dashboard-shell-shell 3.0.2-test.20250913 → 3.0.5-logTest.2

package/list/management.cattle.io.oidcclient.vue

@@ -0,0 +1,108 @@
+<script>
+import { MANAGEMENT } from '@shell/config/types';
+import { SETTING } from '@shell/config/settings';
+import PaginatedResourceTable from '@shell/components/PaginatedResourceTable';
+import CopyToClipboardText from '@shell/components/CopyToClipboardText';
+
+export default {
+  name:       'ListOidcClients',
+  components: {
+    CopyToClipboardText,
+    PaginatedResourceTable,
+  },
+
+  props: {
+    resource: {
+      type:     String,
+      required: true,
+    },
+
+    schema: {
+      type:     Object,
+      required: true,
+    },
+    useQueryParamsForSimpleFiltering: {
+      type:    Boolean,
+      default: false
+    }
+  },
+
+  data() {
+    const baseUrl = this.$store.getters['management/byId'](MANAGEMENT.SETTING, SETTING.SERVER_URL)?.value;
+
+    return {
+      issuerURL:         `${ baseUrl }/oidc`,
+      discoveryDocument: `${ baseUrl }/oidc/.well-known/openid-configuration`,
+      jwksURI:           `${ baseUrl }/oidc/.well-known/jwks.json`
+    };
+  },
+};
+</script>
+
+<template>
+  <div>
+    <div class="oidc-application-list-header-data">
+      <h3>{{ t('oidcclient.oidcEndpoints') }}</h3>
+      <div>
+        <label>{{ t('oidcclient.issuerURL') }}: </label>
+        <CopyToClipboardText
+          :aria-label="t('oidcclient.a11y.copyText.issuerURL')"
+          :text="issuerURL"
+          data-testid="oidc-clients-copy-clipboard-issuer-url"
+        />
+      </div>
+      <div>
+        <label>{{ t('oidcclient.discoveryDocument') }}: </label>
+        <CopyToClipboardText
+          :aria-label="t('oidcclient.a11y.copyText.discoveryDocument')"
+          :text="discoveryDocument"
+          data-testid="oidc-clients-copy-clipboard-discovery-document"
+        />
+      </div>
+      <div>
+        <label>{{ t('oidcclient.jwksUri') }}: </label>
+        <CopyToClipboardText
+          :aria-label="t('oidcclient.a11y.copyText.jwksUri')"
+          :text="jwksURI"
+          data-testid="oidc-clients-copy-clipboard-jwks-uri"
+        />
+      </div>
+    </div>
+    <PaginatedResourceTable
+      :schema="schema"
+      :use-query-params-for-simple-filtering="useQueryParamsForSimpleFiltering"
+      data-testid="oidc-clients-list"
+    />
+  </div>
+</template>
+
+<style lang="scss" scoped>
+.oidc-application-list-header-data {
+  align-items: center;
+  padding: 10px 0px;
+  display: flex;
+  margin-bottom: 24px;
+  flex-direction: column;
+  align-items: start;
+
+  > div:not(:last-child) {
+    margin-bottom: 18px;
+  }
+
+  h3 {
+    margin-bottom: 18px;
+  }
+
+  label {
+    display: block;
+  }
+
+  a {
+    font-weight: bold;
+  }
+
+  &>*:not(:last-child) {
+    margin-right: 40px;
+  }
+}
+</style>

package/list/management.cattle.io.podsecurityadmissionconfigurationtemplate.vue

@@ -37,15 +37,17 @@ export default {
 
 <template>
   <div>
-    <Banner
-      color="info"
-      :label="t('podSecurityAdmission.banner.modifications')"
-    />
-
     <ResourceTable
       :loading="loading"
       :schema="schema"
       :rows="rows"
-    />
+    >
+      <template #banner>
+        <Banner
+          color="info"
+          :label="t('podSecurityAdmission.banner.modifications')"
+        />
+      </template>
+    </ResourceTable>
   </div>
 </template>

package/list/management.cattle.io.user.vue

@@ -122,9 +122,18 @@ export default {
       :show-incremental-loading-indicator="incrementalLoadingIndicator"
       :load-resources="loadResources"
       :load-indeterminate="loadIndeterminate"
-      :main-button-visible="false"
     >
-
+      <template #extraActions>
+        <AsyncButton
+          v-if="canRefreshAccess"
+          mode="refresh"
+          :action-label="t('authGroups.actions.refresh')"
+          :waiting-label="t('authGroups.actions.refresh')"
+          :success-label="t('authGroups.actions.refresh')"
+          :error-label="t('authGroups.actions.refresh')"
+          @click="refreshGroupMemberships"
+        />
+      </template>
       <template
         v-if="isAdmin"
         #subHeader
@@ -135,8 +144,8 @@ export default {
           data-testid="router-link-user-retention"
           style="text-align: left;min-width: auto !important;width: auto;"
         >
-          <!-- <i class="icon icon-gear"/> -->
-          <!-- {{ t('user.retention.button.label') }} -->
+          <!-- <i class="icon icon-gear" />
+          {{ t('user.retention.button.label') }} -->
         </router-link>
       </template>
     </Masthead>
@@ -148,23 +157,7 @@ export default {
       :loading="loading"
       :use-query-params-for-simple-filtering="useQueryParamsForSimpleFiltering"
       :force-update-live-and-delayed="forceUpdateLiveAndDelayed"
-
-      :resource="resource"
-      :main-button-visible="true"
     >
-      <template #extraActions>
-        <AsyncButton
-          v-if="canRefreshAccess"
-          style="margin-right: 6px;"
-          mode="refresh"
-          :action-label="t('authGroups.actions.refresh')"
-          :waiting-label="t('authGroups.actions.refresh')"
-          :success-label="t('authGroups.actions.refresh')"
-          :error-label="t('authGroups.actions.refresh')"
-          @click="refreshGroupMemberships"
-        />
-      </template>
-
       <template #col:user-state="{row}">
         <td>
           <TableDataUserIcon

package/list/namespace.vue

@@ -41,11 +41,15 @@ export default {
     },
     headers() {
       const headersFromSchema = this.$store.getters['type-map/headersFor'](this.schema);
+
       [headersFromSchema[0], headersFromSchema[1]] = [headersFromSchema[1], headersFromSchema[0]];
       headersFromSchema[0].width = '200px';
       headersFromSchema[1].width = '100px';
-      if (this.hasHarvesterResourceQuotaSchema) {
-        headersFromSchema.splice(2, 0, NS_SNAPSHOT_QUOTA);
+      // harvester is reusing this namespace.js to render ns page, we need to make sure harvester backend support quota schema to show this column.
+      if (this.hasHarvesterResourceQuotaSchema && Array.isArray(headersFromSchema) && headersFromSchema.length > 1) {
+        const columnIdx = headersFromSchema.length - 1;
+
+        headersFromSchema.splice(columnIdx, 0, NS_SNAPSHOT_QUOTA);
       }
 
       return headersFromSchema;

package/list/node.vue

@@ -221,6 +221,8 @@ export default defineComponent({
      * In the paginated world we want to restrict the fetch of those resources to only the one's we need
      *
      * So when we have a page.... use those entries as filters when fetching the other resources
+     *
+     * of type PagTableFetchPageSecondaryResources
      */
     async fetchPageSecondaryResources({ canPaginate, force, page }: PagTableFetchPageSecondaryResourcesOpts) {
       if (!page?.length) {

package/list/projectsecret.vue

@@ -0,0 +1,345 @@
+<script lang="ts">
+import Masthead from '@shell/components/ResourceList/Masthead';
+import { SECRET_SCOPE, SECRET_QUERY_PARAMS } from '@shell/config/query-params';
+import { MANAGEMENT, SECRET, VIRTUAL_TYPES } from '@shell/config/types';
+import { STORE } from '@shell/store/store-types';
+import PaginatedResourceTable from '@shell/components/PaginatedResourceTable';
+import { PaginationArgs, PaginationFilterField, PaginationParamFilter } from '@shell/types/store/pagination.types';
+import Secret from '@shell/models/secret';
+import { TableColumn } from '@shell/types/store/type-map';
+import { mapGetters } from 'vuex';
+import { GROUP_RESOURCES, mapPref } from '@shell/store/prefs';
+import { DEFAULT_PROJECT, SYSTEM_PROJECT, UI_PROJECT_SECRET, UI_PROJECT_SECRET_COPY } from '@shell/config/labels-annotations';
+import { RancherKubeMetadata } from '@shell/types/kube/kube-api';
+import {
+  AGE, SECRET_DATA, STATE, SUB_TYPE, NAME as NAME_COL,
+} from '@shell/config/table-headers';
+import { STEVE_AGE_COL, STEVE_NAME_COL, STEVE_STATE_COL } from '@shell/config/pagination-table-headers';
+import { escapeHtml } from '@shell/utils/string';
+
+const findSystemDefaultProjects = (projects: any[], currentClusterId: string): { systemProject?: any, defaultProject?: any } => {
+  let systemProject;
+  let defaultProject;
+
+  for (let i = 0; i < projects.length; i++) {
+    const p = projects[i];
+
+    if (p.metadata.namespace === currentClusterId) {
+      if (p.isSystem) {
+        systemProject = p;
+      }
+
+      if (p.isDefault) {
+        defaultProject = p;
+      }
+
+      if (systemProject && defaultProject) {
+        break;
+      }
+    }
+  }
+
+  return { systemProject, defaultProject };
+};
+
+export default {
+  name:       'ListProjectScopedSecrets',
+  components: { Masthead, PaginatedResourceTable },
+  props:      {
+    resource: {
+      type:     String,
+      required: true,
+    },
+
+    useQueryParamsForSimpleFiltering: {
+      type:    Boolean,
+      default: false
+    }
+  },
+
+  data() {
+    return {
+      escapeHtml,
+      SECRET,
+      PROJECT_SECRETS: VIRTUAL_TYPES.PROJECT_SECRETS,
+      STORE,
+      schema:          this.$store.getters[`${ STORE.MANAGEMENT }/schemaFor`](SECRET),
+      clusterSchema:   this.$store.getters[`${ STORE.CLUSTER }/schemaFor`](SECRET),
+      inStore:         STORE.MANAGEMENT,
+
+      projectedScopedHeaders:    [] as TableColumn[],
+      projectedScopedHeadersSsp: [] as TableColumn[],
+
+      mastheadLabel: '',
+      groupOptions:  [{
+        tooltipKey: 'resourceTable.groupBy.none',
+        icon:       'icon-list-flat',
+        value:      'none',
+      }, {
+        icon:          'icon-folder',
+        value:         'project',
+        field:         'groupByProject',
+        hideColumn:    'project',
+        groupLabelKey: 'groupByProject',
+        tooltipKey:    'resourceTable.groupBy.project'
+      }],
+
+      // these are the fields that sort will be applied on, either remotely by vai, or locally
+      sortFields: {
+        local: `groupByProject`, // would be nicer to user '`metadata.labels."${ UI_PROJECT_SECRET }"`', but that's invalid for ssp
+        vai:   `metadata.labels[${ UI_PROJECT_SECRET }]`,
+      },
+
+      systemProject:  undefined,
+      defaultProject: undefined,
+    };
+  },
+
+  async fetch() {
+    // Upstream pss's created in default and system namespaces don't follow the usual naming convention of <cluster>-<project>
+    // we use that pattern to filter out pss from other clusters
+    // in order to not also filter upstream default and system namespace also search for their exact namespace
+    // this finding them...
+    if (this.currentCluster.isLocal) {
+      // First check if we already have them
+      const projects = this.$store.getters[`${ STORE.MANAGEMENT }/all`](MANAGEMENT.PROJECT);
+      const res = findSystemDefaultProjects(projects, this.currentCluster.id);
+
+      this.defaultProject = res.defaultProject;
+      this.systemProject = res.systemProject;
+
+      if (!this.systemProject || !this.defaultProject) {
+        // If not, make a http fetch (this is blocking, but should rarely happen, and should be super quick)
+        const url = this.$store.getters[`${ STORE.MANAGEMENT }/urlFor`](MANAGEMENT.PROJECT, null, { namespaced: this.currentCluster.id });
+        const response = await this.$store.dispatch(`${ STORE.MANAGEMENT }/request`, {
+          type: MANAGEMENT.PROJECT,
+          opt:  { url: `${ url }&filter=metadata.labels[${ DEFAULT_PROJECT }]=true,metadata.labels[${ SYSTEM_PROJECT }]=true` }
+        });
+        const projects = await this.$store.dispatch(`${ STORE.MANAGEMENT }/createMany`, response.data);
+        const res = findSystemDefaultProjects(projects, this.currentCluster.id);
+
+        this.defaultProject = this.defaultProject || res.defaultProject;
+        this.systemProject = this.systemProject || res.systemProject;
+      }
+    }
+  },
+
+  async created() {
+    this.projectedScopedHeaders = [
+      STATE,
+      NAME_COL, {
+        name:   'project',
+        label:  this.t('tableHeaders.project'),
+        value:  'project.nameDisplay',
+        search: `project.nameDisplay`,
+        sort:   ['projectNameSort', 'nameSort'],
+      },
+      SUB_TYPE,
+      SECRET_DATA,
+      AGE
+    ];
+
+    this.projectedScopedHeadersSsp = [
+      STEVE_STATE_COL,
+      STEVE_NAME_COL, {
+        name:  'project',
+        label: this.t('tableHeaders.project'),
+        value: 'project.nameDisplay',
+        // blocked on https://github.com/rancher/rancher/issues/51001
+        // search: `metadata.labels[${ UI_PROJECT_SECRET }]`,
+        sort:  `metadata.labels[${ UI_PROJECT_SECRET }]`,
+      }, {
+        ...SUB_TYPE,
+        value:  'metadata.fields.1',
+        sort:   'metadata.fields.1',
+        search: 'metadata.fields.1',
+      }, {
+        ...SECRET_DATA,
+        sort:   false,
+        search: false,
+      },
+      STEVE_AGE_COL
+    ];
+
+    this.mastheadLabel = this.t(`typeLabel."${ this.resource }"`, { count: this.row?.length || 0 });
+  },
+
+  computed: {
+    ...mapGetters(['currentCluster']),
+
+    createLocation() {
+      return {
+        name:   'c-cluster-product-resource-create',
+        params: { resource: SECRET },
+        query:  { [SECRET_SCOPE]: SECRET_QUERY_PARAMS.PROJECT_SCOPED }
+      };
+    },
+
+    groupPreference: mapPref(GROUP_RESOURCES),
+
+    groupSort() {
+      return this.sortFields.local;
+    },
+
+  },
+
+  methods: {
+    /**
+     * Locally filter out secrets that are...
+     * - not project-scoped
+     * - not in current cluster (mgmt secrets are global)
+     */
+    filterRowsLocal(rows: Secret[]) {
+      return rows.filter((r: Secret) => {
+        const metadata = r.metadata as RancherKubeMetadata; // Secrets will always have metadata, but hybrid-class does nasty things which breaks typing
+
+        // Filter in pss but not the copies
+        if (!r.isProjectScoped) {
+          return;
+        }
+
+        // Filter in if this cluster
+        if (metadata.namespace.startsWith(this.currentCluster.id)) {
+          return true;
+        }
+
+        // Filter in if upstream and default/system
+        if (this.currentCluster.isLocal && (r.project?.isSystem || r.project?.isDefault)) {
+          return true;
+        }
+
+        return false;
+      });
+    },
+
+    /**
+     * Remotely filter out secrets that are..
+     * - not project-scoped
+     * - not in current cluster (mgmt secrets are global)
+     */
+    filterRowsApi(pagination: PaginationArgs): PaginationArgs {
+      const sort = pagination.sort.find((s) => s.field === this.sortFields.local);
+
+      if (sort) {
+        sort.field = this.sortFields.vai;
+      }
+
+      if (!pagination.filters) {
+        pagination.filters = [];
+      }
+
+      // Filter in pss (and annoyingly their copies)
+      const labelFilter = PaginationParamFilter.createSingleField({
+        field:  `metadata.labels[${ UI_PROJECT_SECRET }]`,
+        exists: true,
+      });
+
+      // Filter out their copies
+      const annotationFilter = PaginationParamFilter.createSingleField({
+        field:  `metadata.annotations[${ UI_PROJECT_SECRET_COPY }]`,
+        value:  `true`,
+        equals: false,
+        exact:  true,
+      });
+
+      // Filter in the current clusters pss
+      const nsFields: PaginationFilterField[] = [{
+        field:  'metadata.namespace',
+        value:  `${ this.currentCluster.id }-`,
+        equals: true,
+        exact:  false,
+      }];
+
+      let namespaceFilter;
+
+      if (this.currentCluster.isLocal) {
+        // See where these are populated, but basically filter in upstream system and default projects
+        if (this.systemProject) {
+          nsFields.push({
+            field:  'metadata.namespace',
+            value:  this.systemProject.metadata.name,
+            equals: true,
+            exact:  true,
+          });
+        }
+
+        if (this.defaultProject) {
+          nsFields.push({
+            field:  'metadata.namespace',
+            value:  this.defaultProject.metadata.name,
+            equals: true,
+            exact:  true,
+          });
+        }
+
+        namespaceFilter = PaginationParamFilter.createMultipleFields(nsFields);
+      } else {
+        namespaceFilter = PaginationParamFilter.createSingleField(nsFields[0]);
+      }
+
+      let foundLabelFilter = false;
+      let foundAnnotationFilter = false;
+      let foundNsFilter = false;
+
+      for (let i = 0; i < pagination.filters.length; i++) {
+        const filter = pagination.filters[i];
+
+        if (filter.param === namespaceFilter.fields[0].field) {
+          // 1. strip out all ns filters, this includes the one that hides resources in system namespaces...... which we need
+          // 2. use the ns filter to find upstream project scoped secrets that are in this cluster
+          pagination.filters[i] = namespaceFilter;
+          foundNsFilter = true;
+        } else {
+          if (!!filter.fields.find((f) => f.field === annotationFilter.fields[0].field)) {
+            foundAnnotationFilter = true;
+          } else if (!!filter.fields.find((f) => f.field === labelFilter.fields[0].field)) {
+            foundLabelFilter = true;
+          }
+        }
+      }
+
+      if (!foundLabelFilter) {
+        pagination.filters.push(labelFilter);
+      }
+
+      if (!foundAnnotationFilter) {
+        pagination.filters.push(annotationFilter);
+      }
+
+      if (!foundNsFilter) {
+        pagination.filters.push(namespaceFilter);
+      }
+
+      return pagination;
+    },
+
+  }
+};
+</script>
+
+<template>
+  <div v-if="!$fetchState.pending">
+    <Masthead
+      component-testid="secrets-list"
+      :schema="schema"
+      :typeDisplay="mastheadLabel"
+      :resource="SECRET"
+      :favoriteResource="PROJECT_SECRETS"
+      :create-location="createLocation"
+      :isCreatable="true"
+    />
+    <PaginatedResourceTable
+      :groupSort="groupSort"
+      :groupable="true"
+      :groupOptions="groupOptions"
+      :schema="schema"
+      :headers="projectedScopedHeaders"
+      :namespaced="false"
+      :pagination-headers="projectedScopedHeadersSsp"
+      :local-filter="filterRowsLocal"
+      :api-filter="filterRowsApi"
+      :use-query-params-for-simple-filtering="useQueryParamsForSimpleFiltering"
+      :overrideInStore="STORE.MANAGEMENT"
+    />
+  </div>
+</template>

package/list/secret.vue

@@ -0,0 +1,109 @@
+<script lang="ts">
+import Masthead from '@shell/components/ResourceList/Masthead';
+import { SECRET_SCOPE, SECRET_QUERY_PARAMS } from '@shell/config/query-params';
+import { MANAGEMENT, SECRET } from '@shell/config/types';
+import { STORE } from '@shell/store/store-types';
+import PaginatedResourceTable from '@shell/components/PaginatedResourceTable';
+import { TableColumn } from '@shell/types/store/type-map';
+import ResourceFetch from '@shell/mixins/resource-fetch';
+import { mapGetters } from 'vuex';
+import { SECRET_CLONE, SECRET_PROJECT_SCOPED } from '@shell/config/table-headers';
+import { STEVE_SECRET_CLONE } from '@shell/config/pagination-table-headers';
+
+export default {
+  name: 'ListSecret',
+
+  components: {
+    Masthead,
+    PaginatedResourceTable
+  },
+  props: {
+    resource: {
+      type:     String,
+      required: true,
+    },
+
+    schema: {
+      type:     Object,
+      required: true,
+    },
+
+    useQueryParamsForSimpleFiltering: {
+      type:    Boolean,
+      default: false
+    }
+  },
+
+  mixins: [ResourceFetch],
+
+  data() {
+    return {
+      canViewProjects:  false,
+      activeTab:        SECRET_QUERY_PARAMS.NAMESPACED,
+      SECRET_TABS:      SECRET_QUERY_PARAMS,
+      managementSchema: undefined,
+
+      STORE,
+
+      namespacedHeaders:    [] as TableColumn[],
+      namespacedHeadersSsp: [] as TableColumn[],
+    };
+  },
+
+  async created() {
+    this.canViewProjects = this.$store.getters[`${ STORE.MANAGEMENT }/schemaFor`](MANAGEMENT.PROJECT);
+    this.managementSchema = this.$store.getters[`${ STORE.MANAGEMENT }/schemaFor`](SECRET);
+    this.namespacedHeaders = this.$store.getters['type-map/headersFor'](this.schema, false) as TableColumn[];
+    this.namespacedHeadersSsp = this.$store.getters['type-map/headersFor'](this.schema, true) as TableColumn[];
+
+    const headers = this.namespacedHeaders.slice(0, -1);
+    const headersSSP = this.namespacedHeadersSsp.slice(0, -1);
+
+    if (this.canViewProjects) {
+      // if the user can see projects, add a column to let them know if it's a secret from a project scoped secret
+      headers.push(SECRET_CLONE);
+      headersSSP.push(STEVE_SECRET_CLONE);
+      if (this.currentCluster.isLocal) {
+        // if the user is on the local cluster, add a column to let them know if it's a project scoped secret (from another cluster)
+        headers.push(SECRET_PROJECT_SCOPED);
+        headersSSP.push(SECRET_PROJECT_SCOPED);
+      }
+    }
+
+    headers.push(this.namespacedHeaders[this.namespacedHeaders.length - 1]);
+    headersSSP.push(this.namespacedHeadersSsp[this.namespacedHeadersSsp.length - 1]);
+
+    this.namespacedHeaders = headers;
+    this.namespacedHeadersSsp = headersSSP;
+  },
+
+  computed: {
+    createLocation() {
+      return {
+        name:  'c-cluster-product-resource-create',
+        query: { [SECRET_SCOPE]: SECRET_QUERY_PARAMS.NAMESPACED }
+      };
+    },
+
+    ...mapGetters(['currentCluster']),
+  },
+
+};
+</script>
+
+<template>
+  <div>
+    <Masthead
+      component-testid="secrets-list"
+      :schema="schema"
+      :resource="resource"
+      :create-location="createLocation"
+    />
+    <PaginatedResourceTable
+      :schema="schema"
+      :headers="namespacedHeaders"
+      :pagination-headers="namespacedHeadersSsp"
+      :use-query-params-for-simple-filtering="useQueryParamsForSimpleFiltering"
+    />
+  </div>
+</template>

package/list/workload.vue

@@ -5,7 +5,6 @@ import {
 } from '@shell/config/types';
 import ResourceFetch from '@shell/mixins/resource-fetch';
 import PaginatedResourceTable from '@shell/components/PaginatedResourceTable';
-import { harvesterhci2cloud, cloud2harvesterhci } from '@shell/utils/router'
 
 const workloadSchema = {
   id:         'workload',
@@ -133,13 +132,18 @@ export default {
   },
 
   methods: {
+    /**
+     * Fetch resources required to populate POD_RESTARTS and WORKLOAD_HEALTH_SCALE columns
+     */
     loadHeathResources() {
       // See https://github.com/rancher/dashboard/issues/10417, health comes from selectors applied locally to all pods (bad)
       if (this.paginationEnabled) {
+        // Unfortunately with SSP enabled we cannot fetch all pods to then let each row find applicable pods by locally applied selectors (bad for scaling)
+        // See https://github.com/rancher/dashboard/issues/14211
         return;
       }
 
-      // Fetch these in the background to populate workload health
+      // Fetch these in the background
       if ( this.allTypes ) {
         this.$fetchType(POD);
         this.$fetchType(WORKLOAD_TYPES.JOB);