Trim whitespace when splitting security-group annotations

The Governance Overview Standards/Categories/Controls cards, and the
policy drill-down sidebar behind them, group policies by splitting
the policy.open-cluster-management.io/{standards,categories,controls}
annotation on ",". String.split(',') leaves a leading space on every
token after the first (e.g. "A, B".split(',') -> ["A", " B"]), so the
same logical value produces a second, distinct row whenever it isn't
first in a comma-separated list on some policies but is standalone or
first-in-list on others.

Trim each token after splitting in both useSecurityGroupViolations
(Overview.tsx) and the matching filter in
SecurityGroupPolicySummarySidebar.tsx so aggregation and drill-down
filtering key off the same normalized value regardless of annotation
formatting.

Reported in Red Hat case 04500068.

Author: sungupta-llm

frontend/src/routes/Governance/overview/Overview.test.tsx

@@ -16,6 +16,7 @@ import {
 import GovernanceOverview from './Overview'
 import userEvent from '@testing-library/user-event'
 import { defaultContext, PluginDataContext } from '../../../lib/PluginDataContext'
+import { Policy, PolicyApiVersion, PolicyKind } from '../../../resources'
 
 describe('Overview Page', () => {
   beforeEach(async () => nockIgnoreApiPaths())
@@ -141,4 +142,76 @@ describe('Overview Page', () => {
     userEvent.click(screen.getByText(/show 85 more/i))
     expect(queryByText(/show 85 more/i)).not.toBeInTheDocument()
   })
+
+  test('Should aggregate Standards card by trimmed annotation value, not raw comma-split token', async () => {
+    // Regression test: a standard listed anywhere but first in a comma-separated
+    // policy.open-cluster-management.io/standards annotation must not produce a
+    // separate row on the Standards card just because of the leading space left
+    // behind by String.split(',').
+    const policyWithStandardFirstInList: Policy = {
+      apiVersion: PolicyApiVersion,
+      kind: PolicyKind,
+      metadata: {
+        name: 'policy-standards-first',
+        namespace: 'test',
+        uid: 'standards-test-uid-1',
+        annotations: {
+          'policy.open-cluster-management.io/standards': 'NIST SP 800-53, PCI-DSS 4.0',
+        },
+      },
+      spec: {
+        disabled: false,
+        'policy-templates': [],
+        remediationAction: 'inform',
+      },
+      status: {
+        compliant: 'Compliant',
+      },
+    }
+    const policyWithStandardLastInList: Policy = {
+      apiVersion: PolicyApiVersion,
+      kind: PolicyKind,
+      metadata: {
+        name: 'policy-standards-last',
+        namespace: 'test',
+        uid: 'standards-test-uid-2',
+        annotations: {
+          'policy.open-cluster-management.io/standards': 'CIS OpenShift Benchmark, PCI-DSS 4.0, NIST SP 800-53',
+        },
+      },
+      spec: {
+        disabled: false,
+        'policy-templates': [],
+        remediationAction: 'inform',
+      },
+      status: {
+        compliant: 'Compliant',
+      },
+    }
+
+    const pluginData = {
+      ...defaultContext,
+      loadStarted: true,
+      loadCompleted: true,
+    }
+    render(
+      <PluginDataContext.Provider value={pluginData}>
+        <RecoilRoot
+          initializeState={(snapshot) => {
+            snapshot.set(policiesState, [policyWithStandardFirstInList, policyWithStandardLastInList])
+            snapshot.set(managedClustersState, mockManagedClusters)
+          }}
+        >
+          <MemoryRouter>
+            <GovernanceOverview />
+          </MemoryRouter>
+        </RecoilRoot>
+      </PluginDataContext.Provider>
+    )
+
+    // Before the fix this rendered two separate rows/spans for the same logical
+    // standard (one from the untrimmed " NIST SP 800-53" split token).
+    expect(screen.getAllByText('NIST SP 800-53').length).toBe(1)
+    expect(screen.getAllByText('PCI-DSS 4.0').length).toBe(1)
+  })
 })

frontend/src/routes/Governance/overview/Overview.tsx

@@ -100,7 +100,7 @@ function useSecurityGroupViolations(group: string, policies: Policy[]) {
       if (policy.spec.disabled) continue
       const annotation = policy.metadata.annotations?.[`policy.open-cluster-management.io/${group}`]
       if (!annotation) continue
-      const names = annotation.split(',')
+      const names = annotation.split(',').map((name) => name.trim())
       for (const name of names) {
         let v = clusterViolations[name]
         if (!v) {

frontend/src/routes/Governance/overview/SecurityGroupPolicySummarySidebar.tsx

@@ -36,7 +36,7 @@ export function SecurityGroupPolicySummarySidebar(props: {
       if (!annotation) {
         return false
       }
-      const names = annotation.split(',')
+      const names = annotation.split(',').map((name) => name.trim())
       for (const name of names) {
         if (name === violation.name && policy.status?.compliant) {
           return true