feat(cluster): 接入深圳专用 Worker 节点

新增深圳 K3s agent 与四节点 WireGuard 全互联接入脚本,将深圳归入香港逻辑 Worker 池并用污点限制为 Worker 专用。\n\n生产验收支持宁波 0、香港逻辑池 2 的双物理节点基线,补充副本拓扑分散、容量档位、链路巡检和零副本站点校验。\n\n已通过 Go 全量测试、go vet、govulncheck、迁移安全检查、ShellCheck、发布脚本测试、前后端 lint/test/build、Compose 与 Kubernetes 渲染校验。
This commit is contained in:
2026-08-01 09:38:10 +08:00
parent 132cda35d8
commit 70b0ffb9ae
12 changed files with 539 additions and 87 deletions
+2 -1
View File
@@ -151,11 +151,12 @@ RELEASE_ACCEPTANCE_RUN_ID=11111111-1111-4111-8111-111111111111 \
RELEASE_CONFIG_HASH=$(printf '3%.0s' {1..64}) \
RELEASE_CAPACITY_PROFILE=P24 \
RELEASE_WORKER_INSTANCE_SLOTS=24 \
RELEASE_WORKER_MAX_REPLICAS_NINGBO=1 \
RELEASE_WORKER_MAX_REPLICAS_NINGBO=0 \
RELEASE_WORKER_MAX_REPLICAS_HONGKONG=2 \
node "$root/scripts/release-manifest.mjs" record-certification "$recorded" "$certified" >/dev/null
node "$root/scripts/release-manifest.mjs" validate "$certified" >/dev/null
[[ $(node "$root/scripts/release-manifest.mjs" get "$certified" certification.capacityProfile) == P24 ]]
[[ $(node "$root/scripts/release-manifest.mjs" get "$certified" certification.workerMaxReplicasNingbo) == 0 ]]
sensitive=$tmp/sensitive.json
node -e 'const fs=require("fs"); const value=JSON.parse(fs.readFileSync(process.argv[1])); value.accessToken="forbidden"; fs.writeFileSync(process.argv[2], JSON.stringify(value))' "$manifest" "$sensitive"