Auto-merge main into odh-release

Author: github-actions[bot]

.gitignore

@@ -8,6 +8,7 @@ Thumbs.db
 .envrc
 
 .env*.local
+.mcp.json
 
 node_modules
 logs
@@ -31,8 +32,15 @@ jest-coverage
 # Build outputs
 dist
 
-# Contract test results 
+# Contract test results
 contract-test-results
 
+# Claude
+CLAUDE.md
+.claude/settings.local.json
+
+# Playwright MCP
+.playwright-mcp/
+
 # Temporary files
 tmp/

backend/package.json

@@ -19,7 +19,7 @@
   "main": "src/server.ts",
   "scripts": {
     "clean": "rimraf ../logs/adminActivity.log",
-    "start": "cross-env NODE_ENV=production node ./dist/server.js",
+    "start": "NODE_ENV=production node ./dist/server.js",
     "start:dev": "npm run clean && cross-env NODE_TLS_REJECT_UNAUTHORIZED=0 NODE_ENV=development nodemon src/server.ts",
     "debug": "cross-env NODE_TLS_REJECT_UNAUTHORIZED=0 NODE_ENV=development nodemon --exec 'node --inspect --require ts-node/register' src/server.ts",
     "start:dev:wait": "npx wait-on -i 1000 http://localhost:4000",
@@ -32,7 +32,7 @@
     "test:type-check": "turbo run type-check",
     "test:jest": "jest",
     "type-check": "tsc --noEmit",
-    "server": "cross-env NODE_ENV=production node ./dist/server.js",
+    "server": "NODE_ENV=production node ./dist/server.js",
     "lint": "eslint .",
     "test-unit": "jest --silent",
     "test-unit-coverage": "jest --silent --coverage"

backend/src/routes/api/modelRegistries/modelRegistryUtils.ts

@@ -258,6 +258,10 @@ const deleteDatabasePasswordSecret = async (
     // The user may have deleted their own secret and we don't want to block deleting the model registry.
     return;
   }
+  // If no secret exists (e.g., when using default database with generateDeployment), skip deletion
+  if (!existingSecret) {
+    return;
+  }
   const response = await fastify.kube.coreV1Api.deleteNamespacedSecret(
     existingSecret.metadata.name,
     modelRegistryNamespace,

frontend/src/__mocks__/mockDashboardConfig.ts

@@ -48,14 +48,12 @@ export type MockDashboardConfigType = {
   pvcSize?: string;
   mlflow?: boolean;
   projectRBAC?: boolean;
-  embedMLflow?: boolean;
   disableLLMd?: boolean;
 };
 
 export const mockDashboardConfig = ({
   mlflow = false,
   projectRBAC = false,
-  embedMLflow = false,
   disableInfo = false,
   disableSupport = false,
   disableClusterManager = false,
@@ -218,7 +216,6 @@ export const mockDashboardConfig = ({
     dashboardConfig: {
       mlflow,
       projectRBAC,
-      embedMLflow,
       enablement: true,
       disableInfo,
       disableSupport,

frontend/src/concepts/areas/const.ts

@@ -14,7 +14,6 @@ export const techPreviewFlags = {
 export const devTemporaryFeatureFlags = {
   disableKueue: true,
   disableProjectScoped: true,
-  embedMLflow: false,
 } satisfies Partial<DashboardCommonConfig>;
 
 // Group 1: Core Dashboard Features
@@ -207,9 +206,6 @@ export const SupportedAreasStateMap: SupportedAreasState = {
   [SupportedArea.PROJECT_RBAC_SETTINGS]: {
     featureFlags: ['projectRBAC'],
   },
-  [SupportedArea.EMBED_MLFLOW]: {
-    featureFlags: ['embedMLflow'],
-  },
 };
 
 /** Maps each DataScienceStackComponent to its human-readable name **/

frontend/src/concepts/areas/types.ts

@@ -91,9 +91,6 @@ export enum SupportedArea {
 
   /* Project RBAC Settings */
   PROJECT_RBAC_SETTINGS = 'project-rbac-settings',
-
-  /* Embed MLflow */
-  EMBED_MLFLOW = 'embed-mlflow',
 }
 
 export type SupportedAreaType = SupportedArea | string;

frontend/src/concepts/modelServing/ModelRow/ServingRuntimeTokenDisplay.tsx

@@ -59,7 +59,9 @@ const ServingRuntimeTokenDisplay: React.FC<ServingRuntimeTokenDisplayProps> = ({
       clickTip="Copied"
       data-testid="token-secret"
       additionalActions={toggleAction}
-      truncation={isTokenVisible ? { position: 'middle' } : undefined}
+      truncation={
+        isTokenVisible ? { position: 'middle', tooltipProps: { hidden: true } } : undefined
+      }
       onCopy={() => {
         navigator.clipboard.writeText(visibleToken);
       }}

frontend/src/k8sTypes.ts

@@ -1305,7 +1305,6 @@ export type DashboardCommonConfig = {
   maasApiKeys?: boolean;
   mlflow?: boolean;
   projectRBAC?: boolean;
-  embedMLflow?: boolean;
   observabilityDashboard?: boolean;
   disableLLMd?: boolean;
 };
@@ -1545,8 +1544,8 @@ export type ModelRegistryKind = K8sResourceCommon & {
   } & EitherNotBoth<
     {
       mysql?: {
-        database: string;
-        host: string;
+        database?: string;
+        host?: string;
         passwordSecret?: {
           key: string;
           name: string;
@@ -1571,17 +1570,31 @@ export type ModelRegistryKind = K8sResourceCommon & {
     },
     {
       postgres?: {
-        database: string;
+        database?: string;
         host?: string;
         passwordSecret?: {
           key: string;
           name: string;
         };
-        port: number;
+        port?: number;
         skipDBCreation?: boolean;
+        generateDeployment?: boolean;
         sslMode?: string;
         username?: string;
-      };
+      } & EitherNotBoth<
+        {
+          sslRootCertificateConfigMap?: {
+            name: string;
+            key: string;
+          } | null;
+        },
+        {
+          sslRootCertificateSecret?: {
+            name: string;
+            key: string;
+          } | null;
+        }
+      >;
     }
   >;
   status?: {