@@ -839,7 +839,6 @@ const KNOWN_COLUMNS: Record<string, Column[]> = {
   ],
   nodeclaims: [
     { key: 'name', label: 'Name' },
-    { key: 'namespace', label: 'Namespace', width: 'w-36' },
     { key: 'status', label: 'Status', width: 'w-24' },
     { key: 'instanceType', label: 'Instance Type', width: 'w-32' },
     { key: 'capacityType', label: 'Capacity', width: 'w-24', tooltip: 'Spot or On-Demand' },
@@ -936,7 +935,6 @@ const KNOWN_COLUMNS: Record<string, Column[]> = {
   ],
   resourceflavors: [
     { key: 'name', label: 'Name' },
-    { key: 'status', label: 'Status', width: 'w-24' },
     { key: 'nodeLabels', label: 'Node Labels', width: 'w-28', tooltip: 'Node label selector count' },
     { key: 'taints', label: 'Taints', width: 'w-24' },
     { key: 'age', label: 'Age', width: 'w-24' },
@@ -986,7 +984,7 @@ const KNOWN_COLUMNS: Record<string, Column[]> = {
     { key: 'namespace', label: 'Namespace', width: 'w-36' },
     { key: 'status', label: 'Status', width: 'w-24' },
     { key: 'schedule', label: 'Schedule', width: 'w-32' },
-    { key: 'suspend', label: 'Suspend', width: 'w-20' },
+    { key: 'timeZone', label: 'Time Zone', width: 'w-36', tooltip: 'IANA zone the schedule is read in; unset follows the local zone of the KubeRay operator pod' },
     { key: 'lastSchedule', label: 'Last Schedule', width: 'w-28' },
     { key: 'age', label: 'Age', width: 'w-24' },
   ],
@@ -1113,7 +1111,6 @@ const KNOWN_COLUMNS: Record<string, Column[]> = {
   jobtemplates: [
     { key: 'name', label: 'Name' },
     { key: 'namespace', label: 'Namespace', width: 'w-36' },
-    { key: 'status', label: 'Status', width: 'w-24' },
     { key: 'tasks', label: 'Tasks', width: 'w-20' },
     { key: 'age', label: 'Age', width: 'w-24' },
   ],
@@ -1480,7 +1477,6 @@ const KNOWN_COLUMNS: Record<string, Column[]> = {
     { key: 'name', label: 'Name' },
     { key: 'namespace', label: 'Namespace', width: 'w-36' },
     { key: 'selector', label: 'Selector', width: 'w-48' },
-    { key: 'namespaceSelector', label: 'Namespace Selector', width: 'w-48', defaultVisible: false },
     { key: 'serviceAccountSelector', label: 'Service Account Selector', width: 'w-48', defaultVisible: false },
     { key: 'tier', label: 'Tier', width: 'w-28' },
     { key: 'order', label: 'Order', width: 'w-24' },
@@ -1503,7 +1499,6 @@ const KNOWN_COLUMNS: Record<string, Column[]> = {
     { key: 'name', label: 'Name' },
     { key: 'namespace', label: 'Namespace', width: 'w-36' },
     { key: 'selector', label: 'Selector', width: 'w-48' },
-    { key: 'namespaceSelector', label: 'Namespace Selector', width: 'w-48', defaultVisible: false },
     { key: 'serviceAccountSelector', label: 'Service Account Selector', width: 'w-48', defaultVisible: false },
     { key: 'tier', label: 'Tier', width: 'w-28' },
     { key: 'order', label: 'Order', width: 'w-24' },
@@ -1834,7 +1829,6 @@ const KNOWN_COLUMNS: Record<string, Column[]> = {
     { key: 'namespace', label: 'Namespace', width: 'w-36' },
     { key: 'status', label: 'Status', width: 'w-24' },
     { key: 'store', label: 'Store', width: 'w-36' },
-    { key: 'provider', label: 'Provider', width: 'w-28' },
     { key: 'refreshInterval', label: 'Refresh', width: 'w-24' },
     { key: 'lastSync', label: 'Last Sync', width: 'w-28' },
     { key: 'age', label: 'Age', width: 'w-24' },
 
@@ -6,7 +6,6 @@ import {
   getExternalSecretStore,
   getExternalSecretRefreshInterval,
   getExternalSecretLastSync,
-  getExternalSecretProvider,
   getClusterExternalSecretStatus,
   getClusterExternalSecretNamespaceCount,
   getClusterExternalSecretFailedCount,
@@ -33,10 +32,6 @@ export function ExternalSecretCell({ resource, column }: { resource: any; column
         </span>
       )
     }
-    case 'provider': {
-      const provider = getExternalSecretProvider(resource)
-      return <span className="text-sm text-theme-text-secondary truncate block">{provider}</span>
-    }
     case 'refreshInterval': {
       const interval = getExternalSecretRefreshInterval(resource)
       return <span className="text-sm text-theme-text-secondary">{interval}</span>
 
@@ -15,7 +15,6 @@ import {
   getKueueWorkloadQueueName,
   getKueueWorkloadAdmittedBy,
   getKueueWorkloadPriority,
-  getResourceFlavorStatus,
   getResourceFlavorNodeLabelCount,
   getResourceFlavorTaintCount,
   getAdmissionCheckStatus,
@@ -112,14 +111,6 @@ export function KueueWorkloadCell({ resource, column }: { resource: any; column:
 
 export function ResourceFlavorCell({ resource, column }: { resource: any; column: string }) {
   switch (column) {
-    case 'status': {
-      const status = getResourceFlavorStatus(resource)
-      return (
-        <span className={clsx('badge', status.color)}>
-          {status.text}
-        </span>
-      )
-    }
     case 'nodeLabels': {
       const count = getResourceFlavorNodeLabelCount(resource)
       return <span className="text-sm text-theme-text-secondary">{count > 0 ? count : '-'}</span>
 
@@ -15,7 +15,7 @@ import {
   getRayServiceClusters,
   getRayCronJobStatus,
   getRayCronJobSchedule,
-  getRayCronJobSuspend,
+  getRayCronJobTimeZone,
   getRayCronJobLastSchedule,
 } from '../resource-utils-ray'
 
@@ -110,9 +110,17 @@ export function RayCronJobCell({ resource, column }: { resource: any; column: st
       const schedule = getRayCronJobSchedule(resource)
       return <span className="text-sm font-mono text-theme-text-secondary">{schedule}</span>
     }
-    case 'suspend': {
-      const suspended = getRayCronJobSuspend(resource)
-      return <span className="text-sm text-theme-text-secondary">{suspended ? 'Yes' : 'No'}</span>
+    case 'timeZone': {
+      const zone = getRayCronJobTimeZone(resource)
+      const declared = Boolean(resource.spec?.timeZone)
+      return (
+        <span
+          className={clsx('text-sm truncate block', declared ? 'text-theme-text-secondary' : 'text-theme-text-tertiary')}
+          title={zone}
+        >
+          {zone}
+        </span>
+      )
     }
     case 'lastSchedule': {
       const lastSchedule = getRayCronJobLastSchedule(resource)
 
@@ -16,7 +16,6 @@ import {
   getVolcanoPodGroupMinMember,
   getJobFlowStatus,
   getJobFlowFlowCount,
-  getJobTemplateStatus,
   getJobTemplateTaskCount,
 } from '../resource-utils-volcano'
 
@@ -122,14 +121,6 @@ export function JobFlowCell({ resource, column }: { resource: any; column: strin
 
 export function JobTemplateCell({ resource, column }: { resource: any; column: string }) {
   switch (column) {
-    case 'status': {
-      const status = getJobTemplateStatus(resource)
-      return (
-        <span className={clsx('badge', status.color)}>
-          {status.text}
-        </span>
-      )
-    }
     case 'tasks': {
       const count = getJobTemplateTaskCount(resource)
       return <span className="text-sm text-theme-text-secondary">{count > 0 ? count : '-'}</span>
 
@@ -0,0 +1,56 @@
+import { describe, expect, it } from 'vitest'
+import { getSecretStoreProviderType, getSecretStoreProviderKey } from './resource-utils-eso'
+
+// The provider label answers "which backend holds these secrets?", so it has to
+// track the upstream `spec.provider` field names rather than plausible ones.
+
+describe('getSecretStoreProviderType', () => {
+  it('names the AWS product rather than assuming Secrets Manager', () => {
+    // One `aws` key addresses three services; `service` is required and is the
+    // only thing that distinguishes them.
+    const forService = (service: string) =>
+      getSecretStoreProviderType({ spec: { provider: { aws: { service, region: 'us-east-1' } } } })
+
+    expect(forService('SecretsManager')).toBe('AWS Secrets Manager')
+    expect(forService('ParameterStore')).toBe('AWS Parameter Store')
+    expect(forService('CertificateManager')).toBe('AWS Certificate Manager')
+  })
+
+  it('falls back to the vendor when an AWS store declares no service', () => {
+    // Invalid per the CRD, but naming a product we cannot confirm is worse than
+    // naming only the vendor.
+    expect(getSecretStoreProviderType({ spec: { provider: { aws: {} } } })).toBe('AWS')
+  })
+
+  it('recognises Bitwarden under its real field name', () => {
+    expect(getSecretStoreProviderType({ spec: { provider: { bitwardensecretsmanager: {} } } }))
+      .toBe('Bitwarden Secrets Manager')
+  })
+
+  it('labels providers added after the map was first written', () => {
+    expect(getSecretStoreProviderType({ spec: { provider: { openBao: {} } } })).toBe('OpenBao')
+    expect(getSecretStoreProviderType({ spec: { provider: { conjur: {} } } })).toBe('CyberArk Conjur')
+  })
+
+  it('keeps v1beta1-only providers, which v1 clusters never send', () => {
+    expect(getSecretStoreProviderType({ spec: { provider: { device42: {} } } })).toBe('Device42')
+  })
+
+  it('shows the raw key rather than Unknown for an unrecognised provider', () => {
+    expect(getSecretStoreProviderType({ spec: { provider: { somefutureprovider: {} } } }))
+      .toBe('somefutureprovider')
+  })
+
+  it('reports nothing when there is no provider at all', () => {
+    expect(getSecretStoreProviderType({ spec: {} })).toBe('Unknown')
+  })
+})
+
+describe('getSecretStoreProviderKey', () => {
+  it('stays at the vendor level, which is what the badge colours by', () => {
+    const key = (service: string) =>
+      getSecretStoreProviderKey({ spec: { provider: { aws: { service } } } })
+    expect(key('SecretsManager')).toBe('aws')
+    expect(key('ParameterStore')).toBe('aws')
+  })
+})
@@ -7,33 +7,63 @@ import { healthColors, formatAge } from './resource-utils'
 // PROVIDER DETECTION
 // ============================================================================
 
+// Keys are the SecretStore `spec.provider` field names. v1 and v1beta1 do not
+// carry the same set, so entries dropped upstream (device42, alibaba) stay for
+// clusters still serving v1beta1.
 const PROVIDER_MAP: Record<string, string> = {
-  aws: 'AWS Secrets Manager',
+  aws: 'AWS',
   azurekv: 'Azure Key Vault',
   gcpsm: 'GCP Secret Manager',
   vault: 'HashiCorp Vault',
+  openBao: 'OpenBao',
   kubernetes: 'Kubernetes',
+  crd: 'Kubernetes Resource',
   oracle: 'Oracle Vault',
   ibm: 'IBM Secrets Manager',
+  alibaba: 'Alibaba Cloud KMS',
+  ovh: 'OVHcloud Secret Manager',
+  volcengine: 'Volcengine',
+  cloudrusm: 'Cloud.ru Secret Manager',
+  nebiusmysterybox: 'Nebius Mysterybox',
+  barbican: 'OpenStack Barbican',
+  yandexlockbox: 'Yandex Lockbox',
+  yandexcertificatemanager: 'Yandex Certificate Manager',
   doppler: 'Doppler',
   onepassword: '1Password',
+  onepasswordSDK: '1Password',
+  bitwardensecretsmanager: 'Bitwarden Secrets Manager',
   senhasegura: 'senhasegura',
+  github: 'GitHub',
   gitlab: 'GitLab',
   webhook: 'Webhook',
   fake: 'Fake',
   keepersecurity: 'Keeper Security',
   scaleway: 'Scaleway',
-  delinea: 'Delinea',
+  conjur: 'CyberArk Conjur',
+  delinea: 'Delinea DevOps Secrets Vault',
+  secretserver: 'Delinea Secret Server',
+  beyondtrust: 'BeyondTrust',
+  beyondtrustworkloadcredentials: 'BeyondTrust Workload Credentials',
   chef: 'Chef',
   pulumi: 'Pulumi ESC',
   fortanix: 'Fortanix',
   passworddepot: 'Password Depot',
+  passbolt: 'Passbolt',
+  previder: 'Previder',
+  onboardbase: 'Onboardbase',
+  dvls: 'Devolutions Server',
   device42: 'Device42',
   akeyless: 'Akeyless',
-  beyondtrust: 'BeyondTrust',
   infisical: 'Infisical',
-  passbolt: 'Passbolt',
-  bitwarden: 'Bitwarden',
+  ngrok: 'ngrok',
+}
+
+// A single `aws` key addresses three unrelated AWS products; `service` is a
+// required enum and is the only thing that says which one holds the secrets.
+const AWS_SERVICE_LABELS: Record<string, string> = {
+  SecretsManager: 'AWS Secrets Manager',
+  ParameterStore: 'AWS Parameter Store',
+  CertificateManager: 'AWS Certificate Manager',
 }
 
 /**
@@ -44,6 +74,8 @@ export function getSecretStoreProviderType(resource: any): string {
   const provider = resource.spec?.provider
   if (!provider) return 'Unknown'
 
+  if (provider.aws) return AWS_SERVICE_LABELS[provider.aws.service] ?? 'AWS'
+
   for (const [key, label] of Object.entries(PROVIDER_MAP)) {
     if (provider[key]) return label
   }
 
@@ -0,0 +1,36 @@
+import { describe, expect, it } from 'vitest'
+import { getRayCronJobTimeZone, getRayCronJobStatus } from './resource-utils-ray'
+import { getCellFilterValue } from './resource-utils'
+
+describe('getRayCronJobTimeZone', () => {
+  it('shows the declared zone', () => {
+    expect(getRayCronJobTimeZone({ spec: { schedule: '0 2 * * *', timeZone: 'America/New_York' } }))
+      .toBe('America/New_York')
+  })
+
+  it('does not present an undeclared zone as UTC', () => {
+    // KubeRay reads the schedule in the operator pod's local zone when timeZone
+    // is unset, so the object cannot say what the cron expression means.
+    expect(getRayCronJobTimeZone({ spec: { schedule: '0 2 * * *' } })).toBe('Operator local')
+  })
+})
+
+describe('getRayCronJobStatus', () => {
+  it('reports only what spec.suspend says, which is all the CRD carries', () => {
+    // RayCronJobStatus holds lastScheduleTime and nothing else — there is no
+    // controller-reported phase for this badge to reflect.
+    expect(getRayCronJobStatus({ spec: { suspend: true } }).text).toBe('Suspended')
+    expect(getRayCronJobStatus({ spec: {} }).text).toBe('Active')
+  })
+})
+
+describe('getCellFilterValue for raycronjobs timeZone', () => {
+  it('offers the same value the cell renders, so undeclared rows stay filterable', () => {
+    // The generic fallback reads spec.timeZone and yields '' when unset, which
+    // would hide those rows from a filter whose column shows them a value.
+    expect(getCellFilterValue({ spec: { schedule: '0 2 * * *' } }, 'timeZone', 'raycronjobs'))
+      .toBe('Operator local')
+    expect(getCellFilterValue({ spec: { timeZone: 'Europe/Berlin' } }, 'timeZone', 'raycronjobs'))
+      .toBe('Europe/Berlin')
+  })
+})
@@ -203,6 +203,12 @@ export function getRayCronJobSchedule(resource: any): string {
   return resource.spec?.schedule || '-'
 }
 
+// An unset timeZone does not mean UTC: KubeRay reads the schedule in the
+// operator pod's own local zone, which this object cannot report.
+export function getRayCronJobTimeZone(resource: any): string {
+  return resource.spec?.timeZone || 'Operator local'
+}
+
 export function getRayCronJobSuspend(resource: any): boolean {
   return resource.spec?.suspend === true
 }
 
@@ -15,7 +15,7 @@ import { getPolicyReportStatus as _getPolicyReportStatus, getKyvernoPolicyStatus
 import { getResourceClaimStatus as _getResourceClaimStatus, getResourceClaimDeviceClasses as _getResourceClaimDeviceClasses, getResourceClaimTemplateDeviceClasses as _getResourceClaimTemplateDeviceClasses, getResourceClaimAllocation as _getResourceClaimAllocation, getResourceClaimReservedFor as _getResourceClaimReservedFor } from './resource-utils-dra'
 import { getNvidiaClusterPolicyStatus as _getNvidiaClusterPolicyStatus, getNvidiaClusterPolicyEnabledComponents as _getNvidiaClusterPolicyEnabledComponents, getNvidiaDriverStatus as _getNvidiaDriverStatus } from './resource-utils-nvidia'
 import { getClusterQueueStatus as _getClusterQueueStatus, getLocalQueueStatus as _getLocalQueueStatus, getKueueWorkloadStatus as _getKueueWorkloadStatus, getResourceFlavorStatus as _getResourceFlavorStatus, getAdmissionCheckStatus as _getAdmissionCheckStatus, getProvisioningRequestStatus as _getProvisioningRequestStatus } from './resource-utils-kueue'
-import { getRayClusterStatus as _getRayClusterStatus, getRayJobStatus as _getRayJobStatus, getRayServiceStatus as _getRayServiceStatus, getRayCronJobStatus as _getRayCronJobStatus } from './resource-utils-ray'
+import { getRayClusterStatus as _getRayClusterStatus, getRayJobStatus as _getRayJobStatus, getRayServiceStatus as _getRayServiceStatus, getRayCronJobStatus as _getRayCronJobStatus, getRayCronJobTimeZone as _getRayCronJobTimeZone } from './resource-utils-ray'
 import { getLeaderWorkerSetStatus as _getLeaderWorkerSetStatus, getJobSetStatus as _getJobSetStatus } from './resource-utils-jobset-lws'
 import { getInferenceServiceStatus as _getInferenceServiceStatus, getServingRuntimeStatus as _getServingRuntimeStatus, getInferenceGraphStatus as _getInferenceGraphStatus, getTrainedModelStatus as _getTrainedModelStatus, getLLMInferenceServiceStatus as _getLLMInferenceServiceStatus } from './resource-utils-kserve'
 import { getInferencePoolStatus as _getInferencePoolStatus, getInferenceObjectiveStatus as _getInferenceObjectiveStatus } from './resource-utils-inference-gateway'
@@ -2370,7 +2370,6 @@ export function getCellFilterValue(resource: any, column: string, kind: string):
       if (kindLower === 'clusterqueues') return _getClusterQueueStatus(resource).text
       if (kindLower === 'localqueues') return _getLocalQueueStatus(resource).text
       if (kindLower === 'workloads') return _getKueueWorkloadStatus(resource).text
-      if (kindLower === 'resourceflavors') return _getResourceFlavorStatus(resource).text
       if (kindLower === 'admissionchecks') return _getAdmissionCheckStatus(resource).text
       if (kindLower === 'provisioningrequests') return _getProvisioningRequestStatus(resource).text
       if (kindLower === 'rayclusters') return _getRayClusterStatus(resource).text
@@ -2390,7 +2389,6 @@ export function getCellFilterValue(resource: any, column: string, kind: string):
       if (kindLower === 'volcanoqueues') return _getVolcanoQueueStatus(resource).text
       if (kindLower === 'volcanopodgroups') return _getVolcanoPodGroupStatus(resource).text
       if (kindLower === 'jobflows') return _getJobFlowStatus(resource).text
-      if (kindLower === 'jobtemplates') return _getJobTemplateStatus(resource).text
       if (kindLower === 'kaiqueues') return _getKaiQueueStatus(resource).text
       if (kindLower === 'kaipodgroups') return _getKaiPodGroupStatus(resource).text
       if (kindLower === 'kaitoworkspaces') return _getKaitoWorkspaceStatus(resource).text
@@ -2596,6 +2594,11 @@ export function getCellFilterValue(resource: any, column: string, kind: string):
     case 'mig':
       if (kindLower === 'nvidiaclusterpolicies') return resource.spec?.mig?.strategy || ''
       break
+    // The fallback would read spec.timeZone and yield '' for an undeclared
+    // zone, so those rows would drop out of a filter the cell shows a value for.
+    case 'timeZone':
+      if (kindLower === 'raycronjobs') return _getRayCronJobTimeZone(resource)
+      break
   }
 
   // Fallback: try common paths
Original file line number	Diff line number	Diff line change
`@@ -203,6 +203,12 @@ export function getRayCronJobSchedule(resource: any): string {`
`203`	`203`	`return resource.spec?.schedule \|\| '-'`
`204`	`204`	`}`
`205`	`205`
	`206`	`+// An unset timeZone does not mean UTC: KubeRay reads the schedule in the`
	`207`	`+// operator pod's own local zone, which this object cannot report.`
	`208`	`+export function getRayCronJobTimeZone(resource: any): string {`
	`209`	`+ return resource.spec?.timeZone \|\| 'Operator local'`
	`210`	`+}`
	`211`	`+`
`206`	`212`	`export function getRayCronJobSuspend(resource: any): boolean {`
`207`	`213`	`return resource.spec?.suspend === true`
`208`	`214`	`}`