feat: introduce rwxNetwork setting (#746) (#750)

* feat: add rwxNetwork setting



* fix: network payload



---------


(cherry picked from commit d1949641a7)

Signed-off-by: Andy Lee <andy.lee@suse.com>
Co-authored-by: Andy Lee <andy.lee@suse.com>

.github/actions/setup/action.yaml

@@ -4,8 +4,7 @@ description: Setup node and install dependencies
 runs:
   using: 'composite'
   steps:
-    - name: Setup Nodejs with yarn caching
+    - uses: actions/setup-node@v4
-      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
       with:
         node-version-file: '.nvmrc'
         cache: 'yarn'

.github/auto-assign-config.yaml

@@ -0,0 +1,6 @@
+addAssignees: author
+addReviewers: true
+numberOfReviewers: 0
+reviewers:
+- a110605
+- houhoucoop

.github/renovate.json

@@ -34,25 +34,14 @@
     {
       "matchUpdateTypes": ["minor"],
       "groupName": "minor dependencies",
-      "minimumReleaseAge": "7 days",
       "labels": ["minor-update"],
       "reviewers": ["a110605", "houhoucoop"]
     },
     {
-      "matchUpdateTypes": ["patch"],
+      "matchUpdateTypes": ["patch", "digest"],
-      "automerge": false,
+      "automerge": true,
-      "minimumReleaseAge": "7 days",
+      "groupName": "patch digest dependencies",
-      "groupName": "patch dependencies",
+      "labels": ["patch-update", "automerge"]
-      "labels": ["patch-update"],
-      "reviewers": ["a110605", "houhoucoop"]
-    },
-    {
-      "matchUpdateTypes": ["digest", "pinDigest"],
-      "automerge": false,
-      "groupName": "digest dependencies",
-      "labels": ["digest-update"],
-      "schedule": ["on the first day of the month"],
-      "reviewers": ["a110605", "houhoucoop"]
     }
   ]
 }

.github/workflows/add-pr-label-check.yaml

@@ -1,39 +0,0 @@
-name: "PR Management Add PR Label Collect Data"
-
-on:
-  pull_request:
-    types: [opened, reopened, edited]
-    branches:
-      - main
-      - 'release-harvester-v*'
-
-jobs:
-  collect:
-    if: github.event.pull_request.draft == false
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      actions: write
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
-        with:
-          ref: ${{ github.base_ref }}
-
-      - name: Setup Nodejs and yarn install
-        uses: ./.github/actions/setup
-
-      - name: Extract PR label
-        run: |
-          PR_LABEL=$(node ./scripts/extract-release-label.mjs "${{ github.event.pull_request.title }}")
-          echo "PR_LABEL=$PR_LABEL"
-          {
-            echo "PR_NUMBER=${{ github.event.pull_request.number }}"
-            echo "PR_LABEL=$PR_LABEL"
-          } > pr-add-label-data.env
-
-      - name: Upload PR data artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
-        with:
-          name: pr-add-label-data
-          path: pr-add-label-data.env

.github/workflows/add-pr-label.yaml

@@ -1,33 +0,0 @@
-name: "PR Management Add PR Label"
-
-on:
-  workflow_run:
-    workflows:
-      - "PR Management Add PR Label Collect Data"
-    types: [completed]
-
-jobs:
-  auto-assign-pr-label:
-    runs-on: ubuntu-latest
-    if: ${{ github.event.workflow_run.conclusion == 'success' }}
-    permissions:
-      actions: read
-      pull-requests: write
-    steps:
-      - name: Download PR data artifact
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
-        with:
-          name: pr-add-label-data
-          run-id: ${{ github.event.workflow_run.id }}
-          github-token: ${{ github.token }}
-
-      - name: Load PR data
-        run: |
-          cat pr-add-label-data.env >> $GITHUB_ENV
-
-      - name: Set PR label
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          echo "PR_LABEL = $PR_LABEL"
-          gh pr edit "$PR_NUMBER" --repo "${{ github.repository }}" --add-label "$PR_LABEL"

.github/workflows/auto-assign-check.yaml

@@ -1,28 +0,0 @@
-name: "PR Management Auto Assign Collect Data"
-
-on:
-  pull_request:
-    types: [opened, ready_for_review]
-    branches:
-      - main
-      - 'release-harvester-v*'
-
-jobs:
-  collect:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      actions: write
-    steps:
-      - name: Save PR data to artifact
-        run: |
-          {
-            echo "PR_NUMBER=${{ github.event.pull_request.number }}"
-            echo "PR_AUTHOR=${{ github.event.pull_request.user.login }}"
-          } > pr-auto-assign-data.env
-
-      - name: Upload PR data artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
-        with:
-          name: pr-auto-assign-data
-          path: pr-auto-assign-data.env

.github/workflows/auto-assign-reviewer.yaml

@@ -0,0 +1,17 @@
+name: "[PR Management] Auto Assign Reviewer & Assignee"
+
+on:
+  pull_request_target:
+    types: [opened, ready_for_review]
+
+permissions:
+  pull-requests: write
+
+jobs:
+  auto-assign:
+    if: github.event.pull_request.draft == false
+    runs-on: ubuntu-latest
+    steps:
+      - uses: rancher/gh-issue-mgr/auto-assign-action@main
+        with:
+          configuration-path: .github/auto-assign-config.yaml

.github/workflows/auto-assign.yaml

@@ -1,35 +0,0 @@
-name: "PR Management Auto Assign"
-
-on:
-  workflow_run:
-    workflows:
-      - "PR Management Auto Assign Collect Data"
-    types: [completed]
-
-jobs:
-  auto-assign:
-    runs-on: ubuntu-latest
-    if: ${{ github.event.workflow_run.conclusion == 'success' }}
-    env:
-      REVIEWERS: "a110605,houhoucoop"
-    permissions:
-      actions: read
-      pull-requests: write
-    steps:
-      - name: Download PR data artifact
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
-        with:
-          name: pr-auto-assign-data
-          run-id: ${{ github.event.workflow_run.id }}
-          github-token: ${{ github.token }}
-
-      - name: Load PR data
-        run: |
-          cat pr-auto-assign-data.env >> $GITHUB_ENV
-
-      - name: Auto assign PR author
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          echo "Assigning PR author: $PR_AUTHOR"
-          gh pr edit "$PR_NUMBER" --repo "${{ github.repository }}" --add-assignee "$PR_AUTHOR" --add-reviewer "$REVIEWERS"

.github/workflows/backport-label-check.yaml

@@ -1,30 +0,0 @@
-name: "PR Management Add Labels Collect Data"
-
-on:
-  pull_request:
-    types: [opened, reopened]
-    branches:
-      - main
-      - 'release-harvester-v*'
-
-jobs:
-  collect:
-    if: github.event.pull_request.draft == false
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      actions: write
-    steps:
-      - name: Save PR data to artifact
-        run: |
-          {
-            echo "PR_NUMBER=${{ github.event.pull_request.number }}"
-            echo "PR_BASE_REF=${{ github.event.pull_request.base.ref }}"
-            echo "PR_USER_LOGIN=${{ github.event.pull_request.user.login }}"
-          } > pr-backport-label-data.env
-
-      - name: Upload PR data artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
-        with:
-          name: pr-backport-label-data
-          path: pr-backport-label-data.env

.github/workflows/backport-label.yaml

@@ -1,44 +1,40 @@
-name: "PR Management Add Backport Labels"
+name: "[PR Management] Add Labels"
 
 on:
-  workflow_run:
+  pull_request_target:
-    workflows:
+    types: [opened, reopened]
-      - "PR Management Add Labels Collect Data"
+    branches:
-    types: [completed]
+      - main
+      - 'release-harvester-v*'
+
+permissions:
+  pull-requests: write
 
 jobs:
   add-require-backport-label:
+    if: github.event.pull_request.draft == false &&
+        github.event.pull_request.base.ref == 'main'
     runs-on: ubuntu-latest
-    if: ${{ github.event.workflow_run.conclusion == 'success' }}
-    permissions:
-      actions: read
-      pull-requests: write
     steps:
-      - name: Download PR data artifact
+      - name: Checkout repository
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        uses: actions/checkout@v4
         with:
-          name: pr-backport-label-data
+          ref: ${{ github.base_ref }}
-          run-id: ${{ github.event.workflow_run.id }}
-          github-token: ${{ github.token }}
 
-      - name: Load PR data
+      - name: Fetch release branches and PR labels
-        run: |
+        id: fetch_info
-          cat pr-backport-label-data.env >> $GITHUB_ENV
-
-      - name: Add require-backport label (main branch PRs)
-        if: env.PR_BASE_REF == 'main'
         env:
-          GH_TOKEN: ${{ github.token }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -euo pipefail
 
           repo="${{ github.repository }}"
-          pr_number="$PR_NUMBER"
+          pr_number=${{ github.event.pull_request.number }}
 
           release_branches=$(gh api "repos/${repo}/branches" --paginate --jq '.[].name' | grep -E '^release-harvester-v[0-9]+\.[0-9]+$' || true)
 
           if [[ -z "$release_branches" ]]; then
-            echo "No release branches found, skipping."
+            echo "should_label=false" >> "$GITHUB_OUTPUT"
             exit 0
           fi
 
@@ -48,36 +44,51 @@ jobs:
 
           tags=$(gh api "repos/${repo}/releases" --paginate --jq '.[].tag_name')
           if echo "$tags" | grep -Fxq "$release_tag"; then
-            echo "Release $release_tag already published, skipping."
+            echo "should_label=false" >> "$GITHUB_OUTPUT"
             exit 0
           fi
 
           label="require backport/v${version}"
+          echo "should_label=true" >> "$GITHUB_OUTPUT"
+          echo "backport_label=$label" >> "$GITHUB_OUTPUT"
+
           pr_labels=$(gh pr view "$pr_number" --repo "$repo" --json labels --jq '.labels[].name' || echo "")
+          pr_labels_csv=$(echo "$pr_labels" | tr '\n' ',' | sed 's/,$//')
+          echo "pr_labels=$pr_labels_csv" >> "$GITHUB_OUTPUT"
 
-          if echo "$pr_labels" | grep -Fxq "$label"; then
+      - name: Add label if needed
-            echo "Label '$label' already present, skipping."
+        if: steps.fetch_info.outputs.should_label == 'true' && !contains(steps.fetch_info.outputs.pr_labels, steps.fetch_info.outputs.backport_label)
-            exit 0
-          fi
-
-          echo "Adding label: $label"
-          gh pr edit "$pr_number" --repo "$repo" --add-label "$label"
-
-      - name: Add backport label (release branch PRs opened by Mergify)
-        if: startsWith(env.PR_BASE_REF, 'release-harvester-v')
         env:
-          GH_TOKEN: ${{ github.token }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          set -euo pipefail
+          echo "Adding label: ${{ steps.fetch_info.outputs.backport_label }}"
+          gh pr edit ${{ github.event.pull_request.number }} \
+            --repo ${{ github.repository }} \
+            --add-label "${{ steps.fetch_info.outputs.backport_label }}"
 
-          IS_MERGIFY=$(echo "$PR_USER_LOGIN" | grep -iq 'mergify' && echo true || echo false)
+  add-backport-label:
+    if: github.event.pull_request.draft == false &&
+        startsWith(github.event.pull_request.base.ref, 'release-harvester-v')
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check conditions for backport label
+        id: check
+        run: |
+          IS_MERGIFY=$(echo '${{ github.event.pull_request.user.login }}' | grep -iq 'mergify' && echo true || echo false)
+          TARGET_BRANCH=${{ github.event.pull_request.base.ref }}
 
-          if [[ "$IS_MERGIFY" != "true" ]]; then
+          echo "IS_MERGIFY=$IS_MERGIFY" >> $GITHUB_OUTPUT
-            echo "PR author is not Mergify, skipping."
+          echo "TARGET_BRANCH=$TARGET_BRANCH" >> $GITHUB_OUTPUT
-            exit 0
-          fi
 
-          version="${PR_BASE_REF#release-harvester-v}"
+      - name: Add label if needed
+        if: steps.check.outputs.IS_MERGIFY == 'true' && startsWith(steps.check.outputs.TARGET_BRANCH, 'release-harvester-v')
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          TARGET_BRANCH="${{ steps.check.outputs.TARGET_BRANCH }}"
+          version="${TARGET_BRANCH#release-harvester-v}"
           label="backport/v${version}"
-          echo "Adding label: $label"
+          echo "Adding label $label"
-          gh pr edit "$PR_NUMBER" --repo "${{ github.repository }}" --add-label "$label"
+          gh pr edit ${{ github.event.pull_request.number }} \
+            --repo ${{ github.repository }} \
+            --add-label "$label"

.github/workflows/backport-request-check.yaml

@@ -1,28 +0,0 @@
-name: "PR Management Request Backport via Mergify Collect Data"
-
-on:
-  pull_request:
-    types: [closed]
-    branches: [main]
-
-jobs:
-  collect:
-    if: github.event.pull_request.merged == true
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      actions: write
-    steps:
-      - name: Save PR data to artifact
-        run: |
-          labels_json='${{ toJson(github.event.pull_request.labels.*.name) }}'
-          {
-            echo "PR_NUMBER=${{ github.event.pull_request.number }}"
-            echo "PR_LABELS=$(echo "$labels_json" | jq -r '[.[]] | join(",")')"
-          } > pr-backport-request-data.env
-
-      - name: Upload PR data artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
-        with:
-          name: pr-backport-request-data
-          path: pr-backport-request-data.env

.github/workflows/backport-request.yaml

@@ -1,47 +1,41 @@
-name: "PR Management Request Backport via Mergify"
+name: "[PR Management] Request Backport via Mergify"
 
 on:
-  workflow_run:
+  pull_request_target:
-    workflows:
+    types: [closed]
-      - "PR Management Request Backport via Mergify Collect Data"
+    branches: [main]
-    types: [completed]
+
+permissions:
+  pull-requests: write
 
 jobs:
   comment-backport:
+    if: github.event.pull_request.merged == true
     runs-on: ubuntu-latest
-    if: ${{ github.event.workflow_run.conclusion == 'success' }}
-    permissions:
-      actions: read
-      pull-requests: write
     steps:
-      - name: Download PR data artifact
+      - name: Checkout repository
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        uses: actions/checkout@v4
         with:
-          name: pr-backport-request-data
+          ref: ${{ github.base_ref }}
-          run-id: ${{ github.event.workflow_run.id }}
-          github-token: ${{ github.token }}
-
-      - name: Load PR data
-        run: |
-          cat pr-backport-request-data.env >> $GITHUB_ENV
 
       - name: Post Mergify backport command
         env:
-          GH_TOKEN: ${{ github.token }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -euo pipefail
 
-          pr_number="$PR_NUMBER"
+          pr_number=${{ github.event.pull_request.number }}
           repo="${{ github.repository }}"
 
-          labels=$(echo "$PR_LABELS" | tr ',' '\n')
+          labels_json='${{ toJson(github.event.pull_request.labels.*.name) }}'
+          labels=$(echo "$labels_json" | jq -r '.[] // empty')
 
           echo "Labels on PR: $labels"
 
           matches=$(echo "$labels" | grep -oE '^require backport/v[0-9]+\.[0-9]+$' || true)
 
           if [[ -z "$matches" ]]; then
-            echo "No back-port labels found — skipping."
+            echo "No back‑port labels found — skipping."
             exit 0
           fi
 

.github/workflows/build-and-publish-catalog-on-release.yaml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@v4
 
       - name: Check package version
         env:

.github/workflows/build-and-publish-standalone.yaml

@@ -25,12 +25,12 @@ jobs:
     name: Build & Upload Hosted
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@v3
         with:
           fetch-depth: 1
 
         # Note - Cannot use the setup action here as it uses a different yarn install arg
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+      - uses: actions/setup-node@v4
         with:
           node-version-file: '.nvmrc'
           cache: 'yarn'
@@ -45,20 +45,19 @@ jobs:
         run: ./scripts/build-upload-gate
 
       - name: Get gcs auth
-        uses: rancher-eio/read-vault-secrets@d266f55186f80a893839f6e15662e67388e443e6 # v3
+        uses: rancher-eio/read-vault-secrets@main
         with:
           secrets: |
             secret/data/github/repo/${{ github.repository }}/google-auth/harvester/credentials token | GOOGLE_AUTH ;
 
       - name: Apply gcs auth
         # https://github.com/google-github-actions/auth
-        uses: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed # v2
+        uses: 'google-github-actions/auth@v2'
-        
         with:
           credentials_json: "${{ env.GOOGLE_AUTH }}"
 
       - name: Upload build
-        uses: google-github-actions/upload-cloud-storage@c0f6160ff80057923ff50e5e567695cea181ec23 # v2
+        uses: 'google-github-actions/upload-cloud-storage@v2'
         # https://github.com/google-github-actions/upload-cloud-storage
         with:
           path: ${{steps.build-hosted.outputs.BUILD_HOSTED_DIR}}
@@ -72,12 +71,12 @@ jobs:
     name: Build & Upload Embedded
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@v3
         with:
           fetch-depth: 1
 
         # Note - Cannot use the setup action here as it uses a different yarn install arg
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+      - uses: actions/setup-node@v4
         with:
           node-version-file: '.nvmrc'
           cache: 'yarn'
@@ -90,19 +89,19 @@ jobs:
           DISABLED_EMBED_PKG: https://releases.rancher.com/harvester-ui/plugin/harvester-1.0.3.tar.gz
 
       - name: Get gcs auth
-        uses: rancher-eio/read-vault-secrets@d266f55186f80a893839f6e15662e67388e443e6 # v3
+        uses: rancher-eio/read-vault-secrets@main
         with:
           secrets: |
             secret/data/github/repo/${{ github.repository }}/google-auth/harvester/credentials token | GOOGLE_AUTH ;
 
       - name: Apply gcs auth
         # https://github.com/google-github-actions/auth
-        uses: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed # v2
+        uses: 'google-github-actions/auth@v2'
         with:
           credentials_json: "${{ env.GOOGLE_AUTH }}"
 
       - name: Upload tar
-        uses: google-github-actions/upload-cloud-storage@c0f6160ff80057923ff50e5e567695cea181ec23 # v2
+        uses: 'google-github-actions/upload-cloud-storage@v2'
         with:
           path: ${{steps.build-embedded.outputs.BUILD_EMBEDED_TGZ}}
           destination: releases.rancher.com/harvester-ui/dashboard
@@ -115,12 +114,12 @@ jobs:
     name: Build & Upload Plugin
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@v3
         with:
           fetch-depth: 1
 
         # Note - Cannot use the setup action here as it uses a different yarn install arg
-      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+      - uses: actions/setup-node@v4
         with:
           node-version-file: '.nvmrc'
           cache: 'yarn'
@@ -134,19 +133,19 @@ jobs:
         run: ./scripts/build-upload-gate
 
       - name: Get gcs auth
-        uses: rancher-eio/read-vault-secrets@d266f55186f80a893839f6e15662e67388e443e6 # v3
+        uses: rancher-eio/read-vault-secrets@main
         with:
           secrets: |
             secret/data/github/repo/${{ github.repository }}/google-auth/harvester/credentials token | GOOGLE_AUTH ;
 
       - name: Apply gcs auth
         # https://github.com/google-github-actions/auth
-        uses: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed # v2
+        uses: 'google-github-actions/auth@v2'
         with:
           credentials_json: "${{ env.GOOGLE_AUTH }}"
 
       - name: Upload plugin tar
-        uses: google-github-actions/upload-cloud-storage@c0f6160ff80057923ff50e5e567695cea181ec23 # v2
+        uses: 'google-github-actions/upload-cloud-storage@v2'
         with:
           path: dist-pkg/${{steps.ci-build-pkg.outputs.PKG_TARBALL}}
           destination: releases.rancher.com/harvester-ui/plugin
@@ -156,7 +155,7 @@ jobs:
           process_gcloudignore: false
 
       - name: Upload plugin directory
-        uses: google-github-actions/upload-cloud-storage@c0f6160ff80057923ff50e5e567695cea181ec23 # v2
+        uses: 'google-github-actions/upload-cloud-storage@v2'
         with:
           path: dist-pkg/${{steps.ci-build-pkg.outputs.PKG_NAME}}
           destination: releases.rancher.com/harvester-ui/plugin/${{steps.ci-build-pkg.outputs.PKG_NAME}}

.github/workflows/build-extension-catalog.yml

@@ -27,14 +27,14 @@ jobs:
       build-status: ${{ job.status }}
     steps:
       - name: Read Secrets
-        uses: rancher-eio/read-vault-secrets@d266f55186f80a893839f6e15662e67388e443e6 # v3
+        uses: rancher-eio/read-vault-secrets@main
         with:
           secrets: |
             secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials username | DOCKER_USERNAME ;
             secret/data/github/repo/${{ github.repository }}/dockerhub/rancher/credentials password | DOCKER_PASSWORD ;
       
       - name: Checkout repository (normal flow)
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@v4
 
       - name: Enable Corepack
         run: corepack enable
@@ -45,18 +45,24 @@ jobs:
           git config user.email 'github-actions[bot]@users.noreply.github.com'
 
       - name: Login to Docker Hub
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        uses: docker/login-action@v3
         with:
           username: ${{ env.DOCKER_USERNAME }}
           password: ${{ env.DOCKER_PASSWORD }}
 
       - name: Setup Helm
-        uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3
+        uses: azure/setup-helm@v3
         with:
           version: v3.8.0
 
-      - name: Setup Nodejs with yarn install
+      - name: Setup Nodejs with yarn caching
-        uses: ./.github/actions/setup
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: yarn
+
+      - name: Install dependencies
+        run: yarn
 
       - name: Build and push UI image
         run: |

.github/workflows/build-extension-on-merge.yml

@@ -13,7 +13,7 @@ jobs:
       target_branch: ${{ steps.get-version.outputs.target_branch }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@v4
 
       - name: Determine target branch
         id: get-version
@@ -44,7 +44,7 @@ jobs:
       version: ${{ steps.get_version.outputs.version }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@v4
 
       - name: Extract version from package.json
         id: get_version
@@ -62,13 +62,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@v4
-
-      - name: Setup Node from .nvmrc
-        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
-        with:
-          node-version-file: '.nvmrc'
-          cache: 'yarn'
 
       - name: Setup environment
         run: |
@@ -76,7 +70,7 @@ jobs:
           yarn install --frozen-lockfile
 
       - name: Setup Helm
-        uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3
+        uses: azure/setup-helm@v3
         with:
           version: v3.8.0
 
@@ -85,7 +79,7 @@ jobs:
           yarn publish-pkgs -s ${{ github.repository }} -b ${{ needs.setup-target-branch.outputs.target_branch }} -t harvester-${{ needs.extract-version.outputs.version }}
 
       - name: Upload charts artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@v4
         with:
           name: charts
           path: tmp
@@ -100,7 +94,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout release branch
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@v4
         with:
           ref: '${{ github.ref_name }}'
 
@@ -111,7 +105,7 @@ jobs:
           echo "LAST_COMMIT=${LAST_COMMIT}" >> $GITHUB_ENV
 
       - name: Checkout target branch
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@v4
         with:
           ref: '${{ needs.setup-target-branch.outputs.target_branch }}'
 
@@ -127,7 +121,7 @@ jobs:
           git config user.email 'github-actions[bot]@users.noreply.github.com'
 
       - name: Download build artifacts
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        uses: actions/download-artifact@v4
         with:
           name: charts
 
@@ -138,7 +132,7 @@ jobs:
           git push origin ${{ needs.setup-target-branch.outputs.target_branch }}
 
       - name: Run Helm chart releaser
-        uses: helm/chart-releaser-action@cae68fefc6b5f367a0275617c9f83181ba54714f # v1.7.0
+        uses: helm/chart-releaser-action@v1.7.0
         with:
           charts_dir: ./charts
         env:

.github/workflows/build-extension-on-release.yml

@@ -17,7 +17,7 @@ jobs:
       release_tag: ${{ steps.determine_tag.outputs.release_tag }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@v4
 
       - name: Determine release tag
         id: determine_tag
@@ -33,7 +33,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@v4
       - name: Check package version
         env:
           TAG_VERSION: ${{ github.event.release.tag_name }}
@@ -43,7 +43,7 @@ jobs:
     needs:
       - setup-release-tag
       - check-version
-    uses: rancher/dashboard/.github/workflows/build-extension-charts.yml@3b26a36bad555e5e2b8634b24823be29732f287c # master
+    uses: rancher/dashboard/.github/workflows/build-extension-charts.yml@master
     permissions:
       actions: write
       contents: write

.github/workflows/build-standalone-on-release.yaml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@v4
       - name: Check package version
         env:
           TAG_VERSION: ${{github.ref_name}}

.github/workflows/fossa.yml

@@ -20,13 +20,13 @@ jobs:
     # The FOSSA token is shared between all repos in Harvester's GH org. It can
     # be used directly and there is no need to request specific access to EIO.
     - name: Read FOSSA token
-      uses: rancher-eio/read-vault-secrets@d266f55186f80a893839f6e15662e67388e443e6 # v3
+      uses: rancher-eio/read-vault-secrets@main
       with:
         secrets: |
           secret/data/github/org/harvester/fossa/credentials token | FOSSA_API_KEY_PUSH_ONLY
 
     - name: FOSSA scan
-      uses: fossas/fossa-action@ff70fe9fe17cbd2040648f1c45e8ec4e4884dcf3 # v1.9.0
+      uses: fossas/fossa-action@main
       with:
         api-key: ${{ env.FOSSA_API_KEY_PUSH_ONLY }}
         # Only runs the scan and do not provide/returns any results back to the

.github/workflows/release-label.yaml

@@ -0,0 +1,30 @@
+name: "[PR Management] Add PR Label"
+
+on:
+  pull_request_target:
+    types: [opened, reopened, edited]
+    branches:
+      - main
+      - 'release-harvester-v*'
+
+permissions:
+  pull-requests: write
+
+jobs:
+  auto-assign-pr-label:
+    if: github.event.pull_request.draft == false
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.base_ref }}
+      - name: Setup Nodejs and yarn install
+        uses: ./.github/actions/setup
+      - name: Set PR label
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          PR_LABEL=$(node ./scripts/extract-release-label.mjs "${{ github.event.pull_request.title }}")
+          echo "PR_LABEL = $PR_LABEL"
+          gh pr edit ${{ github.event.pull_request.number }} --repo ${{ github.repository }}  --add-label "$PR_LABEL"

.github/workflows/run-lint.yaml

@@ -16,7 +16,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0  # Need full history for commit-lint
 

.nvmrc

@@ -1 +1 @@
-24
+20

AGENTS.md

@@ -1,261 +0,0 @@
-> This `./AGENTS.md` file is generated by running `yarn agents:generate`.
-
-
-# Project Overview
-
-The Harvester UI Extension is a Rancher extension that provides the user interface for Harvester within the Rancher Dashboard.
-
-```
-Note: This extension is available starting from Rancher 2.10.0. Ensure your Rancher version is 2.10.0 or later to access Harvester integration.
-```
-
-# Personas
-
-## Software Developer
-
-You are an expert Senior Software Engineer specializing in Vue.js and TypeScript. You have deep knowledge of Kubernetes and the Rancher ecosystem.
-- **Focus**: Writing clean, maintainable, and performant code.
-- **Priorities**: Adhering to the project's code style, ensuring type safety, and following best practices for component design.
-
-
-# Agents
-
-## Boundaries
-
-- ✅ **Always:**
-  - Write to `.github`, `docs/`,  `pkg/harvester`, `scripts/`.
-  - Make commits in a new branch (for a PR).
-  - Run `yarn lint:fix` before commits.
-    - Use conventional commit format: 
-    ```
-    <type>:
-
-    <description>
-    ```
-  - Follow existing naming conventions (PascalCase for components, camelCase for functions).
-  - After changing a Vue, JS, or TS file, make sure it's automatically formatted with ESLint.
-  - After updating files in `docs/agents.md/`, run `yarn agents:generate` to update root `AGENTS.md`.   
-- ⚠️ **Ask first:**
-  - Adding dependencies
-  - Upgrading dependencies
-- 🚫 **Never:**
-  - Commit or log secrets, `.env`, `kubeconfig` or any API keys.
-  - Edit `node_modules/`.
-  - Commit directly to `main` (use PRs).
-  - Skip git hooks with `--no-verify` flag.
-
-## Tools
-
-### Prerequisites
-
-- **Node.js**: `>= 24.0.0` (see `.nvmrc` for the pinned version: `24`)
-- **Package manager**: `yarn` (v1 classic)
-
-### Common Commands
-
-| Command | Description |
-|---------|-------------|
-| `yarn install --frozen-lockfile` | Install dependencies (CI-safe, no lockfile changes) |
-| `RANCHER_ENV=harvester API=https://<harvester-ip> yarn dev` | Start development server at `https://127.0.0.1:8005` |
-| `yarn build-pkg harvester` | Build the Harvester extension package |
-| `yarn serve-pkgs` | Serve the locally built extension for testing |
-| `yarn lint` | Run ESLint (zero warnings allowed) |
-| `yarn lint:fix` | Run ESLint with auto-fix |
-| `yarn clean` | Clean build artifacts |
-| `yarn agents:generate` | Regenerate `AGENTS.md` from `docs/agents.md/` sources |
-
-### Development
-
-- **Start dev server**:
-  ```bash
-  RANCHER_ENV=harvester API=https://your-harvester-ip yarn dev
-  ```
-  - `API` should point to a running Harvester cluster (e.g., `https://x.x.x.x`).
-  - The dashboard will be available at `https://127.0.0.1:8005`.
-
-### Building
-
-- **Build extension package**:
-  ```bash
-  yarn build-pkg harvester
-  ```
-- **Serve locally built extension** (for integration testing with a Rancher instance):
-  ```bash
-  yarn serve-pkgs
-  ```
-
-### Linting
-
-- **Check** (must pass with zero warnings):
-  ```bash
-  yarn lint
-  ```
-- **Auto-fix**:
-  ```bash
-  yarn lint:fix
-  ```
-- ESLint covers `.js`, `.ts`, and `.vue` files.
-- Always run `yarn lint:fix` before committing.
-
-### Commit Conventions
-
-- Commits are validated by [commitlint](https://commitlint.js.org/) via a Husky `commit-msg` hook.
-- Follow [Conventional Commits](https://www.conventionalcommits.org/) format (configured in `commitlint.config.js`).
-
-### Agent Documentation
-
-- Source files live in `docs/agents.md/` (agents, contributors, personas subdirectories).
-- After editing any source file, regenerate the root `AGENTS.md`:
-  ```bash
-  yarn agents:generate
-  ```
-
-# Contributors Guide
-
-## Getting Started
-
-Please see the [Harvester UI Extension README](https://github.com/harvester/harvester-ui-extension).
-
-To get started, follow the `Development Setup` section.
-
-## Project Information
-
-- **Tech Stack:**
-  - `Vue.js`: Framework
-  - `Linting`: ESLint
-  - `CSS`: SCSS should be used
-  - `TypeScript`: Primary language for logic.
-- **Code Style and Standards:**
-  - `Language`: TypeScript is preferred for new code.
-  - `Vue.js`:
-    - Composition API components are preferred over Options API.
-    - Large pages with lots of code and styles should be avoided by breaking the page up into smaller Vue components.
-    - Place source tag above template above style.
-    - style tag should contain `lang='scss' scoped`.
-  - `Linting`: Follow the ESLint configuration in the root.
-
-- **File Structure:**
-  - `.github/`: CI/CD workflows and Renovate config.
-  - `docs/`: Documentation source for `AGENTS.md` generation.
-  - `scripts/`: Bash scripts for build, CI and doc generation.
-  - `pkg/harvester/`: Main extension source. Files are named after K8s resource types (e.g., `kubevirt.io.virtualmachine`, `harvesterhci.io.volume`).
-     - `index.ts`: Plugin entry point — registers the product and auto-imports models/detail/edit views.
-     - `types.ts`: `HCI` constant mapping 60+ K8s resource types to string identifiers.
-     - `components/`: Reusable Vue components (VNC/serial console, settings panels, upgrade banners, filters).
-     - `config/`: Constants — settings keys, table column definitions, feature flags, type mappings, doc links.
-     - `detail/`: Read-only detail views per resource type. Complex resources use subdirectories with tabs.
-     - `dialog/`: Modal dialogs for operations (VM clone/migrate/restart, backup/restore, device passthrough, etc.).
-     - `edit/`: Create/edit forms. Complex resources (e.g., VM) split into subcomponents (CpuMemory, Network, Volume, CloudConfig, etc.).
-     - `formatters/`: Table cell formatters — state badges, usage bars, resource references.
-     - `l10n/`: Localization (`en-us.yaml`).
-     - `list/`: List (table) views per resource type, mirroring `detail/` and `edit/` naming.
-     - `mixins/`: Shared Vue mixins — VM helpers (`harvester-vm/`) and disk helpers (`harvester-disk.js`).
-     - `models/`: Model classes extending `SteveModel` with computed properties and actions. Base class: `harvester.js`.
-     - `pages/`: Route-level pages — dashboard, support, console, members, brand, alertmanager.
-     - `promptRemove/`: Custom delete-confirmation dialogs (VM, backup).
-     - `routing/`: Vue Router config — all product routes (CRUD, console, support, upgrade, etc.).
-     - `store/`: Vuex modules — `harvester-common.js` for shared state; `harvester-store/` for VM/resource creation actions with Steve integration.
-     - `styles/`: Global SCSS files.
-     - `utils/`: Helpers — VM volume templates, CPU/memory calc, cron parsing, regex validators, feature flags.
-     - `validators/`: Form validation functions per resource type, pushing i18n error messages.
-  
-  
-
-## Harvester UI Extension Development Guide
-
-1. Backward Compatibility
-The Harvester UI Extension supports earlier cluster versions (e.g., UI Ext v1.8.0 works with clusters v1.7.0 and v1.6.0). It uses Feature Flags defined in pkg/config/feature-flags to ensure the UI matches the cluster's specific version.
-
-2. Implementation Steps for New Features
-To add a feature in a new release, follow these steps:
-
-    Register: Add a unique [Feature Name] to the corresponding release array in the configuration.
-
-    Check: Use the following getter to verify if the feature is enabled for the current version:
-
-    ```
-    computed: {
-      newFeatureEnabled() {
-        return this.$store.getters['harvester-common/getFeatureEnabled']('[Feature Name]');
-      },
-    },
-    ```
-    Render: Use the result of the check to conditionally render the UI components.
-
-
-## E2E Tests (Cypress)
-
-See https://github.com/harvester/harvester-ui-tests
-
-## Node Dependencies
-
-Dependencies are managed via `package.json` and `yarn`
-
-- To install dependencies use `yarn install`. This will fail if dependencies and versions listed in `package.json` are out of step with the `yarn.lock` file
-- To add a dependency use `yarn run add:no-lock ...` instead of `yarn add`
-- To upgrade a dependency use `yarn run upgrade:no-lock ...` instead of `yarn upgrade`
-
-
-Renovate automatically updates dependencies and opens upgrade PRs after 10:00 AM on Sundays (`Asia/Taipei`).
-For the Renovate config, see `.github/renovate.json`.
-
-
-## Milestone guidance
-
-- All issues must first be resolved in the `main` branch
-- If backports are needed they can be made via the backport bot
-  - pull requests
-    - comment `@Mergifyio backport <target branch>` e.g. `@Mergifyio backport release-harvester-v1.8`
-    - All backported pull requests must link to a backported issue
-
-
-## Creating a branch
-
-### To resolve an issue
-- Checkout the branch matching the milestone of the issue `git checkout ${targetMilestoneBranch}`. Replace `${targetMilestoneBranch}` with the target milestone of the issue. For example
-  - `main` for the latest unreleased minor version
-  - `release-harvester-v.X` for release minor versions
-    - `release-harvester-v1.6`
-    - `release-harvester-v1.7`
-    - `release-harvester-v1.8`
-- Ensure you have the latest of that branch `git pull --rebase`
-- Checkout the branch to commit the changes to `git checkout issue-${issueNumber}`. Replace `${issueNumber}` with the issue number.
-
-## Creating a commit
-
-- This project uses commit-lint with [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/) to ensure consistent and meaningful commit messages.
-
-### Commit Message Format
-All commit messages must follow the conventional commit format:
-```
-<type>[optional scope]: <description>
-
-[optional body]
-
-[optional footer(s)]
-```
-
-### Supported Types
-- feat: New features
-- fix: Bug fixes
-- docs: Documentation changes
-- style: Code style changes (formatting, missing semicolons, etc.)
-- refactor: Code refactoring
-- perf: Performance improvements
-- test: Adding or updating tests
-- build: Build system or external dependencies
-- ci: CI/CD changes
-- chore: Other changes that don't modify src or test files
-- revert: Reverts a previous commit
-- wip: Work in progress
-- deps: Dependency updates
-- security: Security fixes
-
-## Creating a Pull Request
-
-- Pull requests must come from forks
-- Description should always have commit supported type prefix. E.g `fix: XXX`, `feat: OOO`
-- A Pull Request will only be merged once
-  - ALL CI gates have passed
-  - At least one harvester/harvester-ui-extension code owners reviews and approves the PR
-

CODEOWNERS

@@ -1,2 +0,0 @@
-@a110605
-@houhoucoop

README.md

@@ -7,7 +7,7 @@ The Harvester UI Extension is a Rancher extension that provides the user interfa
 
 ## Installation
 
-For Harvester UI extension installation instructions, please refer to the page **Rancher Integration** -> **Harvester UI Extension** in [official Harvester documentation](https://docs.harvesterhci.io).
+For detailed installation instructions, please refer to the [official Harvester documentation](https://docs.harvesterhci.io/v1.5/rancher/harvester-ui-extension#installation-on-rancher-210).
 
 
 ## Development Setup

docs/agents.md/README

@@ -1,63 +0,0 @@
-# Agents.md
-
-This folder contains files used to construct a single root `AGENTS.md`
-
-We do this because
-- The single commonality between almost all AI tools is that they look for a root `AGENTS.md`
-- Having the information in a single place for all AI tools is better than duplicating and maintaining the information in multiple files for each AI tool
-
-## Process
-1. Add files to or update files in `./docs/agents.md/agents`, `./docs/agents.md/personas`, `./docs/agents.md/contributors`.
-2. Each file must
-  - Start markdown headers at the `##` level
-  - End in a new line
-  - Order contents in AGENTS.md by giving an optional number prefix
-3. Run `yarn agents:generate`.
-   - Take the contents of `./docs/agents.md/template_agents.md`
-   - Insert the contents of the agents, personas and contributors files
-   - Output to `./AGENTS.md`
-4. Commit all changes, including root `./AGENTS.md` and any files that link to it
-
-## Guidance
-
-### Examples
-
-When referencing code or configuration it's good to include an example
-
-## Future Tasks
-- Add real world examples when referencing code
-- Create a GH workflow to monitor `agents.md` folder files in a PR, if changed run generate script and add new AGENTS.md to PR
-- Discuss
-  - Three multi AI tool related questions
-    - Questions
-      - how AI specific patterns, like co-pilot instructions, can be expressed in a way to be adopted by or reduce duplication with the root agents.md
-      - how AI tool specific metadata code can be included
-      - multiple agents vs personas approach works
-    - Proposal
-      - Generic information applicable to all AI tools is added to the root `agents.md`
-      - Agent, instruction or other AI specific files or patterns can be used in files specific to that AI tool. They must not contain duplicate information to the root `agents.md`
-      - The root `agents.md` continues to be AI tool agnostic
-  - How can folder specific agents be used
-    - Proposal
-      - `agents.md` are added to folders as long as most LLMs can make use of them and they do not duplicate information in the root `agents.md`
-
-## Test Prompts
-
-To validate LLMs are picking up information consider running the following prompts.
-
-### Information
-
-Can they provide correct information?
-
-- `what's this project about?`
-- `can you tell me the process for fixing a github issue in this repo?`
-- `what makes a good software developer?`
-- `what should never be done in this project?`
-- `what are the folders in this project for?`
-- `what are the env vars i could use when running e2e tests?`
-
-### Actions
-
-Can they use the information in their actions?
-
-Pending

docs/agents.md/agents/boundaries.md

@@ -1,23 +0,0 @@
-## Boundaries
-
-- ✅ **Always:**
-  - Write to `.github`, `docs/`,  `pkg/harvester`, `scripts/`.
-  - Make commits in a new branch (for a PR).
-  - Run `yarn lint:fix` before commits.
-    - Use conventional commit format: 
-    ```
-    <type>:
-
-    <description>
-    ```
-  - Follow existing naming conventions (PascalCase for components, camelCase for functions).
-  - After changing a Vue, JS, or TS file, make sure it's automatically formatted with ESLint.
-  - After updating files in `docs/agents.md/`, run `yarn agents:generate` to update root `AGENTS.md`.   
-- ⚠️ **Ask first:**
-  - Adding dependencies
-  - Upgrading dependencies
-- 🚫 **Never:**
-  - Commit or log secrets, `.env`, `kubeconfig` or any API keys.
-  - Edit `node_modules/`.
-  - Commit directly to `main` (use PRs).
-  - Skip git hooks with `--no-verify` flag.

docs/agents.md/agents/tools.md

@@ -1,65 +0,0 @@
-## Tools
-
-### Prerequisites
-
-- **Node.js**: `>= 24.0.0` (see `.nvmrc` for the pinned version: `24`)
-- **Package manager**: `yarn` (v1 classic)
-
-### Common Commands
-
-| Command | Description |
-|---------|-------------|
-| `yarn install --frozen-lockfile` | Install dependencies (CI-safe, no lockfile changes) |
-| `RANCHER_ENV=harvester API=https://<harvester-ip> yarn dev` | Start development server at `https://127.0.0.1:8005` |
-| `yarn build-pkg harvester` | Build the Harvester extension package |
-| `yarn serve-pkgs` | Serve the locally built extension for testing |
-| `yarn lint` | Run ESLint (zero warnings allowed) |
-| `yarn lint:fix` | Run ESLint with auto-fix |
-| `yarn clean` | Clean build artifacts |
-| `yarn agents:generate` | Regenerate `AGENTS.md` from `docs/agents.md/` sources |
-
-### Development
-
-- **Start dev server**:
-  ```bash
-  RANCHER_ENV=harvester API=https://your-harvester-ip yarn dev
-  ```
-  - `API` should point to a running Harvester cluster (e.g., `https://x.x.x.x`).
-  - The dashboard will be available at `https://127.0.0.1:8005`.
-
-### Building
-
-- **Build extension package**:
-  ```bash
-  yarn build-pkg harvester
-  ```
-- **Serve locally built extension** (for integration testing with a Rancher instance):
-  ```bash
-  yarn serve-pkgs
-  ```
-
-### Linting
-
-- **Check** (must pass with zero warnings):
-  ```bash
-  yarn lint
-  ```
-- **Auto-fix**:
-  ```bash
-  yarn lint:fix
-  ```
-- ESLint covers `.js`, `.ts`, and `.vue` files.
-- Always run `yarn lint:fix` before committing.
-
-### Commit Conventions
-
-- Commits are validated by [commitlint](https://commitlint.js.org/) via a Husky `commit-msg` hook.
-- Follow [Conventional Commits](https://www.conventionalcommits.org/) format (configured in `commitlint.config.js`).
-
-### Agent Documentation
-
-- Source files live in `docs/agents.md/` (agents, contributors, personas subdirectories).
-- After editing any source file, regenerate the root `AGENTS.md`:
-  ```bash
-  yarn agents:generate
-  ```

docs/agents.md/contributors/1_contributors.md

@@ -1,70 +0,0 @@
-## Getting Started
-
-Please see the [Harvester UI Extension README](https://github.com/harvester/harvester-ui-extension).
-
-To get started, follow the `Development Setup` section.
-
-## Project Information
-
-- **Tech Stack:**
-  - `Vue.js`: Framework
-  - `Linting`: ESLint
-  - `CSS`: SCSS should be used
-  - `TypeScript`: Primary language for logic.
-- **Code Style and Standards:**
-  - `Language`: TypeScript is preferred for new code.
-  - `Vue.js`:
-    - Composition API components are preferred over Options API.
-    - Large pages with lots of code and styles should be avoided by breaking the page up into smaller Vue components.
-    - Place source tag above template above style.
-    - style tag should contain `lang='scss' scoped`.
-  - `Linting`: Follow the ESLint configuration in the root.
-
-- **File Structure:**
-  - `.github/`: CI/CD workflows and Renovate config.
-  - `docs/`: Documentation source for `AGENTS.md` generation.
-  - `scripts/`: Bash scripts for build, CI and doc generation.
-  - `pkg/harvester/`: Main extension source. Files are named after K8s resource types (e.g., `kubevirt.io.virtualmachine`, `harvesterhci.io.volume`).
-     - `index.ts`: Plugin entry point — registers the product and auto-imports models/detail/edit views.
-     - `types.ts`: `HCI` constant mapping 60+ K8s resource types to string identifiers.
-     - `components/`: Reusable Vue components (VNC/serial console, settings panels, upgrade banners, filters).
-     - `config/`: Constants — settings keys, table column definitions, feature flags, type mappings, doc links.
-     - `detail/`: Read-only detail views per resource type. Complex resources use subdirectories with tabs.
-     - `dialog/`: Modal dialogs for operations (VM clone/migrate/restart, backup/restore, device passthrough, etc.).
-     - `edit/`: Create/edit forms. Complex resources (e.g., VM) split into subcomponents (CpuMemory, Network, Volume, CloudConfig, etc.).
-     - `formatters/`: Table cell formatters — state badges, usage bars, resource references.
-     - `l10n/`: Localization (`en-us.yaml`).
-     - `list/`: List (table) views per resource type, mirroring `detail/` and `edit/` naming.
-     - `mixins/`: Shared Vue mixins — VM helpers (`harvester-vm/`) and disk helpers (`harvester-disk.js`).
-     - `models/`: Model classes extending `SteveModel` with computed properties and actions. Base class: `harvester.js`.
-     - `pages/`: Route-level pages — dashboard, support, console, members, brand, alertmanager.
-     - `promptRemove/`: Custom delete-confirmation dialogs (VM, backup).
-     - `routing/`: Vue Router config — all product routes (CRUD, console, support, upgrade, etc.).
-     - `store/`: Vuex modules — `harvester-common.js` for shared state; `harvester-store/` for VM/resource creation actions with Steve integration.
-     - `styles/`: Global SCSS files.
-     - `utils/`: Helpers — VM volume templates, CPU/memory calc, cron parsing, regex validators, feature flags.
-     - `validators/`: Form validation functions per resource type, pushing i18n error messages.
-  
-  
-
-## Harvester UI Extension Development Guide
-
-1. Backward Compatibility
-The Harvester UI Extension supports earlier cluster versions (e.g., UI Ext v1.8.0 works with clusters v1.7.0 and v1.6.0). It uses Feature Flags defined in pkg/config/feature-flags to ensure the UI matches the cluster's specific version.
-
-2. Implementation Steps for New Features
-To add a feature in a new release, follow these steps:
-
-    Register: Add a unique [Feature Name] to the corresponding release array in the configuration.
-
-    Check: Use the following getter to verify if the feature is enabled for the current version:
-
-    ```
-    computed: {
-      newFeatureEnabled() {
-        return this.$store.getters['harvester-common/getFeatureEnabled']('[Feature Name]');
-      },
-    },
-    ```
-    Render: Use the result of the check to conditionally render the UI components.
-

docs/agents.md/contributors/2_e2e-tests.md

@@ -1,3 +0,0 @@
-## E2E Tests (Cypress)
-
-See https://github.com/harvester/harvester-ui-tests

docs/agents.md/contributors/node-dependencies.md

@@ -1,12 +0,0 @@
-## Node Dependencies
-
-Dependencies are managed via `package.json` and `yarn`
-
-- To install dependencies use `yarn install`. This will fail if dependencies and versions listed in `package.json` are out of step with the `yarn.lock` file
-- To add a dependency use `yarn run add:no-lock ...` instead of `yarn add`
-- To upgrade a dependency use `yarn run upgrade:no-lock ...` instead of `yarn upgrade`
-
-
-Renovate automatically updates dependencies and opens upgrade PRs after 10:00 AM on Sundays (`Asia/Taipei`).
-For the Renovate config, see `.github/renovate.json`.
-

docs/agents.md/contributors/resolving_gh_issues.md

@@ -1,58 +0,0 @@
-## Milestone guidance
-
-- All issues must first be resolved in the `main` branch
-- If backports are needed they can be made via the backport bot
-  - pull requests
-    - comment `@Mergifyio backport <target branch>` e.g. `@Mergifyio backport release-harvester-v1.8`
-    - All backported pull requests must link to a backported issue
-
-
-## Creating a branch
-
-### To resolve an issue
-- Checkout the branch matching the milestone of the issue `git checkout ${targetMilestoneBranch}`. Replace `${targetMilestoneBranch}` with the target milestone of the issue. For example
-  - `main` for the latest unreleased minor version
-  - `release-harvester-v.X` for release minor versions
-    - `release-harvester-v1.6`
-    - `release-harvester-v1.7`
-    - `release-harvester-v1.8`
-- Ensure you have the latest of that branch `git pull --rebase`
-- Checkout the branch to commit the changes to `git checkout issue-${issueNumber}`. Replace `${issueNumber}` with the issue number.
-
-## Creating a commit
-
-- This project uses commit-lint with [Conventional Commits](https://www.conventionalcommits.org/en/v1.0.0/) to ensure consistent and meaningful commit messages.
-
-### Commit Message Format
-All commit messages must follow the conventional commit format:
-```
-<type>[optional scope]: <description>
-
-[optional body]
-
-[optional footer(s)]
-```
-
-### Supported Types
-- feat: New features
-- fix: Bug fixes
-- docs: Documentation changes
-- style: Code style changes (formatting, missing semicolons, etc.)
-- refactor: Code refactoring
-- perf: Performance improvements
-- test: Adding or updating tests
-- build: Build system or external dependencies
-- ci: CI/CD changes
-- chore: Other changes that don't modify src or test files
-- revert: Reverts a previous commit
-- wip: Work in progress
-- deps: Dependency updates
-- security: Security fixes
-
-## Creating a Pull Request
-
-- Pull requests must come from forks
-- Description should always have commit supported type prefix. E.g `fix: XXX`, `feat: OOO`
-- A Pull Request will only be merged once
-  - ALL CI gates have passed
-  - At least one harvester/harvester-ui-extension code owners reviews and approves the PR

docs/agents.md/personas/software_developer.md

@@ -1,5 +0,0 @@
-## Software Developer
-
-You are an expert Senior Software Engineer specializing in Vue.js and TypeScript. You have deep knowledge of Kubernetes and the Rancher ecosystem.
-- **Focus**: Writing clean, maintainable, and performant code.
-- **Priorities**: Adhering to the project's code style, ensuring type safety, and following best practices for component design.

docs/agents.md/template_agents.md

@@ -1,22 +0,0 @@
-> This `./AGENTS.md` file is generated by running `yarn agents:generate`.
-
-
-# Project Overview
-
-The Harvester UI Extension is a Rancher extension that provides the user interface for Harvester within the Rancher Dashboard.
-
-```
-Note: This extension is available starting from Rancher 2.10.0. Ensure your Rancher version is 2.10.0 or later to access Harvester integration.
-```
-
-# Personas
-
-`<personas>`
-
-# Agents
-
-`<agents>`
-
-# Contributors Guide
-
-`<contributors>`

package.json

@@ -1,13 +1,13 @@
 {
   "name": "harvester-ui-extension",
-  "version": "1.9.0-dev",
+  "version": "1.8.0-rc2",
   "private": false,
   "engines": {
-    "node": ">=24.0.0"
+    "node": ">=20.0.0"
   },
   "dependencies": {
     "@babel/plugin-transform-class-static-block": "7.28.6",
-    "@rancher/shell": "3.0.12-rc.1",
+    "@rancher/shell": "3.0.9-rc.6",
     "@vue-flow/background": "^1.3.0",
     "@vue-flow/controls": "^1.1.1",
     "@vue-flow/core": "^1.33.5",
@@ -21,19 +21,19 @@
     "yaml": "^2.5.1"
   },
   "resolutions": {
-    "@types/node": "25.6.0",
+    "@types/node": "~20.19.0",
     "cronstrue": "2.59.0",
     "d3-color": "3.1.0",
     "ejs": "3.1.10",
-    "follow-redirects": "1.16.0",
+    "follow-redirects": "1.15.11",
     "glob": "7.2.3",
     "glob-parent": "6.0.2",
     "json5": "2.2.3",
     "@types/lodash": "4.17.24",
     "merge": "2.1.1",
-    "node-forge": "1.4.0",
+    "node-forge": "1.3.3",
     "nth-check": "2.1.1",
-    "qs": "6.15.1",
+    "qs": "6.15.0",
     "roarr": "7.21.4",
     "semver": "7.7.4",
     "@vue/cli-service/html-webpack-plugin": "^5.0.0"
@@ -49,8 +49,7 @@
     "publish-pkgs": "./node_modules/@rancher/shell/scripts/extension/publish",
     "parse-tag-name": "./node_modules/@rancher/shell/scripts/extension/parse-tag-name",
     "commitlint": "commitlint --edit",
-    "prepare": "husky",
+    "prepare": "husky"
-    "agents:generate": "./scripts/generate-agent-and-persona-mds.sh"
   },
   "devDependencies": {
     "@commitlint/load": "^19.8.1",

pkg/harvester/README.md

@@ -7,7 +7,8 @@ The Harvester UI Extension is a Rancher extension that provides the user interfa
 
 ## Installation
 
-For Harvester UI extension installation instructions, please refer to the page **Rancher Integration** -> **Harvester UI Extension** in [official Harvester documentation](https://docs.harvesterhci.io).
+For detailed installation instructions, please refer to the [official Harvester documentation](https://docs.harvesterhci.io/v1.5/rancher/harvester-ui-extension#installation-on-rancher-210).
+
 
 ## Development Setup
 

pkg/harvester/components/Members.vue

@@ -122,7 +122,7 @@ export default {
       return this.$store.getters['currentCluster'].isLocal;
     },
     canEditClusterMembers() {
-      return this.schema?.collectionMethods.find((x) => x.toLowerCase() === 'post');
+      return this.normanClusterRTBSchema?.collectionMethods.find((x) => x.toLowerCase() === 'post');
     },
   },
 };

pkg/harvester/components/settings/cluster-pod-security-standard.vue

@@ -1,196 +0,0 @@
-<script>
-import { RadioGroup } from '@components/Form/Radio';
-import LabeledSelect from '@shell/components/form/LabeledSelect';
-import { NAMESPACE } from '@shell/config/types';
-import CreateEditView from '@shell/mixins/create-edit-view';
-
-export default {
-  name: 'HarvesterClusterPodSecurityStandard',
-
-  components: {
-    RadioGroup,
-    LabeledSelect,
-  },
-
-  mixins: [CreateEditView],
-
-  props: {
-    value: {
-      type:    Object,
-      default: () => ({}),
-    },
-  },
-
-  async fetch() {
-    const inStore = this.$store.getters['currentProduct'].inStore;
-
-    await this.$store.dispatch(`${ inStore }/findAll`, { type: NAMESPACE });
-  },
-
-  data() {
-    let enabled = false;
-    let whitelistedNamespaces = [];
-    let privilegedNamespaces = [];
-    let restrictedNamespaces = [];
-
-    try {
-      const parsed = JSON.parse(this.value.value || this.value.default || '{}');
-
-      enabled = !!parsed.enabled;
-      whitelistedNamespaces = parsed.whitelistedNamespacesList ? parsed.whitelistedNamespacesList.split(',') : [];
-      privilegedNamespaces = parsed.privilegedNamespacesList ? parsed.privilegedNamespacesList.split(',') : [];
-      restrictedNamespaces = parsed.restrictedNamespacesList ? parsed.restrictedNamespacesList.split(',') : [];
-    } catch (e) {
-      enabled = false;
-      whitelistedNamespaces = [];
-      privilegedNamespaces = [];
-      restrictedNamespaces = [];
-    }
-
-    return {
-      enabled,
-      whitelistedNamespaces,
-      privilegedNamespaces,
-      restrictedNamespaces,
-    };
-  },
-
-  computed: {
-    enabledOptions() {
-      return [
-        { label: this.t('generic.enabled'), value: true },
-        { label: this.t('generic.disabled'), value: false },
-      ];
-    },
-
-    allNamespaces() {
-      const inStore = this.$store.getters['currentProduct'].inStore;
-
-      return this.$store.getters[`${ inStore }/all`](NAMESPACE).filter((ns) => !ns.isSystem).map((ns) => ns.id);
-    },
-
-    whitelistedOptions() {
-      const excluded = new Set([...this.privilegedNamespaces, ...this.restrictedNamespaces]);
-
-      return this.allNamespaces.filter((ns) => !excluded.has(ns));
-    },
-
-    privilegedOptions() {
-      const excluded = new Set([...this.whitelistedNamespaces, ...this.restrictedNamespaces]);
-
-      return this.allNamespaces.filter((ns) => !excluded.has(ns));
-    },
-
-    restrictedOptions() {
-      const excluded = new Set([...this.whitelistedNamespaces, ...this.privilegedNamespaces]);
-
-      return this.allNamespaces.filter((ns) => !excluded.has(ns));
-    },
-  },
-
-  methods: {
-    useDefault() {
-      try {
-        const parsed = JSON.parse(this.value.default || '{}');
-
-        this.enabled = !!parsed.enabled;
-        this.whitelistedNamespaces = parsed.whitelistedNamespacesList ? parsed.whitelistedNamespacesList.split(',') : [];
-        this.privilegedNamespaces = parsed.privilegedNamespacesList ? parsed.privilegedNamespacesList.split(',') : [];
-        this.restrictedNamespaces = parsed.restrictedNamespacesList ? parsed.restrictedNamespacesList.split(',') : [];
-      } catch (e) {
-        this.enabled = false;
-        this.whitelistedNamespaces = [];
-        this.privilegedNamespaces = [];
-        this.restrictedNamespaces = [];
-      }
-      this.save();
-    },
-
-    onUpdateEnabled() {
-      if (!this.enabled) {
-        this.whitelistedNamespaces = [];
-        this.privilegedNamespaces = [];
-        this.restrictedNamespaces = [];
-      }
-      this.save();
-    },
-
-    updateWhitelisted(selected) {
-      this.whitelistedNamespaces = selected;
-      this.save();
-    },
-
-    updatePrivileged(selected) {
-      this.privilegedNamespaces = selected;
-      this.save();
-    },
-
-    updateRestricted(selected) {
-      this.restrictedNamespaces = selected;
-      this.save();
-    },
-
-    save() {
-      this.value.value = JSON.stringify({
-        enabled:                   this.enabled,
-        whitelistedNamespacesList: this.whitelistedNamespaces.join(','),
-        privilegedNamespacesList:  this.privilegedNamespaces.join(','),
-        restrictedNamespacesList:  this.restrictedNamespaces.join(','),
-      });
-    },
-  },
-};
-</script>
-
-<template>
-  <div>
-    <div class="row mb-20">
-      <div class="col span-6">
-        <RadioGroup
-          v-model:value="enabled"
-          name="enabled"
-          :options="enabledOptions"
-          @update:value="onUpdateEnabled"
-        />
-      </div>
-    </div>
-    <template v-if="enabled">
-      <div class="row mb-20">
-        <div class="col span-12">
-          <LabeledSelect
-            v-model:value="whitelistedNamespaces"
-            :label="t('harvester.setting.clusterPodSecurityStandard.whitelistedNamespaces.label')"
-            :options="whitelistedOptions"
-            :multiple="true"
-            :mode="mode"
-            @update:value="updateWhitelisted"
-          />
-        </div>
-      </div>
-      <div class="row mb-20">
-        <div class="col span-12">
-          <LabeledSelect
-            v-model:value="privilegedNamespaces"
-            :label="t('harvester.setting.clusterPodSecurityStandard.privilegedNamespaces.label')"
-            :options="privilegedOptions"
-            :multiple="true"
-            :mode="mode"
-            @update:value="updatePrivileged"
-          />
-        </div>
-      </div>
-      <div class="row mb-20">
-        <div class="col span-12">
-          <LabeledSelect
-            v-model:value="restrictedNamespaces"
-            :label="t('harvester.setting.clusterPodSecurityStandard.restrictedNamespaces.label')"
-            :options="restrictedOptions"
-            :multiple="true"
-            :mode="mode"
-            @update:value="updateRestricted"
-          />
-        </div>
-      </div>
-    </template>
-  </div>
-</template>

pkg/harvester/components/settings/instance-manager-resources.vue

@@ -45,8 +45,8 @@ export default {
 
       const cpu = { ...this.resources?.cpu };
 
-      if (cpu.v1 !== null && cpu.v1 !== undefined) cpu.v1 = String(cpu.v1);
+      if (cpu.v1 !== null) cpu.v1 = String(cpu.v1);
-      if (cpu.v2 !== null && cpu.v2 !== undefined) cpu.v2 = String(cpu.v2);
+      if (cpu.v2 !== null) cpu.v2 = String(cpu.v2);
 
       this.value.value = JSON.stringify({ ...this.resources, cpu });
     },

pkg/harvester/config/feature-flags.js

@@ -65,11 +65,7 @@ const FEATURE_FLAGS = {
     'vGPUAsPCIDevice',
     'instanceManagerResourcesSetting',
     'rwxNetworkSetting',
-    'createPVCWithDataVolume',
-    'clusterPodSecurityStandardSetting'
   ],
-  'v1.8.1': [],
-  'v1.9.0': [],
 };
 
 const generateFeatureFlags = () => {

pkg/harvester/config/harvester-cluster.js

@@ -81,6 +81,7 @@ export function init($plugin, store) {
     configureType,
     virtualType,
     weightGroup,
+    weightType,
   } = $plugin.DSL(store, PRODUCT_NAME);
 
   const isSingleVirtualCluster = process.env.rancherEnv === PRODUCT_NAME;
@@ -167,7 +168,7 @@ export function init($plugin, store) {
     group:      'Root',
     name:       HCI.HOST,
     namespaced: true,
-    weight:     499,
+    weight:     399,
     route:      {
       name:   `${ PRODUCT_NAME }-c-cluster-resource`,
       params: { resource: HCI.HOST }
@@ -199,7 +200,7 @@ export function init($plugin, store) {
     group:      'root',
     name:       HCI.VM,
     namespaced: true,
-    weight:     498,
+    weight:     299,
     route:      {
       name:   `${ PRODUCT_NAME }-c-cluster-resource`,
       params: { resource: HCI.VM }
@@ -360,7 +361,7 @@ export function init($plugin, store) {
     ifHaveType: PVC,
     name:       HCI.VOLUME,
     namespaced: true,
-    weight:     497,
+    weight:     199,
     route:      {
       name:   `${ PRODUCT_NAME }-c-cluster-resource`,
       params: { resource: HCI.VOLUME }
@@ -386,7 +387,7 @@ export function init($plugin, store) {
     group:      'root',
     name:       HCI.IMAGE,
     namespaced: true,
-    weight:     496,
+    weight:     198,
     route:      {
       name:   `${ PRODUCT_NAME }-c-cluster-resource`,
       params: { resource: HCI.IMAGE }
@@ -401,7 +402,7 @@ export function init($plugin, store) {
     group:      'root',
     namespaced: true,
     name:       'projects-namespaces',
-    weight:     495,
+    weight:     98,
     route:      { name: `${ PRODUCT_NAME }-c-cluster-projectsnamespaces` },
     exact:      true,
   });
@@ -413,7 +414,7 @@ export function init($plugin, store) {
       labelKey:   'harvester.namespace.label',
       name:       NAMESPACE,
       namespaced: true,
-      weight:     495,
+      weight:     89,
       route:      {
         name:   `${ PRODUCT_NAME }-c-cluster-resource`,
         params: { resource: NAMESPACE }
@@ -591,8 +592,9 @@ export function init($plugin, store) {
     'backupAndSnapshot'
   );
 
-  weightGroup('networks', 494, true);
+  weightGroup('networks', 300, true);
-  weightGroup('backupAndSnapshot', 493, true);
+  weightType(NAMESPACE, 299, true);
+  weightGroup('backupAndSnapshot', 289, true);
 
   basicType(
     [
@@ -686,7 +688,7 @@ export function init($plugin, store) {
     },
     resource:       NETWORK_ATTACHMENT,
     resourceDetail: HCI.NETWORK_ATTACHMENT,
-    resourceEdit:   HCI.NETWORK_ATTACHMENT,
+    resourceEdit:   HCI.NETWORK_ATTACHMENT
   });
 
   virtualType({

pkg/harvester/config/labels-annotations.js

@@ -80,5 +80,4 @@ export const HCI = {
   VOLUME_SNAPSHOT_CLASS:            'cdi.harvesterhci.io/storageProfileVolumeSnapshotClass',
   MAC_ADDRESS:                      'harvesterhci.io/mac-address',
   NODE_UPGRADE_PAUSE_MAP:           'harvesterhci.io/node-upgrade-pause-map',
-  CDI_POPULATOR_KIND:               'cdi.kubevirt.io/storage.populator.kind',
 };

pkg/harvester/config/settings.ts

@@ -41,8 +41,7 @@ export const HCI_SETTING = {
   RANCHER_CLUSTER:                        'rancher-cluster',
   MAX_HOTPLUG_RATIO:                      'max-hotplug-ratio',
   KUBEVIRT_MIGRATION:                     'kubevirt-migration',
-  INSTANCE_MANAGER_RESOURCES:             'instance-manager-resources',
+  INSTANCE_MANAGER_RESOURCES:             'instance-manager-resources'
-  CLUSTER_POD_SECURITY_STANDARD:          'cluster-pod-security-standard'
 };
 
 export const HCI_ALLOWED_SETTINGS = {
@@ -84,7 +83,7 @@ export const HCI_ALLOWED_SETTINGS = {
     kind: 'custom', from: 'import', canReset: true
   },
   [HCI_SETTING.RWX_NETWORK]:                            {
-    kind: 'json', from: 'import', canReset: true, featureFlag: 'rwxNetworkSetting'
+    kind: 'custom', from: 'import', canReset: true, featureFlag: 'rwxNetworkSetting'
   },
   [HCI_SETTING.VM_FORCE_RESET_POLICY]:                  { kind: 'json', from: 'import' },
   [HCI_SETTING.SSL_CERTIFICATES]:                       { kind: 'json', from: 'import' },
@@ -131,9 +130,6 @@ export const HCI_ALLOWED_SETTINGS = {
   },
   [HCI_SETTING.INSTANCE_MANAGER_RESOURCES]: {
     kind: 'json', from: 'import', featureFlag: 'instanceManagerResourcesSetting'
-  },
-  [HCI_SETTING.CLUSTER_POD_SECURITY_STANDARD]: {
-    kind: 'json', from: 'import', canReset: true, featureFlag: 'clusterPodSecurityStandardSetting'
   }
 };
 

pkg/harvester/config/types.js

@@ -41,8 +41,3 @@ export const VMIMPORT_SOURCE_KINDS = {
   OPENSTACK: 'OpenstackSource',
   OVA:       'OvaSource',
 };
-
-export const CDI_POPULATOR_KIND = {
-  VOLUME_IMPORT_SOURCE: 'VolumeImportSource',
-  VOLUME_CLONE_SOURCE:  'VolumeCloneSource',
-};

pkg/harvester/dialog/EnablePciPassthrough.vue

@@ -4,7 +4,6 @@ import { Card } from '@components/Card';
 import AsyncButton from '@shell/components/AsyncButton';
 import { escapeHtml } from '@shell/utils/string';
 import { HCI } from '../types';
-import { getHarvesterUserName } from '../utils/auth';
 
 export default {
   name: 'HarvesterEnablePciPassthrough',
@@ -35,7 +34,16 @@ export default {
     },
 
     async save(buttonCb) {
-      const userName = getHarvesterUserName(this.$store.getters);
+      // isSingleProduct == this is a standalone Harvester cluster
+      const isSingleProduct = this.$store.getters['isSingleProduct'];
+      let userName = 'admin';
+
+      // if this is imported Harvester, there may be users other than 'admin
+      if (!isSingleProduct) {
+        const user = this.$store.getters['auth/v3User'];
+
+        userName = user?.username || user?.id;
+      }
 
       for (let i = 0; i < this.resources.length; i++) {
         const actionResource = this.resources[i];

pkg/harvester/dialog/EnableUSBPassthrough.vue

@@ -4,7 +4,6 @@ import { Card } from '@components/Card';
 import AsyncButton from '@shell/components/AsyncButton';
 import { escapeHtml } from '@shell/utils/string';
 import { HCI } from '../types';
-import { getHarvesterUserName } from '../utils/auth';
 
 export default {
   name: 'HarvesterEnableUSBPassthrough',
@@ -35,7 +34,16 @@ export default {
     },
 
     async save(buttonCb) {
-      const userName = getHarvesterUserName(this.$store.getters);
+      // isSingleProduct == this is a standalone Harvester cluster
+      const isSingleProduct = this.$store.getters['isSingleProduct'];
+      let userName = 'admin';
+
+      // if this is imported Harvester, there may be users other than 'admin
+      if (!isSingleProduct) {
+        const user = this.$store.getters['auth/v3User'];
+
+        userName = user?.username || user?.id;
+      }
 
       for (let i = 0; i < this.resources.length; i++) {
         const actionResource = this.resources[i];

pkg/harvester/dialog/HarvesterDataMigrationDialog.vue

@@ -1,183 +0,0 @@
-<script>
-import { mapGetters } from 'vuex';
-
-import { STORAGE_CLASS } from '@shell/config/types';
-import { exceptionToErrorsArray } from '@shell/utils/error';
-import { sortBy } from '@shell/utils/sort';
-import { isInternalStorageClass } from '../utils/storage-class';
-
-import { Card } from '@components/Card';
-import { Banner } from '@components/Banner';
-import { LabeledInput } from '@components/Form/LabeledInput';
-import AsyncButton from '@shell/components/AsyncButton';
-import LabeledSelect from '@shell/components/form/LabeledSelect';
-
-export default {
-  name: 'HarvesterDataMigrationDialog',
-
-  emits: ['close'],
-
-  components: {
-    AsyncButton, Banner, Card, LabeledInput, LabeledSelect
-  },
-
-  props: {
-    resources: {
-      type:     Array,
-      required: true
-    }
-  },
-
-  async fetch() {
-    this.storageClasses = await this.$store.dispatch('harvester/findAll', { type: STORAGE_CLASS });
-  },
-
-  data() {
-    return {
-      targetVolumeName:       '',
-      targetStorageClassName: '',
-      errors:                 [],
-      storageClasses:         [],
-    };
-  },
-
-  computed: {
-    ...mapGetters({ t: 'i18n/t' }),
-
-    actionResource() {
-      return this.resources[0];
-    },
-
-    storageClassOptions() {
-      return sortBy(
-        this.storageClasses
-          .filter((sc) => !isInternalStorageClass(sc.metadata?.name))
-          .map((sc) => ({
-            label: sc.metadata?.name,
-            value: sc.metadata?.name
-          })),
-        'label'
-      );
-    },
-
-    disableSave() {
-      return !this.targetVolumeName || !this.targetStorageClassName;
-    },
-  },
-
-  methods: {
-    close() {
-      this.targetVolumeName = '';
-      this.targetStorageClassName = '';
-      this.errors = [];
-      this.$emit('close');
-    },
-
-    async apply(buttonDone) {
-      if (!this.actionResource) {
-        buttonDone(false);
-
-        return;
-      }
-
-      if (!this.targetVolumeName) {
-        const name = this.t('harvester.modal.dataMigration.fields.targetVolumeName.label');
-
-        this['errors'] = [this.t('validation.required', { key: name })];
-        buttonDone(false);
-
-        return;
-      }
-
-      if (!this.targetStorageClassName) {
-        const name = this.t('harvester.modal.dataMigration.fields.targetStorageClassName.label');
-
-        this['errors'] = [this.t('validation.required', { key: name })];
-        buttonDone(false);
-
-        return;
-      }
-
-      try {
-        await this.actionResource.doAction('dataMigration', {
-          targetVolumeName:       this.targetVolumeName,
-          targetStorageClassName: this.targetStorageClassName
-        }, {}, false);
-
-        buttonDone(true);
-        this.close();
-      } catch (err) {
-        const error = err?.data || err;
-
-        this['errors'] = exceptionToErrorsArray(error);
-        buttonDone(false);
-      }
-    },
-  }
-};
-</script>
-
-<template>
-  <Card :show-highlight-border="false">
-    <template #title>
-      {{ t('harvester.modal.dataMigration.title') }}
-    </template>
-
-    <template #body>
-      <LabeledInput
-        v-model:value="targetVolumeName"
-        :label="t('harvester.modal.dataMigration.fields.targetVolumeName.label')"
-        :placeholder="t('harvester.modal.dataMigration.fields.targetVolumeName.placeholder')"
-        class="mb-20"
-        required
-      />
-
-      <LabeledSelect
-        v-model:value="targetStorageClassName"
-        :label="t('harvester.modal.dataMigration.fields.targetStorageClassName.label')"
-        :placeholder="t('harvester.modal.dataMigration.fields.targetStorageClassName.placeholder')"
-        :options="storageClassOptions"
-        required
-      />
-
-      <Banner
-        v-for="(err, i) in errors"
-        :key="i"
-        color="error"
-        :label="err"
-      />
-    </template>
-
-    <template
-      #actions
-      class="actions"
-    >
-      <div class="buttons">
-        <button
-          class="btn role-secondary mr-10"
-          @click="close"
-        >
-          {{ t('generic.cancel') }}
-        </button>
-
-        <AsyncButton
-          mode="apply"
-          :disabled="disableSave"
-          @click="apply"
-        />
-      </div>
-    </template>
-  </Card>
-</template>
-
-<style lang="scss" scoped>
-.actions {
-  width: 100%;
-}
-
-.buttons {
-  display: flex;
-  justify-content: flex-end;
-  width: 100%;
-}
-</style>

pkg/harvester/dialog/HarvesterEnableNvidiaDriverToolkit.vue

@@ -1,154 +0,0 @@
-<script>
-import merge from 'lodash/merge';
-import jsyaml from 'js-yaml';
-import { mapGetters } from 'vuex';
-import { Card } from '@components/Card';
-import { LabeledInput } from '@components/Form/LabeledInput';
-import AsyncButton from '@shell/components/AsyncButton';
-import { escapeHtml } from '@shell/utils/string';
-
-const DEFAULT_VALUE = { image: { repository: 'rancher/harvester-nvidia-driver-toolkit' } };
-
-export default {
-  name: 'HarvesterEnableNvidiaDriverToolkit',
-
-  emits: ['close'],
-
-  components: {
-    AsyncButton,
-    Card,
-    LabeledInput,
-  },
-
-  props: {
-    resources: {
-      type:     Array,
-      required: true
-    }
-  },
-
-  data() {
-    const addon = this.resources[0];
-    let valuesContentJson;
-
-    try {
-      valuesContentJson = merge({}, DEFAULT_VALUE, jsyaml.load(addon.spec.valuesContent));
-    } catch (e) {
-      valuesContentJson = { ...DEFAULT_VALUE };
-    }
-
-    return { valuesContentJson };
-  },
-
-  computed: {
-    ...mapGetters({ t: 'i18n/t' }),
-
-    buttonDisabled() {
-      const { image, driverLocation } = this.valuesContentJson;
-
-      return !(image?.repository || '').trim() || !(image?.tag || '').trim() || !(driverLocation || '').trim();
-    }
-  },
-
-  methods: {
-    close() {
-      this.$emit('close');
-    },
-
-    async enable(buttonCb) {
-      const addon = this.resources[0];
-
-      try {
-        addon.spec.valuesContent = jsyaml.dump(this.valuesContentJson);
-        addon.spec.enabled = true;
-        await addon.save();
-        buttonCb(true);
-        this.close();
-      } catch (err) {
-        addon.spec.enabled = false;
-        this.$store.dispatch('growl/fromError', {
-          title: this.t('generic.notification.title.error', { name: escapeHtml(addon.metadata.name) }),
-          err,
-        }, { root: true });
-        buttonCb(false);
-      }
-    }
-  }
-};
-</script>
-
-<template>
-  <Card :show-highlight-border="false">
-    <template #title>
-      <h4
-        v-clean-html="t('harvester.addons.nvidiaDriverToolkit.enable.title')"
-        class="text-default-text"
-      />
-    </template>
-
-    <template #body>
-      <div class="body">
-        <div class="row mb-15">
-          <div class="col span-6">
-            <LabeledInput
-              v-model:value="valuesContentJson.image.repository"
-              :required="true"
-              :label="t('harvester.addons.nvidiaDriverToolkit.image.repository')"
-            />
-          </div>
-          <div class="col span-6">
-            <LabeledInput
-              v-model:value="valuesContentJson.image.tag"
-              :required="true"
-              :label="t('harvester.addons.nvidiaDriverToolkit.image.tag')"
-            />
-          </div>
-        </div>
-        <div class="row mb-15">
-          <div class="col span-12">
-            <LabeledInput
-              v-model:value="valuesContentJson.driverLocation"
-              :required="true"
-              :label="t('harvester.addons.nvidiaDriverToolkit.driver.location')"
-            />
-          </div>
-        </div>
-      </div>
-    </template>
-
-    <template #actions>
-      <div class="buttons actions">
-        <button
-          class="btn role-secondary mr-10"
-          @click="close"
-        >
-          {{ t('generic.cancel') }}
-        </button>
-
-        <AsyncButton
-          mode="enable"
-          :disabled="buttonDisabled"
-          @click="enable"
-        />
-      </div>
-    </template>
-  </Card>
-</template>
-
-<style lang="scss" scoped>
-.body {
-  display: flex;
-  flex-direction: column;
-  min-width: 400px;
-}
-
-.actions {
-  width: 100%;
-}
-
-.buttons {
-  display: flex;
-  justify-content: flex-end;
-  width: 100%;
-}
-</style>

pkg/harvester/edit/harvesterhci.io.host/HarvesterDisk.vue

@@ -71,38 +71,21 @@ export default {
   },
 
   data() {
+    let provisioner = `${ this.value.provisioner || LONGHORN_DRIVER }`;
+
+    if (provisioner === LONGHORN_DRIVER) {
+      provisioner = `${ provisioner }_${ this.value.provisionerVersion || LONGHORN_VERSION_V1 }`;
+    }
+
     return {
+      provisioner,
       volumeGroupDialog: null,
       randomStr:         randomStr(10).toLowerCase(),
-      isOpen:            false,
+      isOpen:            false
     };
   },
 
   computed: {
-    provisioner: {
-      get() {
-        let provisioner = `${ this.value?.provisioner || LONGHORN_DRIVER }`;
-
-        if (provisioner === LONGHORN_DRIVER) {
-          provisioner = `${ provisioner }_${ this.value?.provisionerVersion || LONGHORN_VERSION_V1 }`;
-        }
-
-        return provisioner;
-      },
-      set(value) {
-        this.randomStr = randomStr(10).toLowerCase();
-        const [provisioner, provisionerVersion] = (value || '').split('_');
-
-        this.value.provisioner = provisioner;
-
-        if (provisioner === LONGHORN_DRIVER) {
-          this.value.provisionerVersion = provisionerVersion || LONGHORN_VERSION_V1;
-        } else {
-          this.value.provisionerVersion = undefined;
-        }
-      },
-    },
-
     provisioners() {
       const out = [];
 
@@ -300,6 +283,20 @@ export default {
   },
 
   watch: {
+    provisioner(value) {
+      this.randomStr = randomStr(10).toLowerCase();
+
+      const [provisioner, provisionerVersion] = value?.split('_');
+
+      this.value.provisioner = provisioner;
+
+      if (provisioner === LONGHORN_DRIVER) {
+        this.value.provisionerVersion = provisionerVersion || LONGHORN_VERSION_V1;
+      } else {
+        this.value.provisionerVersion = undefined;
+      }
+    },
+
     'value.lvmVolumeGroup'(neu) {
       if (neu === _NEW) {
         this.value.lvmVolumeGroup = null;

pkg/harvester/edit/harvesterhci.io.keypair.vue

@@ -8,7 +8,6 @@ import FileSelector, { createOnSelected } from '@shell/components/form/FileSelec
 
 import { randomStr } from '@shell/utils/string';
 import CreateEditView from '@shell/mixins/create-edit-view';
-import { getLoginAwareErrors } from '../utils/error';
 
 export default {
   name: 'HarvesterEditKeypair',
@@ -64,14 +63,6 @@ export default {
     }
   },
 
-  computed: {
-    normalizedErrors() {
-      const message = this.t('harvester.virtualMachine.genericLoginError');
-
-      return getLoginAwareErrors(this.errors, message);
-    }
-  },
-
   methods: { onKeySelected: createOnSelected('publicKey') },
 };
 </script>
@@ -81,9 +72,10 @@ export default {
     :done-route="doneRoute"
     :resource="value"
     :mode="mode"
-    :errors="normalizedErrors"
+    :errors="errors"
     :apply-hooks="applyHooks"
     @finish="save"
+    @error="e=>errors=e"
   >
     <div class="header mb-20">
       <FileSelector

pkg/harvester/edit/harvesterhci.io.volume.vue

@@ -9,11 +9,8 @@ import { LabeledInput } from '@components/Form/LabeledInput';
 import NameNsDescription from '@shell/components/form/NameNsDescription';
 import Conditions from '@shell/components/form/Conditions';
 import { Banner } from '@components/Banner';
-import { Checkbox } from '@components/Form/Checkbox';
-import jsyaml from 'js-yaml';
-import { exceptionToErrorsArray } from '@shell/utils/error';
 import { allHash } from '@shell/utils/promise';
-import { clone, get } from '@shell/utils/object';
+import { get } from '@shell/utils/object';
 import { STORAGE_CLASS, LONGHORN, PV } from '@shell/config/types';
 import { sortBy } from '@shell/utils/sort';
 import { saferDump } from '@shell/utils/create-yaml';
@@ -36,7 +33,6 @@ export default {
 
   components: {
     Banner,
-    Checkbox,
     Tab,
     UnitInput,
     CruResource,
@@ -94,8 +90,6 @@ export default {
       source,
       storage,
       imageId,
-      showAdvanced:         false,
-      createWithDataVolume: false,
       snapshots: [],
       images:    [],
       GIBIBYTE
@@ -104,24 +98,6 @@ export default {
 
   created() {
     this.registerBeforeHook(this.willSave, 'willSave');
-
-    if (this.mode === _CREATE) {
-      const originalSaveYaml = this.value.saveYaml?.bind(this.value);
-
-      this.value.saveYaml = async(yaml) => {
-        if (this.createWithDataVolume && this.isBlank) {
-          const parsed = jsyaml.load(yaml);
-          const dvObj = { ...parsed, type: 'cdi.kubevirt.io.datavolume' };
-          const dataVolume = await this.$store.dispatch('harvester/create', dvObj);
-
-          await dataVolume.save();
-
-          return dataVolume;
-        }
-
-        return originalSaveYaml(yaml);
-      };
-    }
   },
 
   computed: {
@@ -159,10 +135,6 @@ export default {
       return Object.values(VOLUME_MODE);
     },
 
-    accessModeOptions() {
-      return ['ReadWriteOnce', 'ReadWriteMany', 'ReadOnlyMany'];
-    },
-
     imageOption() {
       return sortBy(
         this.images
@@ -303,10 +275,6 @@ export default {
       return this.$store.getters['harvester-common/getFeatureEnabled']('lhV2VolExpansion');
     },
 
-    isCreatePVCWithDataVolumeFeatureEnabled() {
-      return this.$store.getters['harvester-common/getFeatureEnabled']('createPVCWithDataVolume');
-    },
-
     isResizeDisabled() {
       return (
         !this.isLHV2VolExpansionFeatureEnabled &&
@@ -373,58 +341,6 @@ export default {
 
       return readWriteOnce ? ['ReadWriteOnce'] : ['ReadWriteMany'];
     },
-    buildDataVolumeObj() {
-      const storage = {
-        storageClassName: this.value.spec.storageClassName,
-        resources:        { requests: { storage: this.storage } },
-      };
-
-      if (this.showAdvanced && this.value.spec.accessModes?.length > 0) {
-        storage.accessModes = this.value.spec.accessModes;
-      }
-
-      if (this.showAdvanced && this.value.spec.volumeMode) {
-        storage.volumeMode = this.value.spec.volumeMode;
-      }
-
-      return {
-        type:       'cdi.kubevirt.io.datavolume',
-        apiVersion: 'cdi.kubevirt.io/v1beta1',
-        kind:       'DataVolume',
-        metadata:   {
-          name:        this.value.metadata.name,
-          namespace:   this.value.metadata.namespace,
-          annotations: this.value.metadata.annotations || {},
-          labels:      this.value.metadata.labels || {},
-        },
-        spec: {
-          source: { blank: {} },
-          storage,
-        }
-      };
-    },
-
-    async save(buttonDone) {
-      if (this.isCreate && this.isBlank && this.createWithDataVolume) {
-        try {
-          this.update();
-          const dvObj = this.buildDataVolumeObj();
-          const dataVolume = await this.$store.dispatch('harvester/create', dvObj);
-
-          await dataVolume.save();
-          buttonDone(true);
-          this.done();
-        } catch (err) {
-          const error = err?.data || err;
-
-          this['errors'] = exceptionToErrorsArray(error);
-          buttonDone(false);
-        }
-      } else {
-        await CreateEditView.methods.save.call(this, buttonDone);
-      }
-    },
-
     willSave() {
       this.update();
     },
@@ -467,17 +383,9 @@ export default {
       this.update();
     },
     generateYaml() {
-      this.update();
+      const out = saferDump(this.value);
 
-      if (this.isCreate && this.isBlank && this.createWithDataVolume) {
+      return out;
-        return saferDump(this.buildDataVolumeObj());
-      }
-
-      const plain = clone(this.value);
-
-      delete plain.saveYaml;
-
-      return saferDump(plain);
     },
   }
 };
@@ -550,6 +458,18 @@ export default {
           @update:value="update"
         />
 
+        <LabeledSelect
+          v-if="showVolumeMode"
+          v-model:value="value.spec.volumeMode"
+          :label="t('harvester.volume.volumeMode')"
+          :options="volumeModeOptions"
+          required
+          :disabled="!isCreate"
+          :mode="mode"
+          class="mb-20"
+          @update:value="update"
+        />
+
         <UnitInput
           v-model:value="storage"
           :label="t('harvester.volume.size')"
@@ -570,44 +490,6 @@ export default {
         >
           <span>{{ t('harvester.volume.longhorn.disableResize') }}</span>
         </Banner>
-
-        <div class="row mb-20">
-          <Checkbox
-            v-if="isCreate && isBlank && isCreatePVCWithDataVolumeFeatureEnabled"
-            v-model:value="createWithDataVolume"
-            :label="t('harvester.volume.createWithDataVolume')"
-            tooltip-key="harvester.volume.createWithDataVolumeTooltip"
-          />
-        </div>
-        <a
-          v-if="isCreate && isCreatePVCWithDataVolumeFeatureEnabled"
-          role="button"
-          class="hand"
-          @click="showAdvanced = !showAdvanced"
-        >
-          {{ showAdvanced ? t('harvester.volume.hideAdvanced') : t('harvester.volume.showAdvanced') }}
-        </a>
-
-        <LabeledSelect
-          v-if="showAdvanced"
-          v-model:value="value.spec.accessModes"
-          :label="t('harvester.volume.accessModes')"
-          :options="accessModeOptions"
-          :multiple="true"
-          :mode="mode"
-          class="mb-20 mt-20"
-          @update:value="update"
-        />
-
-        <LabeledSelect
-          v-if="showAdvanced"
-          v-model:value="value.spec.volumeMode"
-          :label="t('harvester.volume.volumeMode')"
-          :options="volumeModeOptions"
-          :mode="mode"
-          class="mb-20"
-          @update:value="update"
-        />
       </Tab>
       <Tab
         v-if="!isCreate"

pkg/harvester/edit/kubevirt.io.virtualmachine/VirtualMachinePciDevices/index.vue

@@ -243,9 +243,9 @@ export default {
           <Banner color="info">
             <MessageLink
               :to="toVGpuDevicesPage"
-              prefix-label="harvester.pci.howToUseDeviceInVMCreation.prefix"
+              prefix-label="harvester.pci.howToUseDevice.prefix"
-              middle-label="harvester.pci.howToUseDeviceInVMCreation.middle"
+              middle-label="harvester.pci.howToUseDevice.middle"
-              suffix-label="harvester.pci.howToUseDeviceInVMCreation.suffix"
+              suffix-label="harvester.pci.howToUseDevice.suffix"
             />
           </Banner>
           <Banner

pkg/harvester/edit/kubevirt.io.virtualmachine/VirtualMachineSSHKey.vue

@@ -10,7 +10,6 @@ import { _VIEW } from '@shell/config/query-params';
 
 import { NAMESPACE } from '@shell/config/types';
 import { HCI } from '../../types';
-import { getLoginAwareErrors } from '../../utils/error';
 
 const _NEW = '_NEW';
 
@@ -215,9 +214,7 @@ export default {
         buttonCb(true);
         this.cancel();
       } catch (err) {
-        const message = this.t('harvester.virtualMachine.genericLoginError');
+        this.errors = [err.message];
-
-        this.errors = getLoginAwareErrors(err, message);
         buttonCb(false);
       }
     },

pkg/harvester/edit/kubevirt.io.virtualmachine/VirtualMachineUSBDevices/DeviceList.vue

@@ -64,12 +64,6 @@ export default {
         value: 'status.productID',
         sort:  ['status.productID', 'status.vendorID']
       },
-      {
-        name:     'classType',
-        labelKey: 'harvester.usb.classType',
-        value:    'status.classType',
-        sort:     ['status.classType']
-      },
     ];
 
     if (!isSingleProduct) {

pkg/harvester/formatters/HarvesterBackupTargetValidation.vue

@@ -1,7 +1,6 @@
 <script>
 import { NORMAN } from '@shell/config/types';
 import { HCI } from '../types';
-import { getHarvesterUser } from '../utils/auth';
 
 export default {
   props: {
@@ -26,7 +25,7 @@ export default {
   },
 
   data() {
-    const user = getHarvesterUser(this.$store.getters);
+    const user = this.$store.getters['auth/v3User'];
 
     return {
       harvesterSettings:          [],

pkg/harvester/l10n/en-us.yaml

@@ -132,15 +132,6 @@ harvester:
         targetVolume:
           label: Target Volume
           placeholder: Select a target volume
-    dataMigration:
-      title: Data Migration
-      fields:
-        targetVolumeName:
-          label: Target Volume Name
-          placeholder: Enter a target volume name
-        targetStorageClassName:
-          label: Target Storage Class
-          placeholder: Select a storage class
     migration:
       failedMessage: Latest migration failed!
       title: Migration
@@ -252,7 +243,6 @@ harvester:
     abortMigration: Abort Migration
     storageMigration: Storage Migration
     cancelStorageMigration: Cancel Storage Migration
-    dataMigration: Data Migration
     createTemplate: Generate Template
     enableMaintenance: Enable Maintenance Mode
     disableMaintenance: Disable Maintenance Mode
@@ -376,14 +366,10 @@ harvester:
     available: Available Devices
     compatibleNodes: Compatible Nodes
     impossibleSelection: 'There are no hosts with all of the selected devices.'
-    howToUseDeviceInVMCreation: 
+    howToUseDevice: 
       prefix: 'Use the table below to enable PCI passthrough on each device you want to use in this virtual machine.<br>For vGPU devices, please enable them on the'
       middle: vGPU Devices 
       suffix: page first.
-    howToUseDevice: 
-      prefix: 'Select the device in the table to enable PCI passthrough. <br>For vGPU devices, please enable them on the'
-      middle: vGPU Devices
-      suffix: page.
     deviceInTheSameHost: 'You can only select devices on the same host.'
     oldFormatDevices:
       help: |-
@@ -726,7 +712,6 @@ harvester:
         other {Start}
       } Now
     createSSHKey: Create a New...
-    genericLoginError: Authentication failed. Please re-log in and try again.
     installAgent: Install guest agent
     enableUsb: Enable USB Tablet
     advancedOptions:
@@ -927,11 +912,6 @@ harvester:
       conditions: Conditions
     size: Size
     volumeMode: Volume Mode
-    accessModes: Access Modes
-    createWithDataVolume: Create with DataVolume
-    createWithDataVolumeTooltip: Create Volume with Kubevirt/Containerized Data Importer way. It can fill accessMode/volumeMode automatically.
-    showAdvanced: Show Advanced Options
-    hideAdvanced: Hide Advanced Options
     source: Source
     kind: Kind
     sourceOptions:
@@ -1286,13 +1266,6 @@ harvester:
     rancherCluster:
       kubeConfig: Rancher KubeConfig
       removeUpstreamClusterWhenNamespaceIsDeleted: Remove Upstream Cluster When Namespace Is Deleted
-    clusterPodSecurityStandard:
-      whitelistedNamespaces:
-        label: 'Whitelisted Namespaces'
-      privilegedNamespaces:
-        label: 'Privileged Namespaces'
-      restrictedNamespaces:
-        label: 'Restricted Namespaces'
     storageNetwork:
       range:
         placeholder: e.g. 172.16.0.0/24
@@ -1772,8 +1745,6 @@ harvester:
         repository: Image Repository
       driver:
         location: Driver Location
-      enable:
-        title: Enable NVIDIA Driver Toolkit
       parsingSpecError:
         The field 'spec.valuesContent' has invalid format.
     usbController:
@@ -1965,7 +1936,6 @@ harvester:
       title: Cannot Disable Passthrough
       message: Please detach the device from the VM and save it first before disabling passthrough.
     enablePassthroughWarning: 'Please re-enable the USB device if the device path changes in the following situations:<br/>&nbsp1) Re-plugging the USB device.<br/>&nbsp2) Rebooting the node.<br/><br/>An incorrect device path may cause passthrough to fail.'
-    classType: Class Type
 
   harvesterVlanConfigMigrateDialog:
     targetClusterNetwork:
@@ -2050,7 +2020,6 @@ advancedSettings:
     'harv-max-hotplug-ratio': 'The ratio for kubevirt to limit the maximum CPU and memory that can be hotplugged to a VM. The value could be an integer between 1 and 20, default to 4.'
     'harv-kubevirt-migration': 'Configure cluster-wide KubeVirt live migration parameters.'
     'harv-instance-manager-resources': 'Configure resource percentage reservations for Longhorn instance manager V1 and V2. Valid instance manager CPU range between 0 - 40.'
-    'harv-cluster-pod-security-standard': 'Enforce Kubernetes Pod Security Standards (PSS) at the cluster level.'
 
 typeLabel:
   kubevirt.io.virtualmachine: |-
@@ -2173,13 +2142,11 @@ typeLabel:
       one { PCI Device }
       other { PCI Devices }
     }
-
   persistentvolumeclaim: |-
     {count, plural,
       one { Volume }
       other { Volumes }
     }
-
   network.harvesterhci.io.clusternetwork: |-
     {count, plural,
       one { Cluster Network }

pkg/harvester/list/devices.harvesterhci.io.pcidevice.vue

@@ -60,17 +60,6 @@ export default {
       return schema;
     },
 
-    toVGpuDevicesPage() {
-      return {
-        name:   'harvester-c-cluster-resource',
-        params: { cluster: this.$store.getters['clusterId'], resource: HCI.VGPU_DEVICE },
-      };
-    },
-
-    vGPUAsPCIDeviceEnabled() {
-      return this.$store.getters['harvester-common/getFeatureEnabled']('vGPUAsPCIDevice');
-    },
-
     rows() {
       const inStore = this.$store.getters['currentProduct'].inStore;
       const rows = this.$store.getters[`${ inStore }/all`](HCI.PCI_DEVICE);
@@ -96,23 +85,11 @@ export default {
       {{ t('harvester.pci.noPCIPermission') }}
     </Banner>
   </div>
-  <div v-else-if="hasSchema && enabledPCI">
-    <Banner
-      v-if="vGPUAsPCIDeviceEnabled"
-      color="info"
-    >
-      <MessageLink
-        :to="toVGpuDevicesPage"
-        prefix-label="harvester.pci.howToUseDevice.prefix"
-        middle-label="harvester.pci.howToUseDevice.middle"
-        suffix-label="harvester.pci.howToUseDevice.suffix"
-      />
-    </Banner>
   <DeviceList
+    v-else-if="hasSchema && enabledPCI"
     :devices="rows"
     :schema="schema"
   />
-  </div>
   <div v-else>
     <Banner color="warning">
       <MessageLink

pkg/harvester/list/harvesterhci.io.networkattachmentdefinition.vue

@@ -3,6 +3,7 @@ import { Banner } from '@components/Banner';
 import Loading from '@shell/components/Loading';
 import ResourceTable from '@shell/components/ResourceTable';
 import BadgeState from '@shell/components/formatter/BadgeStateFormatter';
+
 import { NAME, AGE, NAMESPACE, STATE } from '@shell/config/table-headers';
 import { NETWORK_ATTACHMENT, SCHEMA } from '@shell/config/types';
 import { allHash } from '@shell/utils/promise';

pkg/harvester/list/harvesterhci.io.volume.vue

@@ -70,13 +70,8 @@ export default {
       return schema;
     },
     filterRows() {
-      return this.rows.filter((pvc) => {
+      // we only show the non golden image PVCs in the list
-        if (pvc?.isGoldenImageVolume || pvc?.isCDIPopulatorVolume) {
+      return this.rows.filter((pvc) => !pvc?.isGoldenImageVolume);
-          return false;
-        }
-
-        return true;
-      });
     },
     headers() {
       return [

pkg/harvester/list/kubevirt.io.virtualmachine.vue

@@ -12,11 +12,6 @@ import { HCI } from '../types';
 import HarvesterVmState from '../formatters/HarvesterVmState';
 import ConsoleBar from '../components/VMConsoleBar';
 
-const ENCRYPTED_VOLUME_TOOLTIP_KEYS = {
-  all:     'harvester.virtualMachine.volume.lockTooltip.all',
-  partial: 'harvester.virtualMachine.volume.lockTooltip.partial',
-};
-
 export const VM_HEADERS = [
   STATE,
   {
@@ -168,12 +163,6 @@ export default {
      */
     hasBackUpRestoreInProgress() {
       return !!this.rows.find((r) => r.restoreResource && !r.restoreResource.fromSnapshot && !r.restoreResource.isComplete);
-    },
-
-    vmRestartRequiredNames() {
-      return this.allVMs
-        .filter((vm) => vm.isRestartRequired)
-        .map((vm) => vm.metadata.name);
     }
   },
 
@@ -192,7 +181,15 @@ export default {
   },
 
   watch: {
-    vmRestartRequiredNames(vmNames) {
+    allVMs: {
+      handler(neu) {
+        const vmNames = [];
+
+        neu.forEach((vm) => {
+          if (vm.isRestartRequired) {
+            vmNames.push(vm.metadata.name);
+          }
+        });
         const count = vmNames.length;
 
         if ( count === 0 && this.restartNotificationDisplayed) {
@@ -206,7 +203,9 @@ export default {
           if (this.restartNotificationDisplayed) {
             this.$store.dispatch('growl/clear');
           }
+        }
 
+        if (count > 0 && vmNames.length > 0) {
           this.$store.dispatch('growl/warning', {
             title:   this.t('harvester.notification.restartRequired.title', { count }),
             message: this.t('harvester.notification.restartRequired.message', { vmNames: vmNames.join(', ') }),
@@ -214,13 +213,21 @@ export default {
           }, { root: true });
           this.restartNotificationDisplayed = true;
         }
+      },
+      deep: true,
     }
   },
   methods: {
     lockIconTooltipMessage(row) {
-      const key = ENCRYPTED_VOLUME_TOOLTIP_KEYS[row.encryptedVolumeType];
+      const message = '';
 
-      return key ? this.t(key) : '';
+      if (row.encryptedVolumeType === 'all') {
+        return this.t('harvester.virtualMachine.volume.lockTooltip.all');
+      } else if (row.encryptedVolumeType === 'partial') {
+        return this.t('harvester.virtualMachine.volume.lockTooltip.partial');
+      }
+
+      return message;
     }
   }
 };
@@ -260,7 +267,7 @@ export default {
           >
             {{ scope.row.metadata.name }}
             <i
-              v-if="scope.row.encryptedVolumeType !== 'none'"
+              v-if="lockIconTooltipMessage(scope.row)"
               v-tooltip="lockIconTooltipMessage(scope.row)"
               class="icon icon-lock"
               :class="{'green-icon': scope.row.encryptedVolumeType === 'all', 'yellow-icon': scope.row.encryptedVolumeType === 'partial'}"

pkg/harvester/models/devices.harvesterhci.io.pcidevice.js

@@ -2,7 +2,6 @@ import SteveModel from '@shell/plugins/steve/steve-class';
 import { escapeHtml } from '@shell/utils/string';
 import { HCI } from '../types';
 import { HCI as HCI_ANNOTATIONS } from '@pkg/harvester/config/labels-annotations';
-import { getHarvesterUserName } from '../utils/auth';
 
 const STATUS_DISPLAY = {
   enabled: {
@@ -30,12 +29,11 @@ const STATUS_DISPLAY = {
 export default class PCIDevice extends SteveModel {
   get _availableActions() {
     const out = super._availableActions;
-    const canUpdate = !!this.linkFor('update');
 
     out.push(
       {
         action:     'enablePassthroughBulk',
-        enabled:    !this.isEnabling && !this.isvGPUDevice && canUpdate,
+        enabled:    !this.isEnabling && !this.isvGPUDevice,
         icon:       'icon icon-fw icon-dot',
         label:      'Enable Passthrough',
         bulkable:   true,
@@ -44,7 +42,7 @@ export default class PCIDevice extends SteveModel {
       },
       {
         action:   'disablePassthrough',
-        enabled:  this.isEnabling && this.claimedByMe && !this.isvGPUDevice && canUpdate,
+        enabled:  this.isEnabling && this.claimedByMe && !this.isvGPUDevice,
         icon:     'icon icon-fw icon-dot-open',
         label:    'Disable Passthrough',
         bulkable: true,
@@ -98,8 +96,15 @@ export default class PCIDevice extends SteveModel {
     if (!this.passthroughClaim) {
       return false;
     }
+    const isSingleProduct = this.$rootGetters['isSingleProduct'];
+    let userName = 'admin';
 
-    const userName = getHarvesterUserName(this.$rootGetters);
+    // if this is imported Harvester, there may be users other than admin
+    if (!isSingleProduct) {
+      const user = this.$rootGetters['auth/v3User'];
+
+      userName = user?.username || user?.id;
+    }
 
     return this.claimedBy === userName;
   }

pkg/harvester/models/devices.harvesterhci.io.usbdevice.js

@@ -1,7 +1,6 @@
 import SteveModel from '@shell/plugins/steve/steve-class';
 import { escapeHtml } from '@shell/utils/string';
 import { HCI } from '../types';
-import { getHarvesterUserName } from '../utils/auth';
 
 const STATUS_DISPLAY = {
   enabled: {
@@ -88,8 +87,15 @@ export default class USBDevice extends SteveModel {
     if (!this.passthroughClaim) {
       return false;
     }
+    const isSingleProduct = this.$rootGetters['isSingleProduct'];
+    let userName = 'admin';
 
-    const userName = getHarvesterUserName(this.$rootGetters);
+    // if this is imported Harvester, there may be users other than admin
+    if (!isSingleProduct) {
+      const user = this.$rootGetters['auth/v3User'];
+
+      userName = user?.username || user?.id;
+    }
 
     return this.claimedBy === userName;
   }

pkg/harvester/models/harvester/namespace.js

@@ -24,7 +24,7 @@ const OBSCURE_NAMESPACE_PREFIX = [
 
 export default class HciNamespace extends namespace {
   get _availableActions() {
-    let out = super._availableActions;
+    const out = super._availableActions;
     const remove = out.findIndex((a) => a.action === 'promptRemove');
 
     const promptRemove = {
@@ -53,16 +53,6 @@ export default class HciNamespace extends namespace {
     insertAt(out, out.length - 1, promptRemove);
     insertAt(out, out.length - 5, editQuotaAction);
 
-    const canUpdate = !!this.linkFor('update');
-
-    out = out.map((action) => {
-      if (['move'].includes(action.action)) {
-        return { ...action, enabled: action.enabled && canUpdate };
-      }
-
-      return action;
-    });
-
     return out;
   }
 

pkg/harvester/models/harvester/persistentvolumeclaim.js

@@ -9,7 +9,6 @@ import { colorForState } from '@shell/plugins/dashboard-store/resource-class';
 import { HCI, VOLUME_SNAPSHOT } from '../../types';
 import HarvesterResource from '../harvester';
 import { PRODUCT_NAME as HARVESTER_PRODUCT } from '../../config/harvester';
-import { CDI_POPULATOR_KIND } from '../../config/types';
 import { LVM_DRIVER } from './storage.k8s.io.storageclass';
 
 const DEGRADED_ERRORS = ['replica scheduling failed', 'precheck new replica failed'];
@@ -45,7 +44,7 @@ export default class HciPv extends HarvesterResource {
     const exportImageAction = {
       action:  'exportImage',
       enabled: this.hasAction('export') && !this.isEncrypted,
-      icon:    'icon icon-external-link',
+      icon:    'icon icon-copy',
       label:   this.t('harvester.action.exportImage')
     };
     const takeSnapshotAction = {
@@ -78,23 +77,10 @@ export default class HciPv extends HarvesterResource {
         icon:    'icon icon-backup',
         label:   this.t('harvester.action.cancelExpand')
       },
-      {
-        action:  'dataMigration',
-        enabled: this.hasAction('dataMigration') && this.createPVCWithDataVolumeFeatureEnabled,
-        icon:    'icon icon-copy',
-        label:   this.t('harvester.action.dataMigration')
-      },
       ...out
     ];
   }
 
-  dataMigration(resources = this) {
-    this.$dispatch('promptModal', {
-      resources,
-      component: 'HarvesterDataMigrationDialog'
-    });
-  }
-
   exportImage(resources = this) {
     this.$dispatch('promptModal', {
       resources,
@@ -353,20 +339,10 @@ export default class HciPv extends HarvesterResource {
     return this?.metadata?.annotations?.[HCI_ANNOTATIONS.GOLDEN_IMAGE] === 'true';
   }
 
-  get isCDIPopulatorVolume() {
-    const kind = this?.metadata?.annotations?.[HCI_ANNOTATIONS.CDI_POPULATOR_KIND];
-
-    return kind === CDI_POPULATOR_KIND.VOLUME_IMPORT_SOURCE || kind === CDI_POPULATOR_KIND.VOLUME_CLONE_SOURCE;
-  }
-
   get thirdPartyStorageFeatureEnabled() {
     return this.$rootGetters['harvester-common/getFeatureEnabled']('thirdPartyStorage');
   }
 
-  get createPVCWithDataVolumeFeatureEnabled() {
-    return this.$rootGetters['harvester-common/getFeatureEnabled']('createPVCWithDataVolume');
-  }
-
   get resourceExternalLink() {
     const host = window.location.host;
     const { params } = this.currentRoute();

pkg/harvester/models/harvester/secret.js

@@ -5,20 +5,6 @@ import Secret from '@shell/models/secret';
 import { NAMESPACE } from '@shell/config/types';
 
 export default class HciSecret extends Secret {
-  get _availableActions() {
-    let out = super._availableActions;
-
-    out = out.map((action) => {
-      if (['download'].includes(action.action)) {
-        return { ...action, enabled: !!this.linkFor('update') };
-      }
-
-      return action;
-    });
-
-    return out;
-  }
-
   // prevent harvester secret detail page be overridden.
   // See isFullPageOverride in https://github.com/rancher/dashboard/blob/master/shell/components/ResourceDetail/index.vue
   get fullDetailPageOverride() {

pkg/harvester/models/harvester/storage.k8s.io.storageclass.js

@@ -106,15 +106,6 @@ export default class HciStorageClass extends StorageClass {
 
   get availableActions() {
     let out = super.availableActions || [];
-    const canUpdate = !!this.linkFor('update');
-
-    out = out.map((action) => {
-      if (['setDefault', 'setAsDefault', 'resetDefault'].includes(action.action)) {
-        return { ...action, enabled: canUpdate };
-      }
-
-      return action;
-    });
 
     if (this.isInternalStorageClass()) {
       out = out.filter((action) => {

pkg/harvester/models/harvesterhci.io.addon.js

@@ -4,8 +4,6 @@ import { HCI as HCI_ANNOTATIONS } from '../config/labels-annotations';
 import HarvesterResource from './harvester';
 import { HCI } from '../types';
 
-const HARVESTER_NVIDIA_DRIVER_TOOLKIT = 'harvester-system/nvidia-driver-toolkit';
-
 export default class HciAddonConfig extends HarvesterResource {
   get availableActions() {
     const out = super._availableActions;
@@ -21,10 +19,9 @@ export default class HciAddonConfig extends HarvesterResource {
       out.push(rancherDashboard);
     }
 
-    const canUpdate = !!this.linkFor('update');
     const toggleAddon = {
       action:  'toggleAddon',
-      enabled: canUpdate,
+      enabled: true,
       icon:    this.spec.enabled ? 'icon icon-pause' : 'icon icon-play',
       label:   this.spec.enabled ? this.t('generic.disable') : this.t('generic.enable'),
     };
@@ -48,15 +45,6 @@ export default class HciAddonConfig extends HarvesterResource {
         }
       }
 
-      if (!this.spec.enabled && this.id === HARVESTER_NVIDIA_DRIVER_TOOLKIT) {
-        this.$dispatch('promptModal', {
-          resources:  [this],
-          component:  'HarvesterEnableNvidiaDriverToolkit',
-        });
-
-        return;
-      }
-
       this.spec.enabled = !this.spec.enabled;
       await this.save();
     } catch (err) {

pkg/harvester/models/harvesterhci.io.keypair.js

@@ -3,20 +3,6 @@ import { findBy } from '@shell/utils/array';
 import HarvesterResource from './harvester';
 
 export default class HciKeypair extends HarvesterResource {
-  get _availableActions() {
-    let out = super._availableActions;
-
-    out = out.map((action) => {
-      if (['download'].includes(action.action)) {
-        return { ...action, enabled: !!this.linkFor('update') };
-      }
-
-      return action;
-    });
-
-    return out;
-  }
-
   get stateDisplay() {
     const conditions = get(this, 'status.conditions');
     const status = (findBy(conditions, 'type', 'validated') || {}).status ;

pkg/harvester/models/harvesterhci.io.schedulevmbackup.js

@@ -19,18 +19,16 @@ export default class ScheduleVmBackup extends HarvesterResource {
       }
     });
 
-    const canUpdate = !!this.linkFor('update');
-
     return [
       {
         action:  'resumeSchedule',
-        enabled: canUpdate && ucFirst(this.state) === STATES.suspended.label,
+        enabled: ucFirst(this.state) === STATES.suspended.label,
         icon:    'icons icon-play',
         label:   this.t('harvester.action.resumeSchedule'),
       },
       {
         action:  'suspendSchedule',
-        enabled: canUpdate && ucFirst(this.state) === STATES.active.label,
+        enabled: ucFirst(this.state) === STATES.active.label,
         icon:    'icons icon-pause',
         label:   this.t('harvester.action.suspendSchedule'),
       },

pkg/harvester/models/harvesterhci.io.virtualmachineimage.js

@@ -39,6 +39,9 @@ function isReady() {
 export default class HciVmImage extends HarvesterResource {
   get availableActions() {
     let out = super._availableActions;
+    const toFilter = ['goToEditYaml'];
+
+    out = out.filter( (A) => !toFilter.includes(A.action));
 
     // show `Clone` only when imageSource is `download`
     if (this.imageSource !== 'download') {
@@ -52,7 +55,6 @@ export default class HciVmImage extends HarvesterResource {
       canCreateVM = false;
     }
 
-    const canCreateImage = !!this.$getters?.['schemaFor']?.(HCI.IMAGE)?.collectionMethods?.some((method) => method.toLowerCase() === 'post');
     const customActions = this.isReady ? [
       {
         action:  'createFromImage',
@@ -62,13 +64,13 @@ export default class HciVmImage extends HarvesterResource {
       },
       {
         action:  'encryptImage',
-        enabled: this.volumeEncryptionFeatureEnabled && !this.isEncrypted && canCreateImage,
+        enabled: this.volumeEncryptionFeatureEnabled && !this.isEncrypted,
         icon:    'icon icon-lock',
         label:   this.t('harvester.action.encryptImage'),
       },
       {
         action:  'decryptImage',
-        enabled: this.volumeEncryptionFeatureEnabled && this.isEncrypted && canCreateImage,
+        enabled: this.volumeEncryptionFeatureEnabled && this.isEncrypted,
         icon:    'icon icon-unlock',
         label:   this.t('harvester.action.decryptImage'),
       },

pkg/harvester/models/kubevirt.io.virtualmachine.js

@@ -83,42 +83,6 @@ const VMIPhase = {
 
 let productInStore;
 
-let _podOwnerMap = null;
-let _podOwnerMapSource = null;
-
-function getPodByOwnerName(rootGetters, inStore, ownerName) {
-  const podList = rootGetters[`${ inStore }/all`](POD);
-
-  if (!Array.isArray(podList)) {
-    return undefined;
-  }
-  // if not equals (usually means the pod list has been updated), we need to rebuild the map, otherwise we can reuse the map for better performance
-  if (_podOwnerMapSource !== podList) {
-    _podOwnerMap = new Map(); // use Map to store ownerReference name and pod mapping
-    for (const pod of podList) {
-      const refName = pod.metadata?.ownerReferences?.[0]?.name;
-
-      if (refName) {
-        _podOwnerMap.set(refName, pod);
-      }
-    }
-    _podOwnerMapSource = podList;
-  }
-
-  return _podOwnerMap.get(ownerName);
-}
-
-function getPvcsByNames(rootGetters, inStore, names) {
-  const pvcList = rootGetters[`${ inStore }/all`](PVC);
-
-  if (!Array.isArray(pvcList)) {
-    return [];
-  }
-  const uniqueNames = new Set(names);
-
-  return pvcList.filter((pvc) => uniqueNames.has(pvc.metadata?.name));
-}
-
 const IgnoreMessages = ['pod has unbound immediate PersistentVolumeClaims'];
 
 export default class VirtVm extends HarvesterResource {
@@ -130,8 +94,6 @@ export default class VirtVm extends HarvesterResource {
       clone.action = 'goToCloneVM';
     }
 
-    const canCreateVMSSchedule = !!this.$getters?.['schemaFor']?.(HCI.SCHEDULE_VM_BACKUP)?.collectionMethods?.find((x) => ['post'].includes(x.toLowerCase()));
-
     return [
       {
         action:     'stopVM',
@@ -209,7 +171,7 @@ export default class VirtVm extends HarvesterResource {
       },
       {
         action:  'createSchedule',
-        enabled:  canCreateVMSSchedule && this.schedulingVMBackupFeatureEnabled,
+        enabled: this.schedulingVMBackupFeatureEnabled,
         icon:    'icon icon-history',
         label:   this.t('harvester.action.createSchedule')
       },
@@ -698,13 +660,16 @@ export default class VirtVm extends HarvesterResource {
 
   get podResource() {
     const inStore = this.productInStore;
+
     const vmiResource = this.$rootGetters[`${ inStore }/byId`](HCI.VMI, this.id);
+    const podList = this.$rootGetters[`${ inStore }/all`](POD);
 
-    if (!vmiResource?.metadata?.name) {
+    return podList.find((P) => {
-      return undefined;
+      return (
-    }
+        vmiResource?.metadata?.name &&
-
+        vmiResource?.metadata?.name === P.metadata?.ownerReferences?.[0].name
-    return getPodByOwnerName(this.$rootGetters, inStore, vmiResource.metadata.name);
+      );
+    });
   }
 
   get isPaused() {
@@ -745,13 +710,17 @@ export default class VirtVm extends HarvesterResource {
   get vmi() {
     const inStore = this.productInStore;
 
-    return this.$rootGetters[`${ inStore }/byId`](HCI.VMI, this.id);
+    const vmis = this.$rootGetters[`${ inStore }/all`](HCI.VMI);
+
+    return vmis.find((VMI) => VMI.id === this.id);
   }
 
   get volumes() {
+    const pvcs = this.$rootGetters[`${ this.productInStore }/all`](PVC);
+
     const volumeClaimNames = this.spec.template.spec.volumes?.map((v) => v.persistentVolumeClaim?.claimName).filter((v) => !!v) || [];
 
-    return getPvcsByNames(this.$rootGetters, this.productInStore, volumeClaimNames);
+    return pvcs.filter((pvc) => volumeClaimNames.includes(pvc.metadata.name));
   }
 
   get lvmVolumes() {
@@ -784,6 +753,17 @@ export default class VirtVm extends HarvesterResource {
       return { status: 'VMI error', detailedMessage: vmiFailureCond.message };
     }
 
+    if ((this.vmi || this.isVMCreated) && this.podResource) {
+      // const podStatus = this.podResource.getPodStatus;
+      // if (POD_STATUS_ALL_ERROR.includes(podStatus?.status)) {
+      //   return {
+      //     ...podStatus,
+      //     status: 'LAUNCHER_POD_ERROR',
+      //     pod:    this.podResource,
+      //   };
+      // }
+    }
+
     return this?.vmi?.status?.phase;
   }
 
@@ -921,7 +901,9 @@ export default class VirtVm extends HarvesterResource {
 
     const inStore = this.productInStore;
 
-    const res = this.$rootGetters[`${ inStore }/byId`](HCI.RESTORE, id);
+    const allRestore = this.$rootGetters[`${ inStore }/all`](HCI.RESTORE);
+
+    const res = allRestore.find((O) => O.id === id);
 
     if (res) {
       const allBackups = this.$rootGetters[`${ inStore }/all`](HCI.BACKUP);
@@ -1091,6 +1073,42 @@ export default class VirtVm extends HarvesterResource {
     return out;
   }
 
+  get warningCount() {
+    return this.resourcesStatus.warningCount;
+  }
+
+  get errorCount() {
+    return this.resourcesStatus.errorCount;
+  }
+
+  get resourcesStatus() {
+    const inStore = this.productInStore;
+    const vmList = this.$rootGetters[`${ inStore }/all`](HCI.VM);
+    let warningCount = 0;
+    let errorCount = 0;
+
+    vmList.forEach((vm) => {
+      const status = vm.actualState;
+
+      if (status === VM_ERROR) {
+        errorCount += 1;
+      } else if (
+        status === 'Stopping' ||
+        status === 'Waiting' ||
+        status === 'Pending' ||
+        status === 'Starting' ||
+        status === 'Terminating'
+      ) {
+        warningCount += 1;
+      }
+    });
+
+    return {
+      warningCount,
+      errorCount
+    };
+  }
+
   get volumeClaimTemplates() {
     return parseVolumeClaimTemplates(this);
   }
@@ -1108,6 +1126,7 @@ export default class VirtVm extends HarvesterResource {
   get rootImageId() {
     let imageId = '';
     const inStore = this.productInStore;
+    const pvcs = this.$rootGetters[`${ inStore }/all`](PVC) || [];
 
     const volumes = this.spec.template.spec.volumes || [];
 
@@ -1117,7 +1136,9 @@ export default class VirtVm extends HarvesterResource {
     });
 
     if (!isNoExistingVolume) {
-      const existingVolume = this.$rootGetters[`${ inStore }/byId`](PVC, `${ this.metadata.namespace }/${ firstVolumeName }`);
+      const existingVolume = pvcs.find(
+        (P) => P.id === `${ this.metadata.namespace }/${ firstVolumeName }`
+      );
 
       if (existingVolume) {
         return existingVolume?.metadata?.annotations?.[
@@ -1295,7 +1316,8 @@ export default class VirtVm extends HarvesterResource {
   }
 
   get isBackupTargetUnavailable() {
-    const backupTargetSetting = this.$rootGetters['harvester/byId'](HCI.SETTING, 'backup-target');
+    const allSettings = this.$rootGetters['harvester/all'](HCI.SETTING) || [];
+    const backupTargetSetting = allSettings.find( (O) => O.id === 'backup-target');
 
     return isBackupTargetSettingUnavailable(backupTargetSetting);
   }

pkg/harvester/models/management.cattle.io.project.js

@@ -1,19 +0,0 @@
-
-import shellProject from '@shell/models/management.cattle.io.project';
-
-// This model controls `Project / Namespace` page in rancher integration mode
-// Extend management.cattle.io.project model from shell
-export default class Project extends shellProject {
-  get _availableActions() {
-    const canUpdate = !!this.linkFor('update');
-
-    // disable `Edit Config` action if user does not have update permission.
-    return super._availableActions.map((action) => {
-      if (action.action === 'goToEdit') {
-        return { ...action, enabled: canUpdate };
-      }
-
-      return action;
-    });
-  }
-}

pkg/harvester/models/network.harvesterhci.io.vlanconfig.js

@@ -57,11 +57,7 @@ export default class HciVlanConfig extends HarvesterResource {
   get _availableActions() {
     const out = super._availableActions;
 
-    const canMigrate = !!this.$getters?.['schemaFor']?.(HCI.VLAN_CONFIG)?.collectionMethods?.find((x) => ['post'].includes(x.toLowerCase()));
-
-    if (canMigrate) {
     insertAt(out, 0, this.migrateAction);
-    }
 
     return out;
   }

pkg/harvester/package.json

@@ -1,7 +1,7 @@
 {
   "name": "harvester",
   "description": "Rancher UI Extension for Harvester",
-  "version": "1.9.0-dev",
+  "version": "1.8.0-rc2",
   "private": false,
   "rancher": {
     "annotations": {
@@ -17,12 +17,12 @@
     "nuxt": "./node_modules/.bin/nuxt"
   },
   "engines": {
-    "node": ">=24.0.0"
+    "node": ">=20.0.0"
   },
   "devDependencies": {
-    "@vue/cli-plugin-babel": "~5.0.9",
+    "@vue/cli-plugin-babel": "~5.0.0",
-    "@vue/cli-service": "~5.0.9",
+    "@vue/cli-service": "~5.0.0",
-    "@vue/cli-plugin-typescript": "~5.0.9"
+    "@vue/cli-plugin-typescript": "~5.0.0"
   },
   "browserslist": [
     "> 1%",

pkg/harvester/store/harvester-store/getters.ts

@@ -123,26 +123,5 @@ export default {
     const clusterId = currentCluster.id;
 
     return projectsInAllClusters.filter((project: any) => project.spec.clusterName === clusterId && project.nameDisplay !== 'System');
-  },
-
-  // Few harvester resources name and REAL resource are different. E.g. HCI.NETWORK_ATTACHMENT page resource is NETWORK_ATTACHMENT.
-  // Check in config/harvester-cluster.js for more details.
-  // We need to look up the schema by resource name, and fallback to find using real resource name
-  schemaFor: (state, getters, rootState, rootGetters) => (type, _fuzzy = false, _allowThrow = true) => {
-    // follow the same logic as type-map/schemaFor in /dashboard/shell/plugins/dashboard-store/getters.js
-    const normalizedType = getters.normalizeType(type);
-    const schemas = state.types['schema'];
-    const out = schemas?.map?.get(normalizedType);
-
-    if (out) return out;
-
-    // if not found, use the resource mapping in configureType for a second try
-    const resourceType = rootGetters['type-map/optionsFor'](type)?.resource;
-    if (resourceType && resourceType !== type) {
-      const normalizedResource = getters.normalizeType(resourceType);
-      return schemas?.map?.get(normalizedResource) || null;
   }
-
-    return null;
-  },
 };

pkg/harvester/utils/auth.js

@@ -1,31 +0,0 @@
-/**
- * Resolve the Harvester username from Vuex getters.
- *
- * Works with both `this.$store.getters` (in components) and
- * `this.$rootGetters` (in Steve models).
- *
- * - In single-product (standalone Harvester) mode, always returns the
- *   default username (`admin`).
- * - Otherwise, falls back to the authenticated user's `username` or `id`.
- */
-export function getHarvesterUserName(getters, defaultUserName = 'admin') {
-  const isSingleProduct = getters?.['isSingleProduct'];
-
-  if (isSingleProduct) {
-    return defaultUserName;
-  }
-
-  const user = getHarvesterUser(getters);
-
-  return user?.username || user?.id || defaultUserName;
-}
-
-/**
- * Return the authenticated user object from Vuex getters.
- *
- * Works with both `this.$store.getters` (in components) and
- * `this.$rootGetters` (in Steve models).
- */
-export function getHarvesterUser(getters) {
-  return getters?.['auth/user'];
-}

pkg/harvester/utils/error.js

@@ -1,21 +0,0 @@
-const AUTH_ERROR_CODES = [401, 403, 404];
-
-export function getLoginAwareErrors(err, message = '') {
-  const errors = Array.isArray(err) ? err : (err ? [err] : []);
-
-  if (!errors.length) {
-    return [];
-  }
-
-  const generic = message;
-
-  if (errors.some((e) => AUTH_ERROR_CODES.includes(e?._status || e?.response?.status))) {
-    return [generic];
-  }
-
-  const msgs = errors
-    .map((e) => (typeof e === 'string' ? e : (e?.message || e?._statusText || '')))
-    .filter(Boolean);
-
-  return msgs.length ? msgs : [generic];
-}

scripts/build-embedded

@@ -27,6 +27,23 @@ OUTPUT_DIR=dist/${DIR}-embedded
 echo "Building..."
 COMMIT=${COMMIT} VERSION=${VERSION} OUTPUT_DIR=$OUTPUT_DIR ROUTER_BASE='/dashboard/' RESOURCE_BASE='/dashboard/' RANCHER_ENV=harvester yarn run build
 
+if [ -v EMBED_PKG ]; then
+    echo "Build and embed plugin from: $EMBED_PKG"
+    PKG_FILE_NAME=${EMBED_PKG##*/}
+    echo PKG_FILE_NAME: $PKG_FILE_NAME
+
+    PKG_NAME="${PKG_FILE_NAME/.tar.gz/""}"
+    echo "Plugin name: '$PKG_NAME'"
+
+    # Fetch file, unpack and move to dist
+    curl $EMBED_PKG --output $PKG_FILE_NAME
+    OUTPUT_DIR_PKG=$OUTPUT_DIR/$PKG_NAME
+    mkdir -p $OUTPUT_DIR_PKG
+    tar xvfz $PKG_FILE_NAME -C $OUTPUT_DIR/$PKG_NAME
+    echo "Plugin contents that will be served from $PKG_NAME"
+    ls -alR $OUTPUT_DIR/$PKG_NAME
+fi
+
 echo "Destroying..."
 find $OUTPUT_DIR -name "index.html" -mindepth 2 -exec rm {} \;
 find $OUTPUT_DIR -type d -empty -depth -exec rmdir {} \;

scripts/bump_version.sh

@@ -1,40 +0,0 @@
-#!/bin/bash
-set -e
-# Usage: update package.json and pkg/harvester/package.json to desired version
-# Example: ./scripts/bump_version.sh v1.8.0-rc3
-
-VERSION="$1"
-
-if [ -z "$VERSION" ]; then
-  echo "Usage: $0 <version>"
-  echo "Example: $0 v1.8.0-rc3"
-  exit 1
-fi
-
-# Strip leading 'v' if present
-VERSION="${VERSION#v}"
-
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-ROOT_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
-
-FILES=(
-  "$ROOT_DIR/package.json"
-  "$ROOT_DIR/pkg/harvester/package.json"
-)
-
-for FILE in "${FILES[@]}"; do
-  if [ ! -f "$FILE" ]; then
-    echo "File not found: $FILE"
-    exit 1
-  fi
-
-  # Use node to update version in-place while preserving formatting
-  node -e "
-    const fs = require('fs');
-    const raw = fs.readFileSync('$FILE', 'utf8');
-    const updated = raw.replace(/\"version\":\s*\"[^\"]*\"/, '\"version\": \"$VERSION\"');
-    fs.writeFileSync('$FILE', updated);
-  "
-
-  echo "Updated $FILE -> $VERSION"
-done

scripts/generate-agent-and-persona-mds.sh

@@ -1,44 +0,0 @@
-#!/bin/bash
-set -e
-
-# Get the directory of the script
-SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
-# Project root is one level up from scripts/
-PROJECT_ROOT="$(dirname "$SCRIPT_DIR")"
-
-# Source files
-TEMPLATE_FILE="${PROJECT_ROOT}/docs/agents.md/template_agents.md"
-AGENTS_DIR="${PROJECT_ROOT}/docs/agents.md/agents"
-CONTRIBUTORS_DIR="${PROJECT_ROOT}/docs/agents.md/contributors"
-PERSONAS_DIR="${PROJECT_ROOT}/docs/agents.md/personas"
-
-# Destination file
-OUTPUT_FILE="${PROJECT_ROOT}/AGENTS.md"
-
-insert_directory_contents() {
-    local dir="$1"
-    if [ -d "$dir" ]; then
-        for file in "$dir"/*; do
-            if [ -f "$file" ]; then
-                cat "$file"
-                echo ""
-            fi
-        done
-    fi
-}
-
-echo "Generating ${OUTPUT_FILE}..."
-
-while IFS= read -r line || [ -n "$line" ]; do
-    if [[ "$line" == *"<agents>"* ]]; then
-        insert_directory_contents "${AGENTS_DIR}"
-    elif [[ "$line" == *"<contributors>"* ]]; then
-        insert_directory_contents "${CONTRIBUTORS_DIR}"
-    elif [[ "$line" == *"<personas>"* ]]; then
-        insert_directory_contents "${PERSONAS_DIR}"
-    else
-        echo "$line"
-    fi
-done < "${TEMPLATE_FILE}" > "${OUTPUT_FILE}"
-
-echo "Done."