fix(release): 补齐香港 Worker 权限与精确回滚
生产容量控制器原 Role 仅允许访问宁波 Worker,香港 Worker 启用后导致 reconciliation 返回 403。补齐香港 Deployment 及 scale 子资源权限。 同时将失败发布的 Deployment 恢复从合并式 apply 改为基于资源版本的精确 replace,并优先删除发布前不存在的站点,避免新增环境变量残留导致回滚卡死。 验证:bash -n、ShellCheck、cluster release helper、manual release 与差异检查均通过。
This commit is contained in:
@@ -48,11 +48,11 @@ metadata:
|
||||
rules:
|
||||
- apiGroups: ["apps"]
|
||||
resources: ["deployments"]
|
||||
resourceNames: ["easyai-worker-ningbo"]
|
||||
resourceNames: ["easyai-worker-ningbo", "easyai-worker-hongkong"]
|
||||
verbs: ["get"]
|
||||
- apiGroups: ["apps"]
|
||||
resources: ["deployments/scale"]
|
||||
resourceNames: ["easyai-worker-ningbo"]
|
||||
resourceNames: ["easyai-worker-ningbo", "easyai-worker-hongkong"]
|
||||
verbs: ["get", "update", "patch"]
|
||||
- apiGroups: [""]
|
||||
resources: ["pods"]
|
||||
|
||||
Reference in New Issue
Block a user