Release Hotfix Branch - 6-12-2025 (#12373)

* fix: table headers should not be hoverable in light mode

* fix: table headers should not be hoverable in light mode

* upcoming: [M3-10151] - UX description changes for VPC Section in the Create NodeBalancers page (#12368)

* Update copy for no option situations for ConfigNodeIPSelect

* fix: disable vpc select in create nodebalancer page for regions that do not support vpc

* disable vpc select only after a region is selected

* Temporarily disable monitors service type query

* fix: [M3-10152] - Remove account capability checks preventing restricted users from enabling HA and ACL on Kubernetes clusters (#12374)

* Remove account capability check for HA; add cluster grant check

* Remove account capability check for ACL

* Retain existing, odd behavior on resource restriction for tags for now

* Remove capabilities and mocked account request from create spec

* Remove capabilities and mocked account request from update spec

* Add changelog entry

---------

Co-authored-by: Jaalah Ramos <[email protected]>
Co-authored-by: Harsh Shankar Rao <[email protected]>
Co-authored-by: Dajahi Wiley <[email protected]>
Co-authored-by: pmakode-akamai <[email protected]>
Co-authored-by: Mariah Jacobs <[email protected]>

Author: 6 people

packages/manager/CHANGELOG.md

@@ -22,6 +22,7 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/) and this p
 
 ### Fixed:
 
+- Inability for restricted users to configure High Availability or IP ACLs on LKE clusters ([#11274](https://github.com/linode/manager/pull/11274))
 - Radio button size in plans table ([#12261](https://github.com/linode/manager/pull/12261))
 - Styling issues in `DomainRecords` and `forwardRef` console errors in Object Storage Access ([#12279](https://github.com/linode/manager/pull/12279))
 - Radio button styling inconsistencies across themes and states ([#12284](https://github.com/linode/manager/pull/12284))
@@ -103,6 +104,7 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/) and this p
 - Fix inconsistent layout when entity names are long and previously assigned roles reappear when reopening the Assign New Roles Drawer ([#12356](https://github.com/linode/manager/pull/12356))
 - Fix delete button not disabled for subnets associated with a NodeBalancer on the VPC Subnet page ([#12365](https://github.com/linode/manager/pull/12365))
 - Update `interface` firewall entity type to `linode_interface` ([#12367](https://github.com/linode/manager/pull/12367))
+- UX description changes for VPC section on Create NodeBalancers page ([#12368](https://github.com/linode/manager/pull/12368))
 
 ## [2025-06-03] - v1.143.0
 

packages/manager/cypress/e2e/core/kubernetes/lke-create.spec.ts

@@ -662,30 +662,6 @@ describe('LKE Cluster Creation with DC-specific pricing', () => {
 });
 
 describe('LKE Cluster Creation with ACL', () => {
-  /**
-   * - Confirms ACL flow does not exist if account doesn't have the corresponding capability
-   */
-  it('does not show the ACL flow without the LKE ACL capability', () => {
-    mockGetAccount(
-      accountFactory.build({
-        capabilities: [],
-      })
-    ).as('getAccount');
-
-    cy.visitWithLogin('/kubernetes/clusters');
-
-    ui.button
-      .findByTitle('Create Cluster')
-      .should('be.visible')
-      .should('be.enabled')
-      .click();
-
-    cy.url().should('endWith', '/kubernetes/create');
-    cy.wait(['@getAccount']);
-
-    cy.contains('Control Plane ACL').should('not.exist');
-  });
-
   // setting up mocks
   const clusterLabel = randomLabel();
   const mockRegion = regionFactory.build({
@@ -713,14 +689,6 @@ describe('LKE Cluster Creation with ACL', () => {
 
   describe('with LKE IPACL account capability', () => {
     beforeEach(() => {
-      mockGetAccount(
-        accountFactory.build({
-          capabilities: [
-            'LKE HA Control Planes',
-            'LKE Network Access Control List (IP ACL)',
-          ],
-        })
-      ).as('getAccount');
       mockGetRegions([mockRegion]).as('getRegions');
       mockGetLinodeTypes(mockLinodeTypes).as('getLinodeTypes');
       mockGetRegionAvailability(mockRegion.id, []).as('getRegionAvailability');
@@ -755,7 +723,7 @@ describe('LKE Cluster Creation with ACL', () => {
         .click();
 
       cy.url().should('endWith', '/kubernetes/create');
-      cy.wait(['@getAccount', '@getRegions', '@getLinodeTypes']);
+      cy.wait(['@getRegions', '@getLinodeTypes']);
 
       // Fill out LKE creation form label, region, and Kubernetes version fields.
       cy.findByLabelText('Cluster Label').should('be.visible').click();
@@ -857,7 +825,6 @@ describe('LKE Cluster Creation with ACL', () => {
         .click();
 
       cy.url().should('endWith', '/kubernetes/create');
-      cy.wait(['@getAccount']);
 
       // Fill out LKE creation form label, region, and Kubernetes version fields.
       cy.findByLabelText('Cluster Label').should('be.visible').click();
@@ -989,11 +956,7 @@ describe('LKE Cluster Creation with ACL', () => {
       );
       mockGetAccount(
         accountFactory.build({
-          capabilities: [
-            'Kubernetes Enterprise',
-            'LKE HA Control Planes',
-            'LKE Network Access Control List (IP ACL)',
-          ],
+          capabilities: ['Kubernetes Enterprise'],
         })
       ).as('getAccount');
       mockGetTieredKubernetesVersions('enterprise', [
@@ -1202,7 +1165,6 @@ describe('LKE Cluster Creation with ACL', () => {
         .click();
 
       cy.url().should('endWith', '/kubernetes/create');
-      cy.wait(['@getAccount']);
 
       // Fill out LKE creation form label, region, and Kubernetes version fields.
       cy.findByLabelText('Cluster Label').should('be.visible').click();
@@ -1386,11 +1348,7 @@ describe('LKE Cluster Creation with LKE-E', () => {
       ).as('getAccountBeta');
       mockGetAccount(
         accountFactory.build({
-          capabilities: [
-            'Kubernetes Enterprise',
-            'LKE HA Control Planes',
-            'LKE Network Access Control List (IP ACL)',
-          ],
+          capabilities: ['Kubernetes Enterprise'],
         })
       ).as('getAccount');
       mockGetTieredKubernetesVersions('enterprise', [