feat: 新增 18 个 K8s 资源配置模板

工作负载: Pod, StatefulSet, DaemonSet, Job, CronJob 服务发现: Ingress 存储管理: PersistentVolume, PersistentVolumeClaim, StorageClass 配置与密钥: ConfigMap, Secret 安全与权限: ServiceAccount, Role, ClusterRole, RoleBinding, ClusterRoleBinding, NetworkPolicy 集群管理: Namespace 总计支持 26 个组件，覆盖 K8s 核心资源全谱
2026-07-18 19:39:45 +08:00
parent 4c25ae183e
commit 4f702b833a
20 changed files with 3455 additions and 15 deletions
@@ -0,0 +1,122 @@
+// K8s ServiceAccount Schema - 由 ConfTemplate 生成
+// 生成时间: 自动生成
+
+export const k8sServiceAccountSchema = {
+  id: 'k8s-serviceaccount',
+  name: 'K8s ServiceAccount',
+  icon: 'User',
+  category: '云原生',
+  description: 'Kubernetes 服务账户，用于 Pod 的身份认证',
+  format: 'yaml',
+  fileName: 'serviceaccount.yaml',
+  groups: [
+    {
+      title: '基础信息',
+      fields: [
+        {
+          key: 'name',
+          label: 'ServiceAccount 名称',
+          type: 'text',
+          placeholder: 'my-serviceaccount',
+          default: 'my-serviceaccount',
+          required: true,
+          tip: '将用作 ServiceAccount 的 metadata.name',
+        },
+        {
+          key: 'namespace',
+          label: '命名空间',
+          type: 'text',
+          placeholder: 'default',
+          default: 'default',
+        },
+      ],
+    },
+    {
+      title: '账户配置',
+      fields: [
+        {
+          key: 'automountServiceAccountToken',
+          label: '自动挂载 Token',
+          type: 'switch',
+          default: true,
+          tip: '自动将 API Token 挂载到使用此 ServiceAccount 的 Pod',
+        },
+        {
+          key: 'enableImagePullSecrets',
+          label: '配置镜像拉取 Secret',
+          type: 'switch',
+          default: false,
+          tip: '为此 ServiceAccount 配置私有镜像仓库认证',
+        },
+        {
+          key: 'imagePullSecretName',
+          label: '镜像拉取 Secret 名称',
+          type: 'text',
+          placeholder: 'my-registry-secret',
+          default: '',
+          dependsOn: { key: 'enableImagePullSecrets', value: true },
+          tip: '已存在的 docker-registry Secret 名称',
+        },
+      ],
+    },
+  ],
+}
+
+function toYaml(obj, indent = 0) {
+  const lines = []
+  const prefix = '  '.repeat(indent)
+
+  for (const [key, value] of Object.entries(obj)) {
+    if (value === null || value === undefined || value === '') continue
+
+    if (Array.isArray(value)) {
+      lines.push(`${prefix}${key}:`)
+      for (const item of value) {
+        if (typeof item === 'object' && item !== null) {
+          const entries = Object.entries(item).filter(([, v]) => v !== null && v !== undefined && v !== '')
+          if (entries.length === 0) continue
+          const first = entries[0]
+          lines.push(`${prefix}  - ${first[0]}: ${first[1]}`)
+          for (let i = 1; i < entries.length; i++) {
+            lines.push(`${prefix}    ${entries[i][0]}: ${entries[i][1]}`)
+          }
+        } else {
+          lines.push(`${prefix}  - ${item}`)
+        }
+      }
+    } else if (typeof value === 'object') {
+      lines.push(`${prefix}${key}:`)
+      lines.push(toYaml(value, indent + 1))
+    } else {
+      lines.push(`${prefix}${key}: ${value}`)
+    }
+  }
+
+  return lines.join('\n')
+}
+
+export function generateK8sServiceAccountYaml(config) {
+  const sa = {
+    apiVersion: 'v1',
+    kind: 'ServiceAccount',
+    metadata: {
+      name: config.name,
+      namespace: config.namespace,
+    },
+  }
+
+  if (config.automountServiceAccountToken === false) {
+    sa.automountServiceAccountToken = false
+  }
+
+  if (config.enableImagePullSecrets && config.imagePullSecretName) {
+    sa.imagePullSecrets = [{ name: config.imagePullSecretName }]
+  }
+
+  const header = `# K8s ServiceAccount - 由 ConfTemplate 生成
+# 生成时间: ${new Date().toLocaleString('zh-CN')}
+# 部署命令: kubectl apply -f ${config.fileName || 'serviceaccount.yaml'}
+`
+
+  return header + '\n' + toYaml(sa)
+}