fix(deploy): 使用 Server-Side Apply 安装大型 CRD

cert-manager、CloudNativePG 与 Barman 清单改用 server-side apply,避免 CNPG CRD 的 last-applied annotation 超过 Kubernetes 256KiB 限制;force-conflicts 仅用于已固定 checksum 的 operator 清单。

验证:cert-manager 组件已实际滚动成功,CNPG 客户端 apply 在 annotation 门禁处复现。
This commit is contained in:
2026-07-28 05:00:52 +08:00
parent 19ce2d4272
commit 44915c1343
+3 -3
View File
@@ -136,13 +136,13 @@ source_sha=$1
mode=$2
kubectl='k3s kubectl'
$kubectl apply -f /root/cert-manager.yaml >/dev/null
$kubectl apply --server-side --force-conflicts -f /root/cert-manager.yaml >/dev/null
$kubectl rollout status deployment/cert-manager -n cert-manager --timeout=180s
$kubectl rollout status deployment/cert-manager-webhook -n cert-manager --timeout=180s
$kubectl rollout status deployment/cert-manager-cainjector -n cert-manager --timeout=180s
$kubectl apply -f /root/cnpg.yaml >/dev/null
$kubectl apply --server-side --force-conflicts -f /root/cnpg.yaml >/dev/null
$kubectl rollout status deployment/cnpg-controller-manager -n cnpg-system --timeout=180s
$kubectl apply -f /root/barman.yaml >/dev/null
$kubectl apply --server-side --force-conflicts -f /root/barman.yaml >/dev/null
$kubectl rollout status deployment/barman-cloud -n cnpg-system --timeout=180s
$kubectl create namespace easyai --dry-run=client -o yaml | $kubectl apply -f - >/dev/null