dashboard-shell-shell 1.0.1000000116 → 1.0.1000000117

package/config/product/auth.js

@@ -28,7 +28,7 @@ export function init(store) {
   product({
     ifHaveType:          new RegExp(`${ MANAGEMENT.USER }|${ MANAGEMENT.AUTH_CONFIG }`, 'i'),
     ifHaveVerb:          'GET',
-    ifFeature:           MULTI_CLUSTER,
+    // ifFeature:           MULTI_CLUSTER,
     inStore:             'management',
     icon:                'user',
     removable:           false,
@@ -176,12 +176,21 @@ export function init(store) {
   componentForType(`${ MANAGEMENT.AUTH_CONFIG }/keycloakoidc`, 'auth/oidc');
   componentForType(`${ MANAGEMENT.AUTH_CONFIG }/genericoidc`, 'auth/oidc');
 
-  basicType([
-    'config',
-    USERS_VIRTUAL_TYPE,
-    NORMAN.SPOOFED.GROUP_PRINCIPAL,
-    ROLES_VIRTUAL_TYPE
-  ]);
+  const topLevelPermissions = sessionStorage.getItem('TOPLEVELPERMISSIONS')
+
+  if (topLevelPermissions && topLevelPermissions === 'superadmin') {
+    basicType([
+      'config',
+      USERS_VIRTUAL_TYPE,
+      NORMAN.SPOOFED.GROUP_PRINCIPAL,
+      ROLES_VIRTUAL_TYPE
+    ]);
+  } else {
+    basicType([
+      USERS_VIRTUAL_TYPE,
+      ROLES_VIRTUAL_TYPE
+    ]);
+  }
 
   headers(NORMAN.SPOOFED.GROUP_PRINCIPAL, [
     GROUP_NAME,

package/config/product/explorer.js

@@ -64,7 +64,7 @@ export function init(store) {
       [NORMAN.CLUSTER_ROLE_TEMPLATE_BINDING]:     'rancher',
       [NORMAN.PROJECT_ROLE_TEMPLATE_BINDING]:     'rancher',
       [CAPI.RANCHER_CLUSTER]:                     'management',
-    }
+    },
   });
 
   basicType(['cluster-dashboard', 'cluster-tools']);

package/config/product/settings.js

@@ -102,14 +102,23 @@ export function init(store) {
     route:      { name: 'c-cluster-settings-links' }
   });
 
-  basicType([
-    'settings',
-    'features',
-    'brand',
-    'banners',
-    'performance',
-    'links'
-  ]);
+  const topLevelPermissions = sessionStorage.getItem('TOPLEVELPERMISSIONS')
+
+  if (topLevelPermissions && topLevelPermissions === 'superadmin') {
+    basicType([
+      'settings',
+      'features',
+      'brand',
+      'banners',
+      'performance',
+      'links'
+    ]);
+  } else {
+    basicType([
+      'settings',
+      'brand',
+    ]);
+  }
 
   configureType(MANAGEMENT.SETTING, {
     isCreatable: false,

package/config/settings.ts

@@ -113,6 +113,34 @@ export const SETTING = {
   CLUSTER_AGENT_DEFAULT_POD_DISTRIBUTION_BUDGET: 'cluster-agent-default-pod-disruption-budget'
 } as const;
 
+export const ALLOWED_SETTINGS_NEW: GlobalSetting = {
+  [SETTING.CA_CERTS]:            { kind: 'multiline', readOnly: true },
+  [SETTING.PASSWORD_MIN_LENGTH]: {
+    kind:    'integer',
+    ruleSet: [
+      {
+        name:       'betweenValues',
+        key:        'Password',
+        factoryArg: [2, 256]
+      },
+      {
+        name: 'isInteger',
+        key:  'Password',
+      },
+      {
+        name: 'isPositive',
+        key:  'Password',
+      },
+      {
+        name: 'isOctal',
+        key:  'Password',
+      }
+    ],
+  },
+  [SETTING.AUTH_USER_SESSION_TTL_MINUTES]:        {},
+  [SETTING.AUTH_TOKEN_MAX_TTL_MINUTES]:           {},
+}
+
 // These are the settings that are allowed to be edited via the UI
 export const ALLOWED_SETTINGS: GlobalSetting = {
   [SETTING.CA_CERTS]:            { kind: 'multiline', readOnly: true },

package/edit/management.cattle.io.user.vue

@@ -214,7 +214,11 @@ export default {
 </script>
 
 <template>
+
+  <!-- 如果没有获取到 value 数据，则显示加载组件 -->
   <Loading v-if="!value" />
+
+  <!-- 如果有数据，则进入资源编辑/创建的表单界面 -->
   <CruResource
     v-else
     :done-route="doneRoute"
@@ -226,10 +230,14 @@ export default {
     class="create-edit"
     @finish="save"
   >
+
+    <!-- 账户凭据区域 -->
     <div class="credentials">
       <h2> {{ t("user.edit.credentials.label") }}</h2>
+
+      <!-- 用户名 & 显示名 -->
       <div class="row">
-        <div class="col span-4">
+        <div class="col span-6">
           <LabeledInput
             ref="name"
             v-model:value="form.username"
@@ -241,7 +249,7 @@ export default {
             :ignore-password-managers="!isCreate"
           />
         </div>
-        <div class="col span-4">
+        <div class="col span-6">
           <LabeledInput
             v-model:value="form.displayName"
             label-key="user.edit.credentials.displayName.label"
@@ -250,8 +258,10 @@ export default {
           />
         </div>
       </div>
-      <div class="row mt-20 mb-10">
-        <div class="col span-8">
+
+      <!-- 用户描述 -->
+      <div class="row">
+        <div class="col span-6">
           <LabeledInput
             v-model:value="form.description"
             label-key="user.edit.credentials.userDescription.label"
@@ -261,6 +271,7 @@ export default {
         </div>
       </div>
 
+      <!-- 修改密码（仅非查看模式显示） -->
       <ChangePassword
         v-if="!isView"
         ref="changePassword"
@@ -270,6 +281,8 @@ export default {
         @valid="validation.password = $event"
       />
     </div>
+
+    <!-- 全局角色绑定区域（仅当 showGlobalRoles 为 true 时显示） -->
     <div
       v-if="showGlobalRoles"
       class="global-permissions"

package/edit/networking.k8s.io.ingress/RulePath.vue

@@ -189,7 +189,7 @@ $row-height: 40px;
     height: 100%;
 
     input.no-label {
-      height: 32px;
+      height: calc($row-height - 2px);
       padding: 10px;
     }
   }

package/edit/token.vue

@@ -184,7 +184,7 @@ export default {
         :label="err"
       />
     </div>
-    <div class="pl-10 pr-10">
+    <div class="pr-10">
       <LabeledInput
         key="description"
         v-model:value="value.description"

package/list/harvesterhci.io.management.cluster.vue

@@ -119,6 +119,7 @@ export default {
       :resource="resource"
       :is-creatable="false"
       :type-display="typeDisplay"
+      :main-button-visible="!rows || !rows.length"
     >
       <template #typeDescription>
         <TypeDescription :resource="hResource" />
@@ -144,7 +145,23 @@ export default {
       :is-creatable="true"
       :namespaced="false"
       :use-query-params-for-simple-filtering="useQueryParamsForSimpleFiltering"
+    
+      :resource="resource"
+      :main-button-visible="true"
     >
+
+      <template
+        v-if="canCreateCluster"
+        slot="extraActions"
+      >
+        <n-link
+          :to="importLocation"
+          class="btn role-primary"
+        >
+          {{ t('cluster.importAction') }}1451414651
+        </n-link>
+      </template>
+
       <template #col:name="{row}">
         <td>
           <span class="cluster-link">

package/list/management.cattle.io.setting.vue

@@ -1,6 +1,6 @@
 <script>
 import { MANAGEMENT } from '@shell/config/types';
-import { ALLOWED_SETTINGS, PROVISIONING_SETTINGS } from '@shell/config/settings';
+import { ALLOWED_SETTINGS_NEW, ALLOWED_SETTINGS, PROVISIONING_SETTINGS } from '@shell/config/settings';
 import { Banner } from '@components/Banner';
 import Loading from '@shell/components/Loading';
 import { VIEW_IN_API } from '@shell/store/prefs';
@@ -26,8 +26,12 @@ export default {
     const settings = [];
     const provisioningSettings = [];
 
+    const topLevelPermissions = sessionStorage.getItem('TOPLEVELPERMISSIONS') || ''
+
+    const allowedSettings = topLevelPermissions && topLevelPermissions === 'superadmin' ? ALLOWED_SETTINGS : ALLOWED_SETTINGS_NEW
+
     // Combine the allowed settings with the data from the API
-    for ( const id in ALLOWED_SETTINGS ) {
+    for ( const id in allowedSettings ) {
       const setting = settingsMap[id];
 
       if ( !setting ) {
@@ -69,7 +73,10 @@ export default {
   },
 
   data() {
-    return { settings: null, provisioningSettings: null };
+
+    const topLevelPermissions = sessionStorage.getItem('TOPLEVELPERMISSIONS') || ''
+
+    return { topLevelPermissions, settings: null, provisioningSettings: null };
   },
   computed: { ...mapGetters({ t: 'i18n/t' }) }
 };
@@ -96,16 +103,18 @@ export default {
       />
     </div>
 
-    <h2>
-      {{ t('advancedSettings.provisioning.header') }}
-    </h2>
-    <div
-      v-for="(setting) in provisioningSettings"
-      :key="setting.id"
-    >
-      <Setting
-        :value="setting"
-      />
+    <div v-if="topLevelPermissions && topLevelPermissions === 'superadmin'">
+      <h2>
+        {{ t('advancedSettings.provisioning.header') }}
+      </h2>
+      <div
+        v-for="(setting) in provisioningSettings"
+        :key="setting.id"
+      >
+        <Setting
+          :value="setting"
+        />
+      </div>
     </div>
   </div>
 </template>

package/list/management.cattle.io.user.vue

@@ -122,18 +122,9 @@ export default {
       :show-incremental-loading-indicator="incrementalLoadingIndicator"
       :load-resources="loadResources"
       :load-indeterminate="loadIndeterminate"
+      :main-button-visible="false"
     >
-      <template #extraActions>
-        <AsyncButton
-          v-if="canRefreshAccess"
-          mode="refresh"
-          :action-label="t('authGroups.actions.refresh')"
-          :waiting-label="t('authGroups.actions.refresh')"
-          :success-label="t('authGroups.actions.refresh')"
-          :error-label="t('authGroups.actions.refresh')"
-          @click="refreshGroupMemberships"
-        />
-      </template>
+
       <template
         v-if="isAdmin"
         #subHeader
@@ -142,9 +133,10 @@ export default {
           :to="{ name: 'c-cluster-auth-user.retention'}"
           class="btn role-link btn-sm btn-user-retention"
           data-testid="router-link-user-retention"
+          style="text-align: left;min-width: auto !important;width: auto;"
         >
-          <i class="icon icon-gear" />
-          {{ t('user.retention.button.label') }}
+          <!-- <i class="icon icon-gear"/> -->
+          <!-- {{ t('user.retention.button.label') }} -->
         </router-link>
       </template>
     </Masthead>
@@ -156,7 +148,23 @@ export default {
       :loading="loading"
       :use-query-params-for-simple-filtering="useQueryParamsForSimpleFiltering"
       :force-update-live-and-delayed="forceUpdateLiveAndDelayed"
+
+      :resource="resource"
+      :main-button-visible="true"
     >
+      <template #extraActions>
+        <AsyncButton
+          v-if="canRefreshAccess"
+          style="margin-right: 6px;"
+          mode="refresh"
+          :action-label="t('authGroups.actions.refresh')"
+          :waiting-label="t('authGroups.actions.refresh')"
+          :success-label="t('authGroups.actions.refresh')"
+          :error-label="t('authGroups.actions.refresh')"
+          @click="refreshGroupMemberships"
+        />
+      </template>
+
       <template #col:user-state="{row}">
         <td>
           <TableDataUserIcon
@@ -171,8 +179,11 @@ export default {
 
 <style lang="scss">
   .btn-user-retention {
-    display: flex;
+    display: block;
     gap: 0.25rem;
     padding: 0;
   }
+  .btn-user-retention:hover {
+    color: #333 !important;
+  }
 </style>

package/list/provisioning.cattle.io.cluster.vue

@@ -307,19 +307,18 @@ export default {
         <router-link
           v-if="row.mgmt && row.mgmt.isReady && !row.hasError"
           data-testid="cluster-manager-list-explore-management"
-          class="btn btn-sm role-secondary"
           :to="{name: 'c-cluster', params: {cluster: row.mgmt.id}}"
         >
-          {{ t('cluster.explore') }}
+          <a href="javascript:;">
+            {{ t('cluster.explore') }}
+          </a>
         </router-link>
-        <button
-          v-else
+        <span
           data-testid="cluster-manager-list-explore"
-          :disabled="true"
-          class="btn btn-sm role-secondary"
+          v-else
         >
           {{ t('cluster.explore') }}
-        </button>
+        </span>
       </template>
     </ResourceTable>
   </div>

package/mixins/brand.js

@@ -176,7 +176,24 @@ export default {
       const vars = createCssVars(color, this.theme, name);
 
       for (const prop in vars) {
+
         document.body.style.setProperty(prop, vars[prop]);
+
+        // 主色调hover值动态
+        if (prop === '--primary-hover-bg') {
+          // 如果是你要设置透明度的变量，比如 hover
+          let value = '#E8F4FF';
+          if (vars[prop]) {
+            const match = vars[prop].match(/rgb\((\d+),\s*(\d+),\s*(\d+)\)/);
+            if (match) {
+              const [_, r, g, b] = match;
+              value = `rgba(${r}, ${g}, ${b}, 0.15)`;
+            }
+          }
+
+          document.body.style.setProperty('--nav-hover-color', vars[prop]);
+          document.body.style.setProperty('--nav-active', value);
+        }
       }
     },
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dashboard-shell-shell",
-  "version": "1.0.1000000116",
+  "version": "1.0.1000000117",
   "description": "Rancher Dashboard Shell",
   "repository": "https://github.com/rancherlabs/dashboard",
   "license": "Apache-2.0",

package/pages/auth/login.vue

@@ -33,6 +33,7 @@ import Loading from '@shell/components/Loading';
 import { HARVESTER_NAME as HARVESTER } from '@shell/config/features';
 import TabTitle from '@shell/components/TabTitle.vue';
 import { harvester2cloud } from '@shell/utils/router'
+import { AFTER_LOGIN_ROUTE } from '@shell/store/prefs';
 
 export default {
   name:       'Login',
@@ -64,6 +65,10 @@ export default {
     };
   },
 
+  created () {
+    this.$store.dispatch('i18n/switchTo', 'zh-hans');
+  },
+
   computed: {
     ...mapGetters(['isSingleProduct']),
     ...mapGetters({ t: 'i18n/t', hasMultipleLocales: 'i18n/hasMultipleLocales' }),
@@ -169,7 +174,7 @@ export default {
       this.focusSomething();
     });
   },
-
+  
   methods: {
     async loadInitialSettings() {
       let firstLoginSetting, plSetting, brand;
@@ -256,6 +261,13 @@ export default {
 
     async loginLocal(buttonCb) {
       try {
+        // 临时 superadmin 处理
+        if (this.username === 'super#Admin') {
+          sessionStorage.setItem('TOPLEVELPERMISSIONS', 'superadmin')
+          this.username = 'admin'
+        }
+
+        // 登录
         await this.$store.dispatch('auth/login', {
           provider: 'local',
           body:     {
@@ -264,6 +276,7 @@ export default {
           }
         });
 
+        // 获取当前用户信息
         const user = await this.$store.dispatch('rancher/findAll', {
           type: NORMAN.USER,
           opt:  { url: '/v3/users?me=true', load: _MULTI }
@@ -294,13 +307,51 @@ export default {
           $plugin: this.$store.$plugin
         });
 
+        // 等待集群列表加载完成，确保 defaultClusterId 可用
+        await this.$store.dispatch('loadManagement'); // 确保管理模块初始化
+        const clusterId = this.$store.getters['defaultClusterId'];
+
+        let userRoute = {
+          name: 'c-cluster-product-resource',
+          params: {
+            cluster: '_',
+            product: 'auth',
+            resource: 'management.cattle.io.user',
+          }
+        }
+        
+        // 构造 Harvester 路由
+        let harvesterRoute = null;
+
+        if (clusterId) {
+          harvesterRoute = {
+            name: 'c-cluster-product-resource',
+            params: {
+              cluster: clusterId,
+              product: 'harvesterManager',
+              resource: 'harvesterhci.io.management.cluster'
+            }
+          };
+    
+          // 写入 AFTER_LOGIN_ROUTE（复用页面设置登录首页逻辑）
+          await this.$store.dispatch('prefs/set', {
+            key: AFTER_LOGIN_ROUTE,
+            value: harvesterRoute || userRoute
+          });
+        
+        } 
+
+
+        // 登录跳转
         if (this.firstLogin || user[0]?.mustChangePassword) {
           this.$store.dispatch('auth/setInitialPass', this.password);
           this.$router.push({ name: 'auth-setup' });
         } else {
-          this.$router.push({ name: 'index' });
+          this.$router.push(harvesterRoute || userRoute);
         }
+
       } catch (err) {
+        // 登录失败处理
         this.err = err;
         this.timedOut = null;
         this.loggedOut = null;
@@ -328,15 +379,9 @@ export default {
       {{ `${vendor} - ${t('login.login')}` }}
     </TabTitle> -->
     <div class="row gutless mb-20">
-      <!-- <img :src="imgLeft" alt="" class="col span-7"/> -->
       <div class="col span-7 img-left"></div>
       <div class="col span-5 p-20">
-        <!-- <p class="text-center">
-          {{ t('login.howdy') }}
-        </p>
-        <h1 class="text-center login-welcome">
-          {{ t('login.welcome', {vendor}) }}
-        </h1> -->
+
         <div class="logo-login" :style="{ 'marginBottom': errorToDisplay? '0px': '30px'}">
           <img
           src="../../assets/images/login-logo.svg"
@@ -353,23 +398,10 @@ export default {
             :label="errorToDisplay"
             color="error"
           />
-          <!-- <h4
-            v-else-if="loggedOut"
-            class="text-success text-center"
-          >
-            {{ loggedOutSuccessMsg }}
-          </h4>
-          <h4
-            v-else-if="timedOut"
-            class="text-error text-center"
-          >
-            {{ t('login.loginAgain') }}
-          </h4> -->
         </div>
         <div
           v-if="firstLogin"
           class="first-login-message pl-10 pr-10"
-          :class="{'mt-30': !hasLoginMessage}"
           data-testid="first-login-message"
         >
           <t
@@ -391,7 +423,7 @@ export default {
               />
             </li>
             <li>
-              <CopyCode>
+              <CopyCode style="background-color: #68686850;border: none;">
                 docker logs <u>container-id</u> 2&gt;&amp;1 | grep "Bootstrap Password:"
               </CopyCode>
             </li>
@@ -411,7 +443,7 @@ export default {
             />
           </div>
           <br>
-          <CopyCode>
+          <CopyCode style="background-color: #68686850;border: none;">
             {{ kubectlCmd }}
           </CopyCode>
           <br>
@@ -425,7 +457,6 @@ export default {
 
         <div
           v-if="(!hasLocal || (hasLocal && !showLocal)) && providers.length"
-          :class="{'mt-30': !hasLoginMessage}"
         >
           <component
             :is="providerComponents[idx]"
@@ -442,7 +473,6 @@ export default {
         <template v-if="hasLocal">
           <form
             v-if="showLocal"
-            :class="{'mt-30': !hasLoginMessage}"
             @submit.prevent
           >
             <div class="login-form-display-label">
@@ -537,9 +567,9 @@ export default {
           v-if="showLocaleSelector && hasMultipleLocales && !isHarvester"
           class="locale-selector"
         >
-          <LocaleSelector
+          <!-- <LocaleSelector
             mode="login"
-          />
+          /> -->
         </div>
         <div class="copyright">Copyright 2019-2025 HCI</div>
       </div>
@@ -548,6 +578,9 @@ export default {
 </template>
 
 <style lang="scss" scoped>
+  .login-username {
+    
+  }
   .login {
     overflow: hidden;
     padding: 0px 10%;
@@ -591,6 +624,15 @@ export default {
     }
 
     .first-login-message {
+      background-color: rgba(160, 160, 160, 0.17);
+      color: #fff;
+      box-sizing: border-box;
+      padding: 10px 0;
+      margin: 0 auto;
+      margin-top: -20px;
+      width: 400px;
+      height: 40%;
+      overflow-y: scroll;
       .banner {
         margin-bottom: 0;
         border-left: 0;
@@ -600,6 +642,12 @@ export default {
           padding: 0;
         }
       }
+      ul {
+        list-style: none;
+        li{
+          margin-bottom: 10px;
+        }
+      }
     }
   }
 
@@ -664,7 +712,7 @@ export default {
     }
     &:deep() .addon{
       position: absolute;
-      top: 16px;
+      top: 16px !important;
       right: 24px;
     }
   }
@@ -682,9 +730,16 @@ export default {
     height: 50px;
     padding-left: 50px;
     font-size: 14px;
+    color: #333;
     background-color: #fff;
   }
 }
+.login-input-all-svg{
+  &:deep() .addon {
+    top: 15px !important;
+    right: 12px !important;
+  }
+}
 .login-svg{
   position: absolute;
     top: 12px;