={clsx("pr-3 truncate", !pinned && "opacity-0", unread && "text-theme-text-primary")}>
           {label}
+          {unread && <span className="sr-only"> (unread)</span>}
         </span>
       </button>
       {!pinned && (

package/src/components/resources/renderers/JobAdmissionRenderers.test.tsx

@@ -0,0 +1,18 @@
+import { renderToStaticMarkup } from 'react-dom/server'
+import { describe, expect, it, vi } from 'vitest'
+import { JobRenderer, JobSetRenderer } from './JobAdmissionRenderers'
+vi.mock('../../execution/JobSetAdmission', () => ({ KueueAdmission: ({ presentation }: { presentation?: string }) => <div data-presentation={presentation}>admission evidence</div> }))
+const job = { apiVersion: 'batch/v1', kind: 'Job', metadata: { name: 'training', namespace: 'ml' }, status: { conditions: [{ type: 'Failed', status: 'True', reason: 'BackoffLimitExceeded' }] } }
+describe('admission renderer composition', () => {
+ it('keeps Job failure above admission evidence', () => {
+  const html = renderToStaticMarkup(<JobRenderer data={job} />)
+  expect(html).toContain('data-presentation="drawer"')
+  expect(html.indexOf('Job Issues')).toBeLessThan(html.indexOf('admission evidence'))
+ })
+ it('does not mount batch admission for a colliding Job kind', () => {
+  expect(renderToStaticMarkup(<JobRenderer data={{...job, apiVersion:'batch.volcano.sh/v1alpha1'}} />)).not.toContain('admission evidence')
+ })
+ it('mounts admission in the JobSet drawer', () => {
+  expect(renderToStaticMarkup(<JobSetRenderer data={{...job, apiVersion:'jobset.x-k8s.io/v1alpha2',kind:'JobSet'}} />)).toContain('admission evidence')
+ })
+})

package/src/components/resources/renderers/JobAdmissionRenderers.tsx

@@ -0,0 +1,18 @@
+import { JobRenderer as BaseJobRenderer } from '@skyhook-io/k8s-ui/components/resources/renderers/JobRenderer'
+import { JobSetRenderer as BaseJobSetRenderer } from '@skyhook-io/k8s-ui/components/resources/renderers/JobSetRenderer'
+import type { ResourceRef } from '@skyhook-io/k8s-ui'
+import { KueueAdmission } from '../../execution/JobSetAdmission'
+
+type Props = { data: any; onNavigate?: (ref: ResourceRef) => void }
+
+export function JobRenderer({ data, onNavigate }: Props) {
+  return <BaseJobRenderer data={data} admissionContent={
+    data.apiVersion === 'batch/v1' && data.kind === 'Job' && <KueueAdmission presentation="drawer" resource={data} namespace={data.metadata.namespace} name={data.metadata.name} onNavigate={onNavigate} />
+  } />
+}
+
+export function JobSetRenderer({ data, onNavigate }: Props) {
+  return <BaseJobSetRenderer data={data} admissionContent={
+    <KueueAdmission presentation="drawer" resource={data} namespace={data.metadata.namespace} name={data.metadata.name} onNavigate={onNavigate} />
+  } />
+}

package/src/components/resources/renderers/RayJobRenderer.test.tsx

@@ -0,0 +1,40 @@
+import { renderToStaticMarkup } from 'react-dom/server'
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { RayJobRenderer } from './RayJobRenderer'
+import { ApiError } from '../../../api/client'
+const mock = vi.hoisted(() => ({ query: {} as any, reads: [] as any[] }))
+vi.mock('../../../api/client', () => ({ ApiError: class extends Error { constructor(message: string, public status: number) { super(message) } }, useResource: (...args: any[]) => { mock.reads.push(args); return mock.query } }))
+vi.mock('../../execution/JobSetAdmission', () => ({ KueueAdmission: () => null }))
+const root = { apiVersion: 'ray.io/v1', kind: 'RayJob', metadata: { name: 'train', namespace: 'ml', uid: 'root' }, spec: {} }
+const child = { apiVersion: 'batch/v1', kind: 'Job', metadata: { name: 'train', namespace: 'ml', ownerReferences: [{ apiVersion: 'ray.io/v1', kind: 'RayJob', name: 'train', uid: 'root', controller: true }] }, spec: {}, status: {} }
+const render = (data: any = root) => renderToStaticMarkup(<RayJobRenderer data={data} onNavigate={() => {}} />)
+describe('RayJob child reads', () => {
+  beforeEach(() => { mock.query = {}; mock.reads = [] })
+  it('reads the exact submitter candidate and accepts only the controller incarnation', () => {
+    mock.query = { data: child }
+    expect(render()).toContain('Open this Job for submitter Pods')
+    expect(mock.reads).toEqual([['jobs', 'ml', 'train', 'batch']])
+    expect(render({ ...root, metadata: { ...root.metadata, uid: 'recreated' } })).toContain('ownership mismatch')
+  })
+  it.each([
+    { ...child, apiVersion: 'batch.volcano.sh/v1alpha1' },
+    { ...child, metadata: { ...child.metadata, namespace: 'other' } },
+    { ...child, metadata: { ...child.metadata, ownerReferences: [{ ...child.metadata.ownerReferences[0], controller: false }] } },
+  ])('rejects wrong identity', data => { mock.query = { data }; expect(render()).toContain('ownership mismatch') })
+  it.each(['HTTPMode', 'SidecarMode', 'InteractiveMode', 'FutureMode'])('does not read a submitter in %s', submissionMode => { render({ ...root, spec: { submissionMode } }); expect(mock.reads).toEqual([]) })
+  it('does not read remote children, including selected clusters', () => { render({ ...root, spec: { managedBy: 'remote', clusterSelector: { 'ray.io/cluster': 'shared' } } }); expect(mock.reads).toEqual([]) })
+  it('keeps missing and denied observations distinct, even with cached data', () => {
+    mock.query = { data: child, error: new ApiError('not found', 404) }
+    expect(render()).toContain('No submitter Job observed')
+    mock.query.error = new ApiError('denied', 403)
+    expect(render()).toContain('Submitter evidence unavailable')
+    expect(render()).not.toContain('Open this Job')
+  })
+  it('keeps deleting submitter logs reachable without declaring a current attempt', () => {
+    mock.query = { data: { ...child, metadata: { ...child.metadata, deletionTimestamp: '2026-09-27T00:00:00Z' } } }
+    const html = render({ ...root, status: { jobDeploymentStatus: 'Retrying' } })
+    expect(html).toContain('Deleting')
+    expect(html).toContain('attempt being cleaned up')
+    expect(html).toContain('Open this Job')
+  })
+})

package/src/components/resources/renderers/RayJobRenderer.tsx

@@ -0,0 +1,45 @@
+import { Tooltip } from '@skyhook-io/k8s-ui/components/ui/Tooltip'
+import { Badge } from '@skyhook-io/k8s-ui/components/ui/Badge'
+import type { ResourceRef } from '@skyhook-io/k8s-ui'
+import { RayJobRenderer as BaseRenderer } from '@skyhook-io/k8s-ui/components/resources/renderers/RayJobRenderer'
+import { rayJobIsLocal, rayJobSubmissionMode } from '@skyhook-io/k8s-ui/components/resources/resource-utils-ray'
+import { getJobStatus } from '@skyhook-io/k8s-ui/components/resources/resource-utils'
+import { apiVersionToGroup } from '@skyhook-io/k8s-ui/utils/navigation'
+import { formatRelativeAgeTime } from '@skyhook-io/k8s-ui/utils/format'
+import { AlertBanner, ResourceLink } from '@skyhook-io/k8s-ui/components/ui/drawer-components'
+import { ApiError, useResource } from '../../../api/client'
+import { KueueAdmission } from '../../execution/JobSetAdmission'
+
+function Submitter({ root, onNavigate }: { root: any; onNavigate?: (ref: ResourceRef) => void }) {
+  const query = useResource<any>('jobs', root.metadata.namespace, root.metadata.name, 'batch')
+  if (query.error) return query.error instanceof ApiError && query.error.status === 404
+    ? <p className="text-theme-text-secondary">No submitter Job observed. It may not have been created yet or may have been cleaned up.</p>
+    : <AlertBanner variant="warning" title="Submitter evidence unavailable" message={query.error.message} />
+  if (!query.data) return <p className="text-theme-text-secondary">Reading submitter Job…</p>
+  const job = query.data
+  const owned = job.apiVersion === 'batch/v1' && job.kind === 'Job' && job.metadata?.name === root.metadata.name && job.metadata?.namespace === root.metadata.namespace && job.metadata.ownerReferences?.some((owner: any) => owner.controller === true && apiVersionToGroup(owner.apiVersion) === 'ray.io' && owner.kind === 'RayJob' && owner.name === root.metadata.name && owner.uid === root.metadata.uid)
+  if (!owned) return <AlertBanner variant="warning" title="Submitter ownership mismatch" message="The same-name Job does not report this RayJob incarnation as its controller. Its status is not attributed to this RayJob." />
+  const status = getJobStatus(job)
+  return <div className="space-y-2">
+    <div className="flex flex-wrap items-center gap-2"><ResourceLink kind="jobs" group="batch" namespace={job.metadata.namespace} name={job.metadata.name} onNavigate={onNavigate} />{job.metadata.deletionTimestamp ? <Badge severity="alert">Deleting</Badge> : <span className={`badge ${status.color}`}>{status.text}</span>}</div>
+    {job.metadata.creationTimestamp && <p className="text-xs text-theme-text-secondary">Created <Tooltip content={job.metadata.creationTimestamp}><time dateTime={job.metadata.creationTimestamp}>{formatRelativeAgeTime(job.metadata.creationTimestamp)}</time></Tooltip></p>}
+    <p className="text-xs text-theme-text-secondary">Open this Job for submitter Pods and logs. Ownership identifies the RayJob, not a particular attempt.</p>
+    {(job.metadata.deletionTimestamp || ['Retrying', 'Suspending'].includes(root.status?.jobDeploymentStatus)) && <p className="text-xs text-theme-text-secondary">The submitter may be part of the attempt being cleaned up.</p>}
+  </div>
+}
+
+function SelectedCluster({ namespace, name }: { namespace: string; name: string }) {
+  const query = useResource<any>('rayclusters', namespace, name, 'ray.io')
+  if (query.error) return <AlertBanner variant="warning" title="Selected cluster unavailable" message={query.error instanceof ApiError && query.error.status === 404 ? 'The selected existing RayCluster was not found. RayJob initialization requires that cluster.' : query.error.message} />
+  if (!query.data) return <p className="text-xs text-theme-text-secondary">Checking selected RayCluster…</p>
+  return <p className="text-xs text-theme-text-secondary">Selected RayCluster is present. It may be shared; its health is separate from this application.</p>
+}
+
+export function RayJobRenderer({ data, onNavigate }: { data: any; onNavigate?: (ref: ResourceRef) => void }) {
+  const local = rayJobIsLocal(data)
+  const selected = data.spec?.clusterSelector?.['ray.io/cluster']
+  return <BaseRenderer data={data} onNavigate={onNavigate}
+    admissionContent={<KueueAdmission resource={data} namespace={data.metadata.namespace} name={data.metadata.name} onNavigate={onNavigate} presentation="card" />}
+    submitterEvidence={local && rayJobSubmissionMode(data) === 'K8sJobMode' && data.metadata.uid ? <Submitter root={data} onNavigate={onNavigate} /> : undefined}
+    selectedClusterEvidence={local && selected ? <SelectedCluster namespace={data.metadata.namespace} name={selected} /> : undefined} />
+}