EPIC-4 Slice R bundle layered on the K+P+X1+G backend (#1164):
- R1 ResourceDetailPage with 7 tabs (Overview / YAML / Logs / Exec / Events / Metrics / Tree); routes mounted on both mothership (/provision/$id/cloud/resource/...) and chroot (/cloud/resource/...) trees.
- R2 ResourceTree widget with owner-walk UP and selector-walk DOWN, server-side at /k8s/{kind}/{ns}/{name}/tree using new k8scache GetResourcesByOwner + GetResourcesBySelector indexer-only paths.
- R3 YamlEditor with side-by-side diff, dry-run validation, flux-vs-manual branching (manual → /apply, flux → PR seam wired for the unified Gitea client).
- R4 EventsPanel filtering events.k8s.io/v1 Events by regarding-object; new "event" kind added to k8scache DefaultKinds.
- R5 MetricsPanel with Recharts sparkline; rolls up PodMetrics across owned Pods for Deployment/StatefulSet/DaemonSet.
- R6 ResourceActions widget: scale (Deployment/StatefulSet), restart (annotation stamp), delete (typed-confirmation gate). All mutation endpoints tier-admin gated server-side via the canonical applicationInstallCallerAuthorized seam — UI hide is convenience only.
K8sListPage rows are now clickable and navigate to the detail page.
7 server-side endpoints added under /api/v1/sovereigns/{id}/k8s/{kind}/{ns}/{name}: GET, /tree, /scale, /restart, /dry-run, /apply, DELETE — plus /k8s/metrics/{kind}/{ns}/{name}.
New k8scache.Factory accessors: DynamicClientFor + RedactForKind. Same lifecycle as CoreClient — no second per-cluster pool.
Tests: 37 new vitest cases (ResourceTree / YamlEditor / EventsPanel / MetricsPanel / ResourceActions / ResourceDetailPage / resource.api) all passing. 12 new Go test funcs covering GET / scale / restart / delete / dry-run / apply / tree / metrics + tree.go owner+selector walks. 8 Playwright snapshots at 1440x900 (one per tab + list-row entry).
Pre-existing baselines untouched: 59 lint errors (matches main); 12 vitest test files / 98 vitest tests still failing on main (StepComponents + cosmetic-guards + AppDetail), zero introduced by this slice; pre-existing TestGetKubeconfig_ReadsFromPathPointer TempDir-cleanup race observed only with -race + parallel run, passes in isolation.
Co-authored-by: hatiyildiz <hati.yildiz@openova.io>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
21810a3760