dashboard-shell-shell 3.0.2-rc.105 → 3.0.5-logTest.1

package/config/product/manager.js

@@ -8,11 +8,12 @@ import {
   SNAPSHOT,
   VIRTUAL_TYPES
 } from '@shell/config/types';
-import { MULTI_CLUSTER, RKE1_UI } from '@shell/store/features';
+import { MULTI_CLUSTER } from '@shell/store/features';
 import { DSL } from '@shell/store/type-map';
 import { BLANK_CLUSTER } from '@shell/store/store-types.js';
 
 export const NAME = 'manager';
+const topLevelPermissions = sessionStorage.getItem('TOPLEVELPERMISSIONS')
 
 export function init(store) {
   const {
@@ -60,14 +61,19 @@ export function init(store) {
     route:      { name: 'c-cluster-manager-cloudCredential' },
   });
 
-  basicType([
-    CAPI.RANCHER_CLUSTER,
-    'cloud-credentials',
-    'drivers',
-  ]);
+  if (topLevelPermissions && topLevelPermissions === 'superadmin') {
+    basicType([
+      CAPI.RANCHER_CLUSTER,
+      'cloud-credentials',
+      'drivers',
+    ]);
+  } else {
+    basicType([
+      CAPI.RANCHER_CLUSTER,
+    ]);
+  }
 
   configureType(SNAPSHOT, { depaginate: true });
-  configureType(NORMAN.ETCD_BACKUP, { depaginate: true });
 
   configureType(CAPI.RANCHER_CLUSTER, {
     showListMasthead: false, namespaced: false, alias: [HCI.CLUSTER]
@@ -101,28 +107,6 @@ export function init(store) {
     exact:      true
   });
 
-  virtualType({
-    ifFeature:  RKE1_UI,
-    labelKey:   'manager.rkeTemplates.label',
-    name:       'rke-templates',
-    group:      'Root',
-    namespaced: false,
-    icon:       'globe',
-    route:      { name: 'c-cluster-manager-pages-page', params: { cluster: 'local', page: 'rke-templates' } },
-    exact:      true
-  });
-
-  virtualType({
-    ifFeature:  RKE1_UI,
-    labelKey:   'manager.nodeTemplates.label',
-    name:       'rke-node-templates',
-    group:      'Root',
-    namespaced: false,
-    icon:       'globe',
-    route:      { name: 'c-cluster-manager-pages-page', params: { cluster: 'local', page: 'node-templates' } },
-    exact:      true
-  });
-
   virtualType({
     ifHaveType: MANAGEMENT.CLUSTER_PROXY_CONFIG,
     labelKey:   'manager.jwtAuthentication.label',
@@ -134,15 +118,12 @@ export function init(store) {
     exact:      true
   });
 
-  basicType([
-    'rke-kontainer-drivers',
-    'rke-node-drivers',
-  ], 'drivers');
-
-  basicType([
-    'rke-templates',
-    'rke-node-templates'
-  ], 'RKE1Configuration');
+  if (topLevelPermissions && topLevelPermissions === 'superadmin') {
+    basicType([
+      'rke-kontainer-drivers',
+      'rke-node-drivers',
+    ], 'drivers');
+  }
 
   weightType(CAPI.MACHINE_DEPLOYMENT, 4, true);
   weightType(CAPI.MACHINE_SET, 3, true);
@@ -151,14 +132,16 @@ export function init(store) {
   weightType(MANAGEMENT.PSA, 5, true);
   weightType(VIRTUAL_TYPES.JWT_AUTHENTICATION, 0, true);
 
-  basicType([
-    CAPI.MACHINE_DEPLOYMENT,
-    CAPI.MACHINE_SET,
-    CAPI.MACHINE,
-    CATALOG.CLUSTER_REPO,
-    MANAGEMENT.PSA,
-    VIRTUAL_TYPES.JWT_AUTHENTICATION
-  ], 'advanced');
+  if (topLevelPermissions && topLevelPermissions === 'superadmin') {
+    basicType([
+      CAPI.MACHINE_DEPLOYMENT,
+      CAPI.MACHINE_SET,
+      CAPI.MACHINE,
+      CATALOG.CLUSTER_REPO,
+      MANAGEMENT.PSA,
+      VIRTUAL_TYPES.JWT_AUTHENTICATION
+    ], 'advanced');
+  }
 
   weightGroup('advanced', -1, true);
 

package/config/product/settings.js

@@ -1,5 +1,5 @@
 import { DSL } from '@shell/store/type-map';
-import { MANAGEMENT, HELM } from '@shell/config/types';
+import { FLEET, MANAGEMENT, HELM } from '@shell/config/types';
 import {
   STATE,
   FEATURE_DESCRIPTION,
@@ -35,7 +35,7 @@ export function init(store) {
     labelKey:   'advancedSettings.label',
     name:       'settings',
     namespaced: false,
-    weight:     100,
+    weight:     101,
     icon:       'folder',
     route:      {
       name:   'c-cluster-product-resource',
@@ -51,7 +51,7 @@ export function init(store) {
     labelKey:   'featureFlags.label',
     name:       'features',
     namespaced: false,
-    weight:     99,
+    weight:     100,
     icon:       'folder',
     route:      {
       name:   'c-cluster-product-resource',
@@ -64,22 +64,22 @@ export function init(store) {
 
   virtualType({
     ifHaveType: MANAGEMENT.SETTING,
-    labelKey:   'branding.label',
-    name:       'brand',
+    labelKey:   'banner.settingName',
+    name:       'banners',
     namespaced: false,
-    weight:     98,
+    weight:     99,
     icon:       'folder',
-    route:      { name: 'c-cluster-settings-brand' }
+    route:      { name: 'c-cluster-settings-banners' }
   });
 
   virtualType({
     ifHaveType: MANAGEMENT.SETTING,
-    labelKey:   'banner.settingName',
-    name:       'banners',
+    labelKey:   'branding.label',
+    name:       'brand',
     namespaced: false,
     weight:     98,
     icon:       'folder',
-    route:      { name: 'c-cluster-settings-banners' }
+    route:      { name: 'c-cluster-settings-brand' }
   });
 
   virtualType({
@@ -102,6 +102,16 @@ export function init(store) {
     route:      { name: 'c-cluster-settings-links' }
   });
 
+  virtualType({
+    ifHaveType: FLEET.GIT_REPO,
+    labelKey:   'fleet.settings.label',
+    name:       'fleet-settings',
+    namespaced: false,
+    weight:     95,
+    icon:       'folder',
+    route:      { name: 'c-cluster-settings-fleet' }
+  });
+
   const topLevelPermissions = sessionStorage.getItem('TOPLEVELPERMISSIONS')
 
   if (topLevelPermissions && topLevelPermissions === 'superadmin') {
@@ -111,7 +121,8 @@ export function init(store) {
       'brand',
       'banners',
       'performance',
-      'links'
+      'links',
+      'fleet-settings'
     ]);
   } else {
     basicType([
@@ -120,6 +131,7 @@ export function init(store) {
     ]);
   }
 
+
   configureType(MANAGEMENT.SETTING, {
     isCreatable: false,
     isRemovable: false,

package/config/product/uiplugins.js

@@ -5,14 +5,17 @@ export const NAME = 'uiplugins';
 export function init(store) {
   const { product } = DSL(store, NAME);
 
-  // Add a product for UI Plugins - will appear in the top-level menu
-  product({
-    ifHave:              IF_HAVE.ADMIN, // Only admins can see the UI Plugin Custom Resource by default
-    inStore:             'management',
-    icon:                'extension',
-    removable:           false,
-    showClusterSwitcher: false,
-    category:            'configuration',
-    weight:              50,
-  });
+  if (sessionStorage.getItem('TOPLEVELPERMISSIONS') && sessionStorage.getItem('TOPLEVELPERMISSIONS') === 'superadmin') {
+    // Add a product for UI Plugins - will appear in the top-level menu
+    product({
+      ifHave:              IF_HAVE.ADMIN, // Only admins can see the UI Plugin Custom Resource by default
+      inStore:             'management',
+      icon:                'extension',
+      removable:           false,
+      showClusterSwitcher: false,
+      category:            'configuration',
+      weight:              50,
+    });
+  }
+
 }

package/config/query-params.js

@@ -36,6 +36,7 @@ export const _LIST = 'list';
 export const _CLONE = 'clone';
 export const _STAGE = 'stage';
 export const _IMPORT = 'import';
+export const LEGACY = 'legacy';
 
 export const AS = 'as';
 export const _DETAIL = 'detail';
@@ -63,7 +64,8 @@ export const NAME = 'name';
 export const NAMESPACE = 'namespace';
 export const DESCRIPTION = 'description';
 export const CATEGORY = 'category';
-export const OPERATING_SYSTEM = 'os';
+export const TAG = 'tag';
+export const STATUS = 'status';
 export const DEPRECATED = 'deprecated';
 export const HIDDEN = 'hidden';
 export const FROM_TOOLS = 'tools';
@@ -77,3 +79,16 @@ export const CLOUD_CREDENTIAL = 'cloud';
 // NAMESPACE/PROJECT
 export const PROJECT_ID = 'projectId';
 export const FLAT_VIEW = 'flatView';
+
+/**
+ * Used on the secret create/edit page to determine
+ * 1. if the user is creating a normal secret, or a project scoped secret
+ * 2. where to return the user on cancel/save
+ */
+export const SECRET_QUERY_PARAMS = {
+  NAMESPACED:     'namespaced',
+  PROJECT_SCOPED: 'project-scoped'
+};
+export const SECRET_SCOPE = 'scope';
+// RANCHER OIDC CLIENT
+export const RANCHER_AS_OIDC_QUERY_PARAMS = ['scope', 'client_id', 'redirect_uri', 'response_type'];

package/config/roles.ts

@@ -57,6 +57,7 @@ export const SCOPED_RESOURCES = {
         'Contents',
         'GitRepos',
         'GitRepoRestrictions',
+        'HelmOps',
       ],
     },
     'gitjob.cattle.io': {
@@ -263,7 +264,7 @@ export const SCOPED_RESOURCES = {
         'Jobs',
       ]
     },
-    'cis.cattle.io': {
+    'compliance.cattle.io': {
       resources: [
         'ClusterScans',
         'ClusterScanReports'

package/config/router/navigation-guards/authentication.js

@@ -1,12 +1,58 @@
 import { routeRequiresAuthentication } from '@shell/utils/router';
 import { isLoggedIn, notLoggedIn, noAuth, findMe } from '@shell/utils/auth';
+import { RANCHER_AS_OIDC_QUERY_PARAMS } from '@shell/config/query-params';
+
+const R_OIDC_PROV_PARAMS = 'rancher-as-oidc-prov-params';
+
+/**
+ * Detect if we've come from an OIDC client
+ */
+function isRancherOidcProviderLogin(queryParams) {
+  return queryParams && Object.keys(queryParams).length && RANCHER_AS_OIDC_QUERY_PARAMS.every((item) => Object.keys(queryParams).includes(item));
+}
+
+/**
+ * If we've logged in on a request from an OIDC client return to it
+ */
+function handleOidcRedirectToCallbackUrl() {
+  const rancherAsOidcProvider = sessionStorage.getItem(R_OIDC_PROV_PARAMS);
+
+  if (rancherAsOidcProvider) {
+    window.location.href = `${ window.location.origin }/oidc/authorize${ rancherAsOidcProvider }&code_challenge_method=S256`;
+    sessionStorage.removeItem(R_OIDC_PROV_PARAMS);
+  }
+}
 
 export function install(router, context) {
   router.beforeEach(async(to, from, next) => await authenticate(to, from, next, context));
 }
 
+/**
+ * Generate an object that includes both the v3User and the me data
+ * @param {*} v3User V3 user information
+ * @param {*} me Me user data
+ * @returns User info to be passed to `isLoggedIn`
+ */
+function getUserObject(v3User, me) {
+  return {
+    id: me.id,
+    me,
+    v3User,
+  };
+}
+
 export async function authenticate(to, from, next, { store }) {
   if (!routeRequiresAuthentication(to)) {
+    if (to.name === 'auth-login') {
+      if (isRancherOidcProviderLogin(to.query)) {
+        // If redirected here from an oidc client persist the values we need to return to it once rancher auth is complete...
+        sessionStorage.setItem(R_OIDC_PROV_PARAMS, window.location.search);
+      } else if (sessionStorage.getItem(R_OIDC_PROV_PARAMS)) {
+        // ... otherwise clear it (to avoid a redirect to it on successful log in)
+        sessionStorage.removeItem(R_OIDC_PROV_PARAMS);
+      }
+    }
+
     return next();
   }
 
@@ -25,10 +71,12 @@ export async function authenticate(to, from, next, { store }) {
 
     if ( fromHeader === 'none' ) {
       noAuth(store);
+      handleOidcRedirectToCallbackUrl();
     } else if ( fromHeader === 'true' ) {
       const me = await findMe(store);
 
-      isLoggedIn(store, me);
+      await isLoggedIn(store, getUserObject(v3User, me));
+      handleOidcRedirectToCallbackUrl();
     } else if ( fromHeader === 'false' ) {
       notLoggedIn(store, next, to);
 
@@ -38,7 +86,8 @@ export async function authenticate(to, from, next, { store }) {
       try {
         const me = await findMe(store);
 
-        isLoggedIn(store, me);
+        await isLoggedIn(store, getUserObject(v3User, me));
+        handleOidcRedirectToCallbackUrl();
       } catch (e) {
         const status = e?._status;
 

package/config/router/navigation-guards/index.js

@@ -9,7 +9,6 @@ import { install as installClusters } from '@shell/config/router/navigation-guar
 import { install as installHandleInstallRedirect } from '@shell/config/router/navigation-guards/install-redirect';
 import { install as installPageTitle } from '@shell/config/router/navigation-guards/page-title';
 import { install as installServerUpgradeGrowl } from '@shell/config/router/navigation-guards/server-upgrade-growl';
-import { harvester2cloud } from '@shell/utils/router';
 
 /**
  * Install router navigation guards
@@ -22,17 +21,17 @@ export function installNavigationGuards(router, context) {
     let changed = false;
     const params = { ...to.params };
 
-    if (params.product?.includes('cloud')) {
+    if (params?.product?.includes('cloud')) {
       params.product = params.product.replace(/cloud/g, 'harvester');
       changed = true;
     }
 
-    if (params.cluster?.includes('cloud')) {
+    if (params?.cluster?.includes('cloud')) {
       params.cluster = params.cluster.replace(/cloud/g, 'harvester');
       changed = true;
     }
 
-    if (params.resource?.includes('cloud')) {
+    if (params?.resource?.includes('cloud')) {
       params.resource = params.resource.replace(/cloud/g, 'harvester');
       changed = true;
     }
@@ -46,32 +45,37 @@ export function installNavigationGuards(router, context) {
   });
 
 
-  const navigationGuardInstallers = [
-    installLoadInitialSettings,
-    installAttemptFirstLogin,
-    installAuthentication,
-    installProducts,
-    installClusters,
-    installRuntimeExtensionRoute,
-    installI18N,
-    installHandleInstallRedirect,
-    installPageTitle,
-    installRecordLastRoute,
-    installServerUpgradeGrowl
-  ];
+  const navigationGuardInstallers = [installLoadInitialSettings, installAttemptFirstLogin, installAuthentication, installProducts, installClusters, installRuntimeExtensionRoute, installI18N, installHandleInstallRedirect, installPageTitle, installRecordLastRoute, installServerUpgradeGrowl];
 
-  navigationGuardInstallers.forEach(installer => installer(router, context));
+  navigationGuardInstallers.forEach((installer) => installer(router, context));
 
   // 🔹 最后执行：只改地址栏，不改内部
   router.afterEach((to) => {
+    const base = router.options.history?.base || '';
+    const pathParts = to.path.split('/');
 
-    const cloudPath = to.fullPath
-      .replace(/harvester/g, 'cloud')
+    const newPathParts = pathParts.map((part) => {
+      // 只替换 cluster/product/resource 对应的 segment
+      for (const key of ['cluster', 'product', 'resource']) {
+        if (to.params[key] && to.params[key] === part) {
+          return part.replace(/harvester/g, 'cloud');
+        }
+      }
+      return part;
+    });
 
-    if (cloudPath !== to.fullPath) {
-      window.history.replaceState({}, '', cloudPath);
+    let cloudPath = newPathParts.join('/');
+    if (!cloudPath.startsWith(base)) {
+      cloudPath = base + cloudPath;
     }
 
+    const currentLocation = window.location.pathname + window.location.search + window.location.hash;
+
+    if (cloudPath !== currentLocation) {
+      console.info('[URL Replace] Updating address bar:', currentLocation, '→', cloudPath);
+      window.history.replaceState({}, '', cloudPath);
+    }
   });
+
 }
 

package/config/router/routes.js

@@ -1,13 +1,15 @@
 import { NAME as APPS } from '@shell/config/product/apps';
 import { NAME as EXPLORER } from '@shell/config/product/explorer';
 import { NAME as MANAGER } from '@shell/config/product/manager';
-import { CAPI, MANAGEMENT, BACKUP_RESTORE, CIS } from '@shell/config/types';
+import {
+  CAPI, MANAGEMENT, BACKUP_RESTORE, COMPLIANCE, VIRTUAL_TYPES
+} from '@shell/config/types';
 import { NAME as AUTH } from '@shell/config/product/auth';
 
 // All these imports are related to the install-redirect.js navigation guard.
 import { installRedirectRouteMeta } from '@shell/config/router/navigation-guards/install-redirect';
 import { NAME as BACKUP_NAME, CHART_NAME as BACKUP_CHART_NAME } from '@shell/config/product/backup';
-import { NAME as CIS_NAME, CHART_NAME as CIS_CHART_NAME } from '@shell/config/product/cis';
+import { NAME as COMPLIANCE_NAME, CHART_NAME as COMPLIANCE_CHART_NAME } from '@shell/config/product/compliance';
 import { NAME as GATEKEEPER_NAME, CHART_NAME as GATEKEEPER_CHART_NAME } from '@shell/config/product/gatekeeper';
 import { NAME as ISTIO_NAME, CHART_NAME as ISTIO_CHART_NAME } from '@shell/config/product/istio';
 import { NAME as LOGGING_NAME, CHART_NAME as LOGGING_CHART_NAME } from '@shell/config/product/logging';
@@ -207,13 +209,45 @@ export default [
         name: 'c-cluster-backup',
         meta: { ...installRedirectRouteMeta(BACKUP_NAME, BACKUP_CHART_NAME, BACKUP_RESTORE.BACKUP) }
       }, {
-        path: '/c/:cluster/cis',
-        name: 'c-cluster-cis',
-        meta: { ...installRedirectRouteMeta(CIS_NAME, CIS_CHART_NAME, CIS.CLUSTER_SCAN) }
+        path: '/c/:cluster/compliance',
+        name: 'c-cluster-compliance',
+        meta: { ...installRedirectRouteMeta(COMPLIANCE_NAME, COMPLIANCE_CHART_NAME, COMPLIANCE.CLUSTER_SCAN) }
       }, {
         path:      '/c/:cluster/fleet',
         component: () => interopDefault(import('@shell/pages/c/_cluster/fleet/index.vue')),
         name:      'c-cluster-fleet',
+        meta:      {
+          detailLocation: 'c-cluster-fleet-application-resource-namespace-id',
+          doneOverride:   'c-cluster-fleet',
+        },
+      }, {
+        path:      '/c/:cluster/fleet/application',
+        component: () => interopDefault(import('@shell/pages/c/_cluster/fleet/application/index.vue')),
+        name:      'c-cluster-fleet-application',
+        meta:      {
+          detailLocation: 'c-cluster-fleet-application-resource-namespace-id',
+          doneOverride:   'c-cluster-fleet-application',
+        },
+      }, {
+        path:      '/c/:cluster/fleet/application/create',
+        component: () => interopDefault(import('@shell/pages/c/_cluster/fleet/application/create.vue')),
+        name:      'c-cluster-fleet-application-create',
+      }, {
+        path:      '/c/:cluster/fleet/application/:resource/create',
+        component: () => interopDefault(import('@shell/pages/c/_cluster/fleet/application/_resource/create.vue')),
+        name:      'c-cluster-fleet-application-resource-create',
+        meta:      {
+          detailLocation: 'c-cluster-fleet-application-resource-namespace-id',
+          doneOverride:   'c-cluster-fleet-application',
+        },
+      }, {
+        path:      '/c/:cluster/fleet/application/:resource/:namespace/:id?',
+        component: () => interopDefault(import('@shell/pages/c/_cluster/fleet/application/_resource/_id.vue')),
+        name:      'c-cluster-fleet-application-resource-namespace-id',
+        meta:      {
+          detailLocation: 'c-cluster-fleet-application-resource-namespace-id',
+          doneOverride:   'c-cluster-fleet-application'
+        },
       }, {
         path:      '/c/:cluster/gatekeeper',
         component: () => interopDefault(import('@shell/pages/c/_cluster/gatekeeper/index.vue')),
@@ -224,18 +258,6 @@ export default [
         component: () => interopDefault(import('@shell/pages/c/_cluster/istio/index.vue')),
         name:      'c-cluster-istio',
         meta:      { ...installRedirectRouteMeta(ISTIO_NAME, ISTIO_CHART_NAME) }
-      }, {
-        path: '/c/:cluster/legacy',
-        redirect(to) {
-          return {
-            name:   'c-cluster-legacy-project',
-            params: {
-              ...(to?.params || {}),
-              product: EXPLORER,
-            }
-          };
-        },
-        name: 'c-cluster-legacy'
       }, {
         path:      '/c/:cluster/logging',
         component: () => interopDefault(import('@shell/pages/c/_cluster/logging/index.vue')),
@@ -293,6 +315,20 @@ export default [
             component: () => interopDefault(import('@shell/pages/c/_cluster/apps/charts/install.vue')),
             name:      'c-cluster-apps-charts-install',
           },
+          {
+            path: '/c/:cluster/apps/catalog.cattle.io.clusterrepo',
+            name: 'c-cluster-apps-catalog-repo',
+            redirect(to) {
+              return {
+                name:   'c-cluster-product-resource',
+                params: {
+                  ...to.params,
+                  product:  APPS,
+                  resource: 'catalog.cattle.io.clusterrepo',
+                }
+              };
+            },
+          },
         ]
       },
       {
@@ -315,10 +351,6 @@ export default [
         path:      '/c/:cluster/gatekeeper/constraints',
         component: () => interopDefault(import('@shell/pages/c/_cluster/gatekeeper/constraints/index.vue')),
         name:      'c-cluster-gatekeeper-constraints'
-      }, {
-        path:      '/c/:cluster/legacy/project',
-        component: () => interopDefault(import('@shell/pages/c/_cluster/legacy/project/index.vue')),
-        name:      'c-cluster-legacy-project'
       }, {
         path:      '/c/:cluster/manager/cloudCredential',
         component: () => interopDefault(import('@shell/pages/c/_cluster/manager/cloudCredential/index.vue')),
@@ -363,6 +395,10 @@ export default [
         path:      '/c/:cluster/settings/performance',
         component: () => interopDefault(import('@shell/pages/c/_cluster/settings/performance.vue')),
         name:      'c-cluster-settings-performance'
+      }, {
+        path:      '/c/:cluster/settings/fleet',
+        component: () => interopDefault(import('@shell/pages/c/_cluster/fleet/settings/index.vue')),
+        name:      'c-cluster-settings-fleet'
       }, {
         path:      '/c/:cluster/auth/group.principal/assign-edit',
         component: () => interopDefault(import('@shell/pages/c/_cluster/auth/group.principal/assign-edit.vue')),
@@ -400,14 +436,6 @@ export default [
         path:      '/c/:cluster/auth/config/:id',
         component: () => interopDefault(import('@shell/pages/c/_cluster/auth/config/_id.vue')),
         name:      'c-cluster-auth-config-id'
-      }, {
-        path:      '/c/:cluster/legacy/pages/:page?',
-        component: () => interopDefault(import('@shell/pages/c/_cluster/legacy/pages/_page.vue')),
-        name:      'c-cluster-legacy-pages-page'
-      }, {
-        path:      '/c/:cluster/legacy/project/:page',
-        component: () => interopDefault(import('@shell/pages/c/_cluster/legacy/project/_page.vue')),
-        name:      'c-cluster-legacy-project-page'
       }, {
         path:      '/c/:cluster/manager/cloudCredential/:id',
         component: () => interopDefault(import('@shell/pages/c/_cluster/manager/cloudCredential/_id.vue')),
@@ -479,11 +507,17 @@ export default [
       }, {
         path:      '/c/:cluster/:product/:resource/:id',
         component: () => interopDefault(import('@shell/pages/c/_cluster/_product/_resource/_id.vue')),
-        name:      'c-cluster-product-resource-id'
+        name:      'c-cluster-product-resource-id',
+        meta:      { asyncSetup: true }
+      }, {
+        path:      `/c/:cluster/:product/${ VIRTUAL_TYPES.PROJECT_SECRETS }/:namespace/:id`,
+        component: () => interopDefault(import(`@shell/pages/c/_cluster/explorer/${ VIRTUAL_TYPES.PROJECT_SECRETS }.vue`)),
+        name:      `c-cluster-product-${ VIRTUAL_TYPES.PROJECT_SECRETS }-namespace-id`,
       }, {
         path:      '/c/:cluster/:product/:resource/:namespace/:id',
         component: () => interopDefault(import('@shell/pages/c/_cluster/_product/_resource/_namespace/_id.vue')),
-        name:      'c-cluster-product-resource-namespace-id'
+        name:      'c-cluster-product-resource-namespace-id',
+        meta:      { asyncSetup: true }
       }]
   },
   {

package/config/secret.ts

@@ -0,0 +1,15 @@
+export const SECRET_TYPES = {
+  OPAQUE:            'Opaque',
+  SERVICE_ACCT:      'kubernetes.io/service-account-token',
+  DOCKER_JSON:       'kubernetes.io/dockerconfigjson',
+  BASIC:             'kubernetes.io/basic-auth',
+  SSH:               'kubernetes.io/ssh-auth',
+  TLS:               'kubernetes.io/tls',
+  BOOTSTRAP:         'bootstrap.kubernetes.io/token',
+  ISTIO_TLS:         'istio.io/key-and-cert',
+  HELM_RELEASE:      'helm.sh/release.v1',
+  FLEET_CLUSTER:     'fleet.cattle.io/cluster-registration-values',
+  CLOUD_CREDENTIAL:  'provisioning.cattle.io/cloud-credential',
+  RKE_AUTH_CONFIG:   'rke.cattle.io/auth-config',
+  FLEET_OCI_STORAGE: 'fleet.cattle.io/bundle-oci-storage/v1alpha1'
+};