feat(cluster): 接入深圳专用 Worker 节点

新增深圳 K3s agent 与四节点 WireGuard 全互联接入脚本，将深圳归入香港逻辑 Worker 池并用污点限制为 Worker 专用。\n\n生产验收支持宁波 0、香港逻辑池 2 的双物理节点基线，补充副本拓扑分散、容量档位、链路巡检和零副本站点校验。\n\n已通过 Go 全量测试、go vet、govulncheck、迁移安全检查、ShellCheck、发布脚本测试、前后端 lint/test/build、Compose 与 Kubernetes 渲染校验。
2026-08-01 09:38:10 +08:00
parent 132cda35d8
commit 70b0ffb9ae
12 changed files with 539 additions and 87 deletions
@@ -149,9 +149,11 @@ function validate(manifest) {
        !Number.isInteger(manifest.certification.workerInstanceSlots) ||
        manifest.certification.workerInstanceSlots < 1 ||
        !Number.isInteger(manifest.certification.workerMaxReplicasNingbo) ||
-        manifest.certification.workerMaxReplicasNingbo < 1 ||
+        manifest.certification.workerMaxReplicasNingbo < 0 ||
        !Number.isInteger(manifest.certification.workerMaxReplicasHongkong) ||
-        manifest.certification.workerMaxReplicasHongkong < 1) {
+        manifest.certification.workerMaxReplicasHongkong < 0 ||
+        manifest.certification.workerMaxReplicasNingbo +
+          manifest.certification.workerMaxReplicasHongkong < 1) {
      fail('certification record is invalid')
    }
  }