fix(acceptance): 打通本地集群内验收链路

为本地三节点验收补齐 Gateway 内部 DNS、TLS CA 信任与端口映射，并让仅限验收命名空间的网络故障代理以所需 UID 获取 NET_ADMIN。\n\n验证：bash -n、ShellCheck、K3d 三节点实测。

deploy/kubernetes/local-acceptance/cluster-dns.yaml

@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: coredns-custom
+  namespace: kube-system
+data:
+  gateway.override: |
+    rewrite name exact gateway.easyai.local easyai-acceptance-edge-ningbo.easyai.svc.cluster.local

deploy/kubernetes/local-acceptance/support-services.yaml

@@ -162,6 +162,7 @@ spec:
               cpu: 250m
               memory: 128Mi
           securityContext:
+            runAsUser: 0
             allowPrivilegeEscalation: false
             capabilities:
               add: ["NET_ADMIN"]
@@ -226,6 +227,7 @@ spec:
               cpu: 250m
               memory: 128Mi
           securityContext:
+            runAsUser: 0
             allowPrivilegeEscalation: false
             capabilities:
               add: ["NET_ADMIN"]
@@ -291,6 +293,7 @@ spec:
               cpu: 250m
               memory: 128Mi
           securityContext:
+            runAsUser: 0
             allowPrivilegeEscalation: false
             capabilities:
               add: ["NET_ADMIN"]

deploy/kubernetes/local-acceptance/tls-edges.yaml

@@ -92,7 +92,7 @@ spec:
     easyai.io/site: ningbo
   ports:
     - name: https
-      port: 8443
+      port: 443
       targetPort: https
       nodePort: 31088
 ---
@@ -167,6 +167,6 @@ spec:
     easyai.io/site: hongkong
   ports:
     - name: https
-      port: 8443
+      port: 443
       targetPort: https
       nodePort: 31089