fix: 注册 Dockerfile 到 Schema 中心

Dockerfile 支持:
- 基础镜像 (FROM) + 多阶段构建 + 平台架构
- 元数据 LABEL / 构建参数 ARG
- 环境变量 ENV / 工作目录 WORKDIR
- 文件复制 COPY + chown/chmod + ADD (自动解压/URL)
- 依赖安装: apk/apt/yum/dnf 包管理器 + 应用依赖 + 构建命令
- 端口 EXPOSE / 数据卷 VOLUME
- 用户 USER (非 root 运行)
- 健康检查 HEALTHCHECK (interval/timeout/retries/start-period)
- 入口 ENTRYPOINT / CMD (exec/shell 格式)
- 停止信号 STOPSIGNAL / Shell 指令

src/App.vue

@@ -1,21 +1,65 @@
 <template>
   <div class="app-layout">
-    <Sidebar v-model="activeSchemaId" />
+    <!-- 移动端顶部栏 -->
-    <div class="main-content">
+    <div class="mobile-header">
+      <button class="hamburger" @click="sidebarOpen = !sidebarOpen">
+        <el-icon :size="22"><Expand /></el-icon>
+      </button>
+      <div class="mobile-logo">
+        <h1>ConfTemplate</h1>
+      </div>
+      <el-tag size="small" type="info">{{ currentSchema.name }}</el-tag>
+    </div>
+
+    <!-- 遮罩层 -->
+    <div
+      v-if="sidebarOpen"
+      class="sidebar-overlay"
+      @click="sidebarOpen = false"
+    />
+
+    <!-- 侧边栏 -->
+    <div class="sidebar-wrapper" :class="{ open: sidebarOpen }">
+      <Sidebar
+        v-model="activeSchemaId"
+        @select="sidebarOpen = false"
+      />
+    </div>
+
+    <!-- 移动端 Tab 切换 -->
+    <div class="mobile-tabs">
+      <button
+        :class="{ active: activeTab === 'form' }"
+        @click="activeTab = 'form'"
+      >
+        <el-icon><Edit /></el-icon> 配置表单
+      </button>
+      <button
+        :class="{ active: activeTab === 'preview' }"
+        @click="activeTab = 'preview'"
+      >
+        <el-icon><Document /></el-icon> 代码预览
+      </button>
+    </div>
+
+    <!-- 主内容区 -->
+    <div class="main-content" :class="{ 'mobile-hidden': activeTab !== 'form' }">
       <ConfigForm
         :key="activeSchemaId"
         :schema="currentSchema"
         @update:config="onConfigUpdate"
       />
     </div>
-    <div class="preview-content">
+
+    <div class="preview-content" :class="{ 'mobile-hidden': activeTab !== 'preview' }">
       <CodePreview :code="generatedCode" :schema="currentSchema" />
     </div>
   </div>
 </template>
 
 <script setup>
-import { ref, computed } from 'vue'
+import { ref, computed, watch } from 'vue'
+import { Expand, Edit, Document } from '@element-plus/icons-vue'
 import Sidebar from './components/Sidebar.vue'
 import ConfigForm from './components/ConfigForm.vue'
 import CodePreview from './components/CodePreview.vue'
@@ -23,9 +67,18 @@ import { schemas, generators, getDefaultValues } from './schemas'
 
 const activeSchemaId = ref('nginx')
 const currentConfig = ref({})
+const sidebarOpen = ref(false)
+const activeTab = ref('form')
 
 const currentSchema = computed(() => schemas[activeSchemaId.value])
 
+// 当 schema 切换时，立即用新 schema 的默认值重置 config
+watch(activeSchemaId, (newId) => {
+  currentConfig.value = getDefaultValues(schemas[newId])
+  // 移动端切换组件后自动切到表单 tab
+  activeTab.value = 'form'
+})
+
 const generatedCode = computed(() => {
   const gen = generators[activeSchemaId.value]
   if (!gen) return ''
@@ -54,6 +107,7 @@ html, body, #app {
   font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif;
 }
 
+/* ===== 桌面端布局 ===== */
 .app-layout {
   display: flex;
   height: 100vh;
@@ -75,6 +129,21 @@ html, body, #app {
   overflow: hidden;
 }
 
+/* 移动端顶栏 - 默认隐藏 */
+.mobile-header {
+  display: none;
+}
+
+/* 遮罩层 - 默认隐藏 */
+.sidebar-overlay {
+  display: none;
+}
+
+/* 移动端 Tab - 默认隐藏 */
+.mobile-tabs {
+  display: none;
+}
+
 /* Custom scrollbar */
 ::-webkit-scrollbar {
   width: 6px;
@@ -106,4 +175,136 @@ html, body, #app {
 .el-select {
   width: 100%;
 }
+
+/* ===== 平板端 (<= 1024px) ===== */
+@media (max-width: 1024px) {
+  .main-content {
+    flex: 0 0 360px;
+    min-width: 320px;
+    max-width: 400px;
+  }
+}
+
+/* ===== 移动端 (<= 768px) ===== */
+@media (max-width: 768px) {
+  .app-layout {
+    flex-direction: column;
+    position: relative;
+  }
+
+  /* 移动端顶栏 */
+  .mobile-header {
+    display: flex;
+    align-items: center;
+    gap: 10px;
+    padding: 10px 14px;
+    background: #1a1a2e;
+    color: #fff;
+    flex-shrink: 0;
+    z-index: 100;
+  }
+
+  .hamburger {
+    background: none;
+    border: none;
+    color: #fff;
+    cursor: pointer;
+    padding: 6px;
+    border-radius: 6px;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    transition: background 0.2s;
+  }
+
+  .hamburger:hover {
+    background: rgba(255, 255, 255, 0.1);
+  }
+
+  .mobile-logo h1 {
+    font-size: 16px;
+    font-weight: 700;
+    background: linear-gradient(135deg, #667eea, #764ba2);
+    -webkit-background-clip: text;
+    -webkit-text-fill-color: transparent;
+  }
+
+  /* 遮罩层 */
+  .sidebar-overlay {
+    display: block;
+    position: fixed;
+    top: 0;
+    left: 0;
+    right: 0;
+    bottom: 0;
+    background: rgba(0, 0, 0, 0.5);
+    z-index: 199;
+  }
+
+  /* 侧边栏变为抽屉 */
+  .sidebar-wrapper {
+    position: fixed;
+    top: 0;
+    left: -280px;
+    bottom: 0;
+    z-index: 200;
+    transition: left 0.3s ease;
+  }
+
+  .sidebar-wrapper.open {
+    left: 0;
+  }
+
+  /* 移动端 Tab */
+  .mobile-tabs {
+    display: flex;
+    background: #fff;
+    border-bottom: 1px solid #ebeef5;
+    flex-shrink: 0;
+    z-index: 50;
+  }
+
+  .mobile-tabs button {
+    flex: 1;
+    padding: 10px;
+    border: none;
+    background: none;
+    font-size: 13px;
+    font-weight: 500;
+    color: #909399;
+    cursor: pointer;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    gap: 5px;
+    border-bottom: 2px solid transparent;
+    transition: all 0.2s;
+  }
+
+  .mobile-tabs button.active {
+    color: #667eea;
+    border-bottom-color: #667eea;
+    background: rgba(102, 126, 234, 0.04);
+  }
+
+  /* 主内容区全宽 */
+  .main-content {
+    flex: 1;
+    min-width: 0;
+    max-width: none;
+    border-right: none;
+    overflow: hidden;
+  }
+
+  .preview-content {
+    flex: 1;
+    min-width: 0;
+    overflow: hidden;
+  }
+
+  /* 隐藏非活跃 tab */
+  .mobile-hidden {
+    display: none !important;
+  }
+}
 </style>

src/components/Sidebar.vue

@@ -41,7 +41,7 @@
               :key="itemId"
               class="nav-item"
               :class="{ active: modelValue === itemId }"
-              @click="$emit('update:modelValue', itemId)"
+              @click="$emit('update:modelValue', itemId); $emit('select')"
             >
               <el-icon><component :is="schemas[itemId].icon" /></el-icon>
               <div class="nav-item-info">
@@ -60,7 +60,7 @@
     </div>
 
     <div class="sidebar-footer">
-      <el-text size="small" type="info">v1.0.0 · 纯前端生成 · 59 个组件</el-text>
+      <el-text size="small" type="info">v1.0.0 · 纯前端生成 · 60 个组件</el-text>
     </div>
   </div>
 </template>
@@ -74,7 +74,7 @@ const props = defineProps({
   modelValue: String,
 })
 
-defineEmits(['update:modelValue'])
+const emit = defineEmits(['update:modelValue', 'select'])
 
 const searchQuery = ref('')
 

src/main.js

@@ -5,6 +5,11 @@ import * as ElementPlusIconsVue from '@element-plus/icons-vue'
 import App from './App.vue'
 
 const app = createApp(App)
+
+app.config.errorHandler = (err, instance, info) => {
+  console.error('Vue Error:', err, info)
+}
+
 app.use(ElementPlus, { size: 'default' })
 
 for (const [key, component] of Object.entries(ElementPlusIconsVue)) {

src/schemas/bind.js

@@ -174,7 +174,7 @@ export function generateBindConf(config) {
   lines.push(`  recursion ${config.recursion ? 'yes' : 'no'};`)
   lines.push(``)
   lines.push(`  forwarders {`)
-  const forwarders = config.forwarders.split(';').map((s) => s.trim()).filter(Boolean)
+  const forwarders = (config.forwarders || '').split(';').map((s) => s.trim()).filter(Boolean)
   forwarders.forEach((f) => {
     lines.push(`    ${f};`)
   })

src/schemas/dockerfile.js

@@ -0,0 +1,364 @@
+export const dockerfileSchema = {
+  id: 'dockerfile',
+  name: 'Dockerfile',
+  icon: 'Box',
+  category: '容器化',
+  description: 'Docker 容器镜像构建文件',
+  format: 'dockerfile',
+  fileName: 'Dockerfile',
+  groups: [
+    {
+      title: '基础镜像',
+      fields: [
+        { key: 'baseImage', label: '基础镜像', type: 'text', placeholder: 'nginx:1.24-alpine', default: 'nginx:1.24-alpine', required: true, tip: 'FROM 指令' },
+        { key: 'fromPlatform', label: '平台架构', type: 'select', options: [
+          { label: '不限制', value: '' },
+          { label: 'linux/amd64', value: 'linux/amd64' },
+          { label: 'linux/arm64', value: 'linux/arm64' },
+        ], default: '', tip: '多架构构建时指定' },
+        { key: 'enableMultiStage', label: '多阶段构建', type: 'switch', default: false, tip: '分离构建和运行阶段' },
+        { key: 'builderImage', label: '构建阶段镜像', type: 'text', placeholder: 'node:18-alpine', default: 'node:18-alpine', dependsOn: { key: 'enableMultiStage', value: true } },
+        { key: 'builderAs', label: '构建阶段别名', type: 'text', default: 'builder', dependsOn: { key: 'enableMultiStage', value: true } },
+      ],
+    },
+    {
+      title: '元数据 (LABEL)',
+      fields: [
+        { key: 'enableLabels', label: '添加标签', type: 'switch', default: false },
+        { key: 'labelMaintainer', label: '维护者', type: 'text', placeholder: 'team@example.com', default: 'team@example.com', dependsOn: { key: 'enableLabels', value: true } },
+        { key: 'labelVersion', label: '版本', type: 'text', placeholder: '1.0.0', default: '1.0.0', dependsOn: { key: 'enableLabels', value: true } },
+        { key: 'labelDescription', label: '描述', type: 'text', placeholder: 'My application', default: '', dependsOn: { key: 'enableLabels', value: true } },
+      ],
+    },
+    {
+      title: '构建参数 (ARG)',
+      fields: [
+        { key: 'enableArgs', label: '定义构建参数', type: 'switch', default: false, tip: '仅在 docker build --build-arg 时生效' },
+        { key: 'args', label: '参数列表 (KEY=VALUE)', type: 'text', placeholder: 'APP_VERSION=1.0.0\nNODE_ENV=production', default: 'APP_VERSION=1.0.0', dependsOn: { key: 'enableArgs', value: true }, tip: '每行一个，格式 KEY 或 KEY=默认值' },
+      ],
+    },
+    {
+      title: '环境变量 (ENV)',
+      fields: [
+        { key: 'enableEnv', label: '设置环境变量', type: 'switch', default: false },
+        { key: 'envVars', label: '环境变量 (KEY=VALUE)', type: 'text', placeholder: 'NODE_ENV=production\nAPP_PORT=8080', default: 'NODE_ENV=production\nAPP_PORT=8080', dependsOn: { key: 'enableEnv', value: true }, tip: '每行一个，格式 KEY=VALUE' },
+      ],
+    },
+    {
+      title: '工作目录与用户',
+      fields: [
+        { key: 'enableWorkdir', label: '设置工作目录', type: 'switch', default: true },
+        { key: 'workdir', label: '工作目录', type: 'text', default: '/app', dependsOn: { key: 'enableWorkdir', value: true } },
+        { key: 'enableUser', label: '切换运行用户', type: 'switch', default: false, tip: '生产环境建议使用非 root 用户' },
+        { key: 'userName', label: '用户名或 UID', type: 'text', placeholder: '1001:1001', default: '1001:1001', dependsOn: { key: 'enableUser', value: true } },
+        { key: 'enableUseradd', label: '创建用户', type: 'switch', default: false, dependsOn: { key: 'enableUser', value: true }, tip: '在 RUN 中创建用户' },
+        { key: 'createUserName', label: '用户名', type: 'text', default: 'appuser', dependsOn: { key: 'enableUseradd', value: true } },
+      ],
+    },
+    {
+      title: '文件复制',
+      fields: [
+        { key: 'enableCopy', label: '复制文件', type: 'switch', default: true },
+        { key: 'copySrc', label: '源路径', type: 'text', placeholder: '. 或 ./dist', default: '.', dependsOn: { key: 'enableCopy', value: true } },
+        { key: 'copyDest', label: '目标路径', type: 'text', placeholder: '/app', default: '/app', dependsOn: { key: 'enableCopy', value: true } },
+        { key: 'enableCopyChown', label: '设置文件所有者', type: 'switch', default: false, dependsOn: { key: 'enableCopy', value: true } },
+        { key: 'copyChown', label: '所有者', type: 'text', placeholder: '1001:1001', default: '1001:1001', dependsOn: { key: 'enableCopyChown', value: true } },
+        { key: 'enableCopyChmod', label: '设置文件权限', type: 'switch', default: false, dependsOn: { key: 'enableCopy', value: true } },
+        { key: 'copyChmod', label: '权限', type: 'text', placeholder: '755', default: '755', dependsOn: { key: 'enableCopyChmod', value: true } },
+        { key: 'enableAdd', label: '使用 ADD (自动解压/URL)', type: 'switch', default: false, tip: '需要解压 tar 或下载远程文件时使用' },
+        { key: 'addSrc', label: 'ADD 源', type: 'text', placeholder: 'https://example.com/app.tar.gz', default: '', dependsOn: { key: 'enableAdd', value: true } },
+        { key: 'addDest', label: 'ADD 目标', type: 'text', default: '/app/', dependsOn: { key: 'enableAdd', value: true } },
+      ],
+    },
+    {
+      title: '依赖安装 (RUN)',
+      fields: [
+        { key: 'packageManager', label: '包管理器', type: 'select', options: [
+          { label: '不安装系统包', value: 'none' },
+          { label: 'apk (Alpine)', value: 'apk' },
+          { label: 'apt (Debian/Ubuntu)', value: 'apt' },
+          { label: 'yum (CentOS/RHEL)', value: 'yum' },
+          { label: 'dnf (Fedora)', value: 'dnf' },
+        ], default: 'none' },
+        { key: 'systemPackages', label: '系统包 (空格分隔)', type: 'text', placeholder: 'curl wget tzdata', default: 'curl ca-certificates tzdata', dependsOn: { key: 'packageManager', valueNotIn: ['none'] } },
+        { key: 'enableAppInstall', label: '安装应用依赖', type: 'switch', default: false, tip: 'npm install / pip install / go build 等' },
+        { key: 'appInstallCmd', label: '安装命令', type: 'text', placeholder: 'npm ci --only=production', default: 'npm ci --only=production', dependsOn: { key: 'enableAppInstall', value: true } },
+        { key: 'enableBuildCmd', label: '构建命令', type: 'switch', default: false, tip: 'npm run build / go build / mvn package 等' },
+        { key: 'buildCmd', label: '构建命令', type: 'text', placeholder: 'npm run build', default: 'npm run build', dependsOn: { key: 'enableBuildCmd', value: true } },
+        { key: 'enableCleanup', label: '清理缓存', type: 'switch', default: true, dependsOn: { key: 'packageManager', valueNotIn: ['none'] }, tip: '减小镜像体积' },
+      ],
+    },
+    {
+      title: '端口与网络',
+      fields: [
+        { key: 'enableExpose', label: '暴露端口', type: 'switch', default: true },
+        { key: 'exposePorts', label: '端口列表', type: 'text', placeholder: '80 443', default: '80', dependsOn: { key: 'enableExpose', value: true }, tip: '空格分隔多个端口' },
+      ],
+    },
+    {
+      title: '健康检查 (HEALTHCHECK)',
+      fields: [
+        { key: 'enableHealthcheck', label: '添加健康检查', type: 'switch', default: false },
+        { key: 'healthcheckType', label: '检查方式', type: 'select', options: [
+          { label: 'CMD (自定义命令)', value: 'CMD' },
+          { label: 'NONE (禁用继承的健康检查)', value: 'NONE' },
+        ], default: 'CMD', dependsOn: { key: 'enableHealthcheck', value: true } },
+        { key: 'healthcheckInterval', label: '检查间隔', type: 'text', default: '30s', dependsOn: { key: 'healthcheckType', value: 'CMD' } },
+        { key: 'healthcheckTimeout', label: '超时时间', type: 'text', default: '10s', dependsOn: { key: 'healthcheckType', value: 'CMD' } },
+        { key: 'healthcheckRetries', label: '重试次数', type: 'number', min: 1, max: 10, default: 3, dependsOn: { key: 'healthcheckType', value: 'CMD' } },
+        { key: 'healthcheckStartPeriod', label: '启动等待期', type: 'text', default: '5s', dependsOn: { key: 'healthcheckType', value: 'CMD' } },
+        { key: 'healthcheckCmd', label: '检查命令', type: 'text', placeholder: 'curl -f http://localhost/ || exit 1', default: 'curl -f http://localhost:80/ || exit 1', dependsOn: { key: 'healthcheckType', value: 'CMD' }, required: true },
+      ],
+    },
+    {
+      title: '挂载点与数据卷',
+      fields: [
+        { key: 'enableVolume', label: '声明数据卷', type: 'switch', default: false },
+        { key: 'volumePaths', label: '挂载路径', type: 'text', placeholder: '/data /var/log/app', default: '/data', dependsOn: { key: 'enableVolume', value: true }, tip: '空格分隔多个路径' },
+      ],
+    },
+    {
+      title: '入口与启动',
+      fields: [
+        { key: 'enableEntrypoint', label: '设置 ENTRYPOINT', type: 'switch', default: false, tip: '容器启动时执行的固定命令' },
+        { key: 'entrypointCmd', label: 'ENTRYPOINT 命令', type: 'text', placeholder: '["java", "-jar", "app.jar"]', default: '["node", "server.js"]', dependsOn: { key: 'enableEntrypoint', value: true }, tip: 'JSON 数组格式或 shell 格式' },
+        { key: 'enableCmd', label: '设置 CMD', type: 'switch', default: true, tip: '容器启动时的默认参数' },
+        { key: 'cmdType', label: 'CMD 格式', type: 'select', options: [
+          { label: 'exec 格式 (推荐)', value: 'exec' },
+          { label: 'shell 格式', value: 'shell' },
+        ], default: 'exec', dependsOn: { key: 'enableCmd', value: true } },
+        { key: 'cmdValue', label: 'CMD 内容', type: 'text', placeholder: '["nginx", "-g", "daemon off;"]', default: '["nginx", "-g", "daemon off;"]', dependsOn: { key: 'enableCmd', value: true } },
+      ],
+    },
+    {
+      title: '信号与停止',
+      fields: [
+        { key: 'enableStopSignal', label: '自定义停止信号', type: 'switch', default: false, tip: 'docker stop 发送的信号' },
+        { key: 'stopSignal', label: '停止信号', type: 'select', options: [
+          { label: 'SIGTERM (默认)', value: 'SIGTERM' },
+          { label: 'SIGQUIT', value: 'SIGQUIT' },
+          { label: 'SIGINT', value: 'SIGINT' },
+          { label: 'SIGUSR1', value: 'SIGUSR1' },
+        ], default: 'SIGTERM', dependsOn: { key: 'enableStopSignal', value: true } },
+        { key: 'enableShell', label: '指定 Shell', type: 'switch', default: false, tip: 'SHELL 指令，RUN 使用的 shell' },
+        { key: 'shellPath', label: 'Shell 路径', type: 'text', default: '/bin/sh', dependsOn: { key: 'enableShell', value: true } },
+        { key: 'shellFlag', label: 'Shell 参数', type: 'text', default: '-c', dependsOn: { key: 'enableShell', value: true } },
+      ],
+    },
+  ],
+}
+
+export function generateDockerfile(config) {
+  const lines = []
+  lines.push(`# Dockerfile - 由 ConfTemplate 生成`)
+  lines.push(`# 生成时间: ${new Date().toLocaleString('zh-CN')}`)
+  lines.push(``)
+
+  // Builder stage
+  if (config.enableMultiStage) {
+    lines.push(`# ======================== 构建阶段 ========================`)
+    lines.push(`FROM${config.fromPlatform ? ` --platform=${config.fromPlatform}` : ''} ${config.builderImage} AS ${config.builderAs}`)
+    lines.push(``)
+    if (config.enableWorkdir) {
+      lines.push(`WORKDIR ${config.workdir}`)
+    }
+    lines.push(`COPY . .`)
+    if (config.enableAppInstall && config.appInstallCmd) {
+      lines.push(`RUN ${config.appInstallCmd}`)
+    }
+    if (config.enableBuildCmd && config.buildCmd) {
+      lines.push(`RUN ${config.buildCmd}`)
+    }
+    lines.push(``)
+    lines.push(`# ======================== 运行阶段 ========================`)
+  }
+
+  // FROM
+  const platformArg = config.fromPlatform ? ` --platform=${config.fromPlatform}` : ''
+  if (config.enableMultiStage) {
+    lines.push(`FROM${platformArg} ${config.baseImage}`)
+  } else {
+    lines.push(`FROM${platformArg} ${config.baseImage}`)
+  }
+  lines.push(``)
+
+  // ARG
+  if (config.enableArgs && config.args) {
+    config.args.split('\n').filter(Boolean).forEach(line => {
+      lines.push(`ARG ${line.trim()}`)
+    })
+    lines.push(``)
+  }
+
+  // LABEL
+  if (config.enableLabels) {
+    if (config.labelMaintainer) lines.push(`LABEL maintainer="${config.labelMaintainer}"`)
+    if (config.labelVersion) lines.push(`LABEL version="${config.labelVersion}"`)
+    if (config.labelDescription) lines.push(`LABEL description="${config.labelDescription}"`)
+    lines.push(``)
+  }
+
+  // ENV
+  if (config.enableEnv && config.envVars) {
+    config.envVars.split('\n').filter(Boolean).forEach(line => {
+      lines.push(`ENV ${line.trim()}`)
+    })
+    lines.push(``)
+  }
+
+  // WORKDIR
+  if (config.enableWorkdir) {
+    lines.push(`WORKDIR ${config.workdir}`)
+    lines.push(``)
+  }
+
+  // Package install
+  if (config.packageManager && config.packageManager !== 'none') {
+    const pkgs = (config.systemPackages || '').trim()
+    if (pkgs) {
+      if (config.packageManager === 'apk') {
+        lines.push(`RUN apk add --no-cache ${pkgs}`)
+      } else if (config.packageManager === 'apt') {
+        lines.push(`RUN apt-get update && \\`)
+        lines.push(`    apt-get install -y --no-install-recommends ${pkgs} && \\`)
+        if (config.enableCleanup) {
+          lines.push(`    rm -rf /var/lib/apt/lists/*`)
+        }
+      } else if (config.packageManager === 'yum') {
+        lines.push(`RUN yum install -y ${pkgs} && \\`)
+        if (config.enableCleanup) {
+          lines.push(`    yum clean all && rm -rf /var/cache/yum`)
+        }
+      } else if (config.packageManager === 'dnf') {
+        lines.push(`RUN dnf install -y ${pkgs} && \\`)
+        if (config.enableCleanup) {
+          lines.push(`    dnf clean all && rm -rf /var/cache/dnf`)
+        }
+      }
+      lines.push(``)
+    }
+  }
+
+  // Create user
+  if (config.enableUser && config.enableUseradd && config.createUserName) {
+    lines.push(`RUN addgroup -S ${config.createUserName} && adduser -S ${config.createUserName} -G ${config.createUserName}`)
+    lines.push(``)
+  }
+
+  // COPY from builder stage
+  if (config.enableMultiStage) {
+    if (config.enableCopyChown) {
+      lines.push(`COPY --from=${config.builderAs} --chown=${config.copyChown} ${config.workdir || '/app'} ${config.copyDest}`)
+    } else {
+      lines.push(`COPY --from=${config.builderAs} ${config.workdir || '/app'} ${config.copyDest}`)
+    }
+    lines.push(``)
+  }
+
+  // COPY
+  if (config.enableCopy && !config.enableMultiStage) {
+    let copyFlags = []
+    if (config.enableCopyChown && config.copyChown) copyFlags.push(`--chown=${config.copyChown}`)
+    if (config.enableCopyChmod && config.copyChmod) copyFlags.push(`--chmod=${config.copyChmod}`)
+    const flags = copyFlags.length ? ` ${copyFlags.join(' ')}` : ''
+    lines.push(`COPY${flags} ${config.copySrc} ${config.copyDest}`)
+    lines.push(``)
+  }
+
+  // ADD
+  if (config.enableAdd && config.addSrc) {
+    lines.push(`ADD ${config.addSrc} ${config.addDest}`)
+    lines.push(``)
+  }
+
+  // App install (non-multi-stage)
+  if (!config.enableMultiStage && config.enableAppInstall && config.appInstallCmd) {
+    lines.push(`RUN ${config.appInstallCmd}`)
+    lines.push(``)
+  }
+
+  // Build cmd (non-multi-stage)
+  if (!config.enableMultiStage && config.enableBuildCmd && config.buildCmd) {
+    lines.push(`RUN ${config.buildCmd}`)
+    lines.push(``)
+  }
+
+  // VOLUME
+  if (config.enableVolume && config.volumePaths) {
+    const paths = config.volumePaths.split(/\s+/).filter(Boolean)
+    if (paths.length === 1) {
+      lines.push(`VOLUME ["${paths[0]}"]`)
+    } else {
+      lines.push(`VOLUME [${paths.map(p => `"${p}"`).join(', ')}]`)
+    }
+    lines.push(``)
+  }
+
+  // EXPOSE
+  if (config.enableExpose && config.exposePorts) {
+    lines.push(`EXPOSE ${config.exposePorts}`)
+    lines.push(``)
+  }
+
+  // USER
+  if (config.enableUser) {
+    lines.push(`USER ${config.userName}`)
+    lines.push(``)
+  }
+
+  // HEALTHCHECK
+  if (config.enableHealthcheck) {
+    if (config.healthcheckType === 'NONE') {
+      lines.push(`HEALTHCHECK NONE`)
+    } else {
+      let hc = `HEALTHCHECK`
+      if (config.healthcheckInterval) hc += ` --interval=${config.healthcheckInterval}`
+      if (config.healthcheckTimeout) hc += ` --timeout=${config.healthcheckTimeout}`
+      if (config.healthcheckRetries) hc += ` --retries=${config.healthcheckRetries}`
+      if (config.healthcheckStartPeriod) hc += ` --start-period=${config.healthcheckStartPeriod}`
+      hc += ` CMD ${config.healthcheckCmd}`
+      lines.push(hc)
+    }
+    lines.push(``)
+  }
+
+  // STOPSIGNAL
+  if (config.enableStopSignal) {
+    lines.push(`STOPSIGNAL ${config.stopSignal}`)
+    lines.push(``)
+  }
+
+  // SHELL
+  if (config.enableShell) {
+    lines.push(`SHELL ["${config.shellPath}", "${config.shellFlag}"]`)
+    lines.push(``)
+  }
+
+  // ENTRYPOINT
+  if (config.enableEntrypoint && config.entrypointCmd) {
+    const val = config.entrypointCmd.trim()
+    if (val.startsWith('[')) {
+      lines.push(`ENTRYPOINT ${val}`)
+    } else {
+      lines.push(`ENTRYPOINT ["${val}"]`)
+    }
+    lines.push(``)
+  }
+
+  // CMD
+  if (config.enableCmd && config.cmdValue) {
+    const val = config.cmdValue.trim()
+    if (config.cmdType === 'exec') {
+      if (val.startsWith('[')) {
+        lines.push(`CMD ${val}`)
+      } else {
+        lines.push(`CMD ["${val}"]`)
+      }
+    } else {
+      lines.push(`CMD ${val}`)
+    }
+    lines.push(``)
+  }
+
+  return lines.join('\n')
+}

src/schemas/index.js

@@ -61,6 +61,7 @@ import { etcdSchema, generateEtcdYml } from './etcd'
 // ============ 容器化 ============
 import { dockerSchema, generateDockerDaemonJson } from './docker'
 import { dockerComposeSchema, generateDockerComposeYml } from './docker-compose'
+import { dockerfileSchema, generateDockerfile } from './dockerfile'
 
 // ============ 日志监控 ============
 import { logstashSchema, generateLogstashConf } from './logstash'
@@ -152,6 +153,7 @@ export const schemas = {
   // 容器化
   docker: dockerSchema,
   'docker-compose': dockerComposeSchema,
+  dockerfile: dockerfileSchema,
   // 日志监控
   logstash: logstashSchema,
   kibana: kibanaSchema,
@@ -224,6 +226,7 @@ export const generators = {
   etcd: generateEtcdYml,
   docker: generateDockerDaemonJson,
   'docker-compose': generateDockerComposeYml,
+  dockerfile: generateDockerfile,
   logstash: generateLogstashConf,
   kibana: generateKibanaYml,
   prometheus: generatePrometheusYml,
@@ -326,7 +329,7 @@ export const categories = [
   {
     name: '容器化',
     icon: 'Box',
-    items: ['docker', 'docker-compose'],
+    items: ['docker', 'docker-compose', 'dockerfile'],
   },
   {
     name: '日志监控',
@@ -388,6 +391,7 @@ export function getLanguage(format) {
     properties: 'properties',
     ini: 'ini',
     xml: 'xml',
+    dockerfile: 'dockerfile',
   }
   return map[format] || 'plaintext'
 }

src/schemas/k8s-cronjob.js

@@ -1,9 +1,14 @@
+/**
+ * K8s CronJob 生产级 Schema — 由 ConfTemplate 生成
+ * 增强: 容器端口、资源限制、环境变量、卷挂载、安全上下文、ServiceAccount
+ */
+
 export const k8sCronJobSchema = {
   id: 'k8s-cronjob',
   name: 'K8s CronJob',
   icon: 'Box',
   category: 'K8S 工作负载',
-  description: 'Kubernetes CronJob — 定时调度批处理任务',
+  description: 'Kubernetes CronJob — 定时调度批处理任务（生产级）',
   format: 'yaml',
   fileName: 'cronjob.yaml',
   groups: [
@@ -33,6 +38,17 @@ export const k8sCronJobSchema = {
           default: 'busybox:latest',
           required: true,
         },
+        {
+          key: 'imagePullPolicy',
+          label: '镜像拉取策略',
+          type: 'select',
+          options: [
+            { label: 'IfNotPresent (推荐)', value: 'IfNotPresent' },
+            { label: 'Always (每次拉取)', value: 'Always' },
+            { label: 'Never (仅本地)', value: 'Never' },
+          ],
+          default: 'IfNotPresent',
+        },
         {
           key: 'command',
           label: 'Command',
@@ -118,52 +134,264 @@ export const k8sCronJobSchema = {
           max: 100,
           default: 6,
         },
+        {
+          key: 'activeDeadlineSeconds',
+          label: '超时时间 (秒)',
+          type: 'number',
+          min: 0,
+          max: 86400,
+          default: 0,
+          tip: '0 表示不限制超时',
+        },
+        {
+          key: 'ttlSecondsAfterFinished',
+          label: '自动清理 (秒)',
+          type: 'number',
+          min: 0,
+          max: 86400,
+          default: 0,
+          tip: '完成后自动删除 Job，0 表示保留',
+        },
+      ],
+    },
+    {
+      title: '容器端口',
+      fields: [
+        { key: 'containerPort', label: '容器端口', type: 'number', min: 1, max: 65535, default: 80 },
+        { key: 'portName', label: '端口名称', type: 'text', default: 'http' },
+        { key: 'protocol', label: '协议', type: 'select', options: [{ label: 'TCP', value: 'TCP' }, { label: 'UDP', value: 'UDP' }], default: 'TCP' },
+      ],
+    },
+    {
+      title: '资源限制',
+      fields: [
+        { key: 'cpuRequest', label: 'CPU Requests', type: 'select', options: [
+          { label: '50m', value: '50m' },{ label: '100m', value: '100m' },{ label: '200m', value: '200m' },
+          { label: '500m', value: '500m' },{ label: '1', value: '1' },{ label: '2', value: '2' },
+        ], default: '100m' },
+        { key: 'cpuLimit', label: 'CPU Limits', type: 'select', options: [
+          { label: '200m', value: '200m' },{ label: '500m', value: '500m' },{ label: '1', value: '1' },
+          { label: '2', value: '2' },{ label: '4', value: '4' },
+        ], default: '500m' },
+        { key: 'memoryRequest', label: 'Memory Requests', type: 'select', options: [
+          { label: '64Mi', value: '64Mi' },{ label: '128Mi', value: '128Mi' },{ label: '256Mi', value: '256Mi' },
+          { label: '512Mi', value: '512Mi' },{ label: '1Gi', value: '1Gi' },
+        ], default: '128Mi' },
+        { key: 'memoryLimit', label: 'Memory Limits', type: 'select', options: [
+          { label: '128Mi', value: '128Mi' },{ label: '256Mi', value: '256Mi' },{ label: '512Mi', value: '512Mi' },
+          { label: '1Gi', value: '1Gi' },{ label: '2Gi', value: '2Gi' },{ label: '4Gi', value: '4Gi' },
+        ], default: '256Mi' },
+      ],
+    },
+    {
+      title: '环境变量',
+      fields: [
+        { key: 'enableEnv', label: '定义环境变量', type: 'switch', default: false },
+        { key: 'envVars', label: '环境变量 (KEY=VALUE)', type: 'text', placeholder: 'APP_ENV=production\nLOG_LEVEL=info', default: 'APP_ENV=production\nLOG_LEVEL=info', dependsOn: { key: 'enableEnv', value: true }, tip: '每行一个，格式 KEY=VALUE' },
+        { key: 'enableEnvFromConfigMap', label: '从 ConfigMap 导入', type: 'switch', default: false },
+        { key: 'envFromConfigMapName', label: 'ConfigMap 名称', type: 'text', default: 'my-config', dependsOn: { key: 'enableEnvFromConfigMap', value: true } },
+        { key: 'enableEnvFromSecret', label: '从 Secret 导入', type: 'switch', default: false },
+        { key: 'envFromSecretName', label: 'Secret 名称', type: 'text', default: 'my-secret', dependsOn: { key: 'enableEnvFromSecret', value: true } },
+      ],
+    },
+    {
+      title: '卷挂载',
+      fields: [
+        { key: 'enableVolumeMount', label: '挂载卷', type: 'switch', default: false },
+        { key: 'volumeType', label: '卷类型', type: 'select', options: [
+          { label: 'emptyDir - 临时目录', value: 'emptyDir' },
+          { label: 'PersistentVolumeClaim', value: 'pvc' },
+          { label: 'ConfigMap', value: 'configMap' },
+          { label: 'Secret', value: 'secret' },
+          { label: 'HostPath - 主机路径', value: 'hostPath' },
+        ], default: 'emptyDir', dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'volumeName', label: '卷名称', type: 'text', default: 'data', dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'volumeMountPath', label: '挂载路径', type: 'text', default: '/data', dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'volumeReadOnly', label: '只读挂载', type: 'switch', default: false, dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'pvcClaimName', label: 'PVC 名称', type: 'text', default: 'my-pvc', dependsOn: { key: 'volumeType', value: 'pvc' } },
+        { key: 'configMapName', label: 'ConfigMap 名称', type: 'text', default: 'my-config', dependsOn: { key: 'volumeType', value: 'configMap' } },
+        { key: 'secretVolumeName', label: 'Secret 名称', type: 'text', default: 'my-secret', dependsOn: { key: 'volumeType', value: 'secret' } },
+        { key: 'hostPath', label: '主机路径', type: 'text', default: '/tmp/data', dependsOn: { key: 'volumeType', value: 'hostPath' } },
+      ],
+    },
+    {
+      title: '安全上下文 (Security Context)',
+      fields: [
+        { key: 'enableSecurityContext', label: '启用安全上下文', type: 'switch', default: false },
+        { key: 'runAsUser', label: '运行用户 UID', type: 'number', min: 0, max: 65535, default: 1000, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'runAsGroup', label: '运行用户组 GID', type: 'number', min: 0, max: 65535, default: 1000, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'runAsNonRoot', label: '禁止 Root 运行', type: 'switch', default: true, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'readOnlyRootFilesystem', label: '只读根文件系统', type: 'switch', default: false, dependsOn: { key: 'enableSecurityContext', value: true }, tip: '增强安全性，需要写入的目录用 emptyDir 挂载' },
+        { key: 'allowPrivilegeEscalation', label: '允许提权', type: 'switch', default: false, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'fsGroup', label: '文件系统 GID', type: 'number', min: 0, max: 65535, default: 2000, dependsOn: { key: 'enableSecurityContext', value: true }, tip: '卷文件的所有组' },
+      ],
+    },
+    {
+      title: 'ServiceAccount',
+      fields: [
+        { key: 'serviceAccountName', label: 'ServiceAccount 名称', type: 'text', placeholder: '留空使用 default', default: '', tip: 'RBAC 权限控制' },
       ],
     },
   ],
 }
 
-function toYaml(obj, indent = 0) {
+// ======================== YAML 生成器 ========================
-  const lines = []
-  const prefix = '  '.repeat(indent)
 
-  for (const [key, value] of Object.entries(obj)) {
+function toYaml(obj, indent) {
+  indent = indent || 0
+  var lines = []
+  var prefix = ''
+  for (var p = 0; p < indent; p++) prefix += '  '
+  var keys = Object.keys(obj)
+  for (var ki = 0; ki < keys.length; ki++) {
+    var key = keys[ki]
+    var value = obj[key]
     if (value === null || value === undefined || value === '') continue
-
     if (Array.isArray(value)) {
-      lines.push(`${prefix}${key}:`)
+      lines.push(prefix + key + ':')
-      for (const item of value) {
+      for (var ai = 0; ai < value.length; ai++) {
+        var item = value[ai]
         if (typeof item === 'object' && item !== null) {
-          const entries = Object.entries(item).filter(([, v]) => v !== null && v !== undefined && v !== '')
+          lines.push(renderArrayObject(item, indent + 1))
-          if (entries.length === 0) continue
-          const first = entries[0]
-          lines.push(`${prefix}  - ${first[0]}: ${first[1]}`)
-          for (let i = 1; i < entries.length; i++) {
-            lines.push(`${prefix}    ${entries[i][0]}: ${entries[i][1]}`)
-          }
         } else {
-          lines.push(`${prefix}  - ${item}`)
+          lines.push(prefix + '  - ' + item)
         }
       }
     } else if (typeof value === 'object') {
-      lines.push(`${prefix}${key}:`)
+      lines.push(prefix + key + ':')
       lines.push(toYaml(value, indent + 1))
     } else {
-      lines.push(`${prefix}${key}: ${value}`)
+      lines.push(prefix + key + ': ' + value)
     }
   }
+  return lines.join('\n')
+}
 
+function renderArrayObject(item, indent) {
+  var prefix = ''
+  for (var p = 0; p < indent; p++) prefix += '  '
+  var entries = Object.entries(item).filter(function(pair) { return pair[1] !== null && pair[1] !== undefined && pair[1] !== '' })
+  if (entries.length === 0) return ''
+  var lines = []
+  var first = entries[0]
+  var fk = first[0], fv = first[1]
+  if (Array.isArray(fv)) {
+    lines.push(prefix + '- ' + fk + ':')
+    for (var ai = 0; ai < fv.length; ai++) {
+      var arrItem = fv[ai]
+      if (typeof arrItem === 'object' && arrItem !== null) {
+        lines.push(renderArrayObject(arrItem, indent + 2))
+      } else {
+        lines.push(prefix + '    - ' + arrItem)
+      }
+    }
+  } else if (typeof fv === 'object' && fv !== null) {
+    lines.push(prefix + '- ' + fk + ':')
+    lines.push(toYaml(fv, indent + 2))
+  } else {
+    lines.push(prefix + '- ' + fk + ': ' + fv)
+  }
+  for (var i = 1; i < entries.length; i++) {
+    var k = entries[i][0], v = entries[i][1]
+    if (v === null || v === undefined || v === '') continue
+    if (Array.isArray(v)) {
+      lines.push(prefix + '  ' + k + ':')
+      for (var ai = 0; ai < v.length; ai++) {
+        var arrItem = v[ai]
+        if (typeof arrItem === 'object' && arrItem !== null) {
+          lines.push(renderArrayObject(arrItem, indent + 2))
+        } else {
+          lines.push(prefix + '    - ' + arrItem)
+        }
+      }
+    } else if (typeof v === 'object') {
+      lines.push(prefix + '  ' + k + ':')
+      lines.push(toYaml(v, indent + 2))
+    } else {
+      lines.push(prefix + '  ' + k + ': ' + v)
+    }
+  }
   return lines.join('\n')
 }
 
 export function generateK8sCronJobYaml(config) {
-  const container = {
+  var container = {
     name: config.name,
     image: config.image,
+    imagePullPolicy: config.imagePullPolicy,
     command: config.command.split(' '),
   }
 
-  const cronjob = {
+  // 容器端口
+  if (config.containerPort) {
+    container.ports = [{
+      name: config.portName || 'http',
+      containerPort: config.containerPort,
+      protocol: config.protocol || 'TCP',
+    }]
+  }
+
+  // 资源限制
+  container.resources = {
+    requests: { cpu: config.cpuRequest, memory: config.memoryRequest },
+    limits: { cpu: config.cpuLimit, memory: config.memoryLimit },
+  }
+
+  // 环境变量
+  if (config.enableEnv && config.envVars) {
+    container.env = config.envVars.split('\n').filter(Boolean).map(function(line) {
+      var idx = line.indexOf('=')
+      return { name: line.substring(0, idx).trim(), value: line.substring(idx + 1).trim() }
+    })
+  }
+  if (config.enableEnvFromConfigMap || config.enableEnvFromSecret) {
+    container.envFrom = []
+    if (config.enableEnvFromConfigMap) container.envFrom.push({ configMapRef: { name: config.envFromConfigMapName } })
+    if (config.enableEnvFromSecret) container.envFrom.push({ secretRef: { name: config.envFromSecretName } })
+  }
+
+  // 卷挂载
+  var volumes = []
+  if (config.enableVolumeMount) {
+    container.volumeMounts = [{ name: config.volumeName, mountPath: config.volumeMountPath, readOnly: config.volumeReadOnly || undefined }]
+    var vol = { name: config.volumeName }
+    var vt = config.volumeType
+    if (vt === 'emptyDir') vol.emptyDir = {}
+    else if (vt === 'pvc') vol.persistentVolumeClaim = { claimName: config.pvcClaimName }
+    else if (vt === 'configMap') vol.configMap = { name: config.configMapName }
+    else if (vt === 'secret') vol.secret = { secretName: config.secretVolumeName }
+    else if (vt === 'hostPath') vol.hostPath = { path: config.hostPath, type: 'DirectoryOrCreate' }
+    volumes.push(vol)
+  }
+
+  // Security Context
+  if (config.enableSecurityContext) {
+    container.securityContext = {
+      runAsUser: config.runAsUser,
+      runAsGroup: config.runAsGroup,
+      runAsNonRoot: config.runAsNonRoot,
+      readOnlyRootFilesystem: config.readOnlyRootFilesystem || undefined,
+      allowPrivilegeEscalation: config.allowPrivilegeEscalation,
+    }
+  }
+
+  var podSpec = {
+    containers: [container],
+    restartPolicy: config.restartPolicy,
+  }
+
+  // ServiceAccount
+  if (config.serviceAccountName) podSpec.serviceAccountName = config.serviceAccountName
+
+  // Volumes
+  if (volumes.length) podSpec.volumes = volumes
+
+  // fsGroup
+  if (config.enableSecurityContext && config.fsGroup) {
+    podSpec.securityContext = { fsGroup: config.fsGroup }
+  }
+
+  var cronjob = {
     apiVersion: 'batch/v1',
     kind: 'CronJob',
     metadata: {
@@ -179,18 +407,17 @@ export function generateK8sCronJobYaml(config) {
       jobTemplate: {
         spec: {
           backoffLimit: config.backoffLimit,
+          activeDeadlineSeconds: config.activeDeadlineSeconds > 0 ? config.activeDeadlineSeconds : undefined,
+          ttlSecondsAfterFinished: config.ttlSecondsAfterFinished > 0 ? config.ttlSecondsAfterFinished : undefined,
           template: {
-            spec: {
+            spec: podSpec,
-              containers: [container],
-              restartPolicy: config.restartPolicy,
-            },
           },
         },
       },
     },
   }
 
-  const header = `# K8s CronJob - 由 ConfTemplate 生成\n# 生成时间: ${new Date().toLocaleString('zh-CN')}\n# 部署命令: kubectl apply -f ${config.fileName || 'cronjob.yaml'}\n`
+  var header = '# K8s CronJob - 由 ConfTemplate 生成\n# 生成时间: ' + new Date().toLocaleString('zh-CN') + '\n# 部署命令: kubectl apply -f ' + (config.fileName || 'cronjob.yaml') + '\n'
 
   return header + '\n' + toYaml(cronjob)
 }

src/schemas/k8s-daemonset.js

@@ -10,161 +10,358 @@ export const k8sDaemonSetSchema = {
     {
       title: '基础信息',
       fields: [
-        {
+        { key: 'name', label: 'DaemonSet 名称', type: 'text', placeholder: 'my-daemonset', default: 'my-daemonset', required: true },
-          key: 'name',
+        { key: 'namespace', label: '命名空间', type: 'text', placeholder: 'default', default: 'default' },
-          label: 'DaemonSet 名称',
+        { key: 'appName', label: '应用名称', type: 'text', placeholder: 'my-app', default: 'my-app', required: true },
-          type: 'text',
+        { key: 'image', label: '容器镜像', type: 'text', placeholder: 'fluentd:latest', default: 'fluentd:latest', required: true },
-          placeholder: 'my-daemonset',
+        { key: 'imagePullPolicy', label: '镜像拉取策略', type: 'select', options: [
-          default: 'my-daemonset',
+          { label: 'IfNotPresent (推荐)', value: 'IfNotPresent' },
-          required: true,
+          { label: 'Always (每次拉取)', value: 'Always' },
+          { label: 'Never (仅本地)', value: 'Never' },
+        ], default: 'IfNotPresent' },
+      ],
     },
     {
-          key: 'namespace',
+      title: '容器端口',
-          label: '命名空间',
+      fields: [
-          type: 'text',
+        { key: 'containerPort', label: '容器端口', type: 'number', min: 1, max: 65535, default: 8080 },
-          placeholder: 'default',
+        { key: 'portName', label: '端口名称', type: 'text', default: 'http' },
-          default: 'default',
+        { key: 'protocol', label: '协议', type: 'select', options: [{ label: 'TCP', value: 'TCP' }, { label: 'UDP', value: 'UDP' }], default: 'TCP' },
-        },
-        {
-          key: 'appName',
-          label: '应用名称',
-          type: 'text',
-          placeholder: 'my-app',
-          default: 'my-app',
-          required: true,
-        },
-        {
-          key: 'image',
-          label: '容器镜像',
-          type: 'text',
-          placeholder: 'fluentd:latest',
-          default: 'fluentd:latest',
-          required: true,
-        },
-        {
-          key: 'containerPort',
-          label: '容器端口',
-          type: 'number',
-          min: 1,
-          max: 65535,
-          default: 8080,
-        },
       ],
     },
     {
       title: '资源限制',
       fields: [
-        {
+        { key: 'cpuRequest', label: 'CPU Requests', type: 'select', options: [
-          key: 'cpuRequest',
+          { label: '50m', value: '50m' },{ label: '100m', value: '100m' },{ label: '200m', value: '200m' },
-          label: 'CPU Requests',
+          { label: '500m', value: '500m' },{ label: '1', value: '1' },
-          type: 'select',
+        ], default: '100m' },
-          options: [
+        { key: 'cpuLimit', label: 'CPU Limits', type: 'select', options: [
-            { label: '50m', value: '50m' },
+          { label: '200m', value: '200m' },{ label: '500m', value: '500m' },{ label: '1', value: '1' },
-            { label: '100m', value: '100m' },
-            { label: '200m', value: '200m' },
-            { label: '500m', value: '500m' },
-            { label: '1', value: '1' },
-          ],
-          default: '100m',
-        },
-        {
-          key: 'cpuLimit',
-          label: 'CPU Limits',
-          type: 'select',
-          options: [
-            { label: '200m', value: '200m' },
-            { label: '500m', value: '500m' },
-            { label: '1', value: '1' },
           { label: '2', value: '2' },
-          ],
+        ], default: '500m' },
-          default: '500m',
+        { key: 'memoryRequest', label: 'Memory Requests', type: 'select', options: [
-        },
+          { label: '64Mi', value: '64Mi' },{ label: '128Mi', value: '128Mi' },{ label: '256Mi', value: '256Mi' },
-        {
-          key: 'memoryRequest',
-          label: 'Memory Requests',
-          type: 'select',
-          options: [
-            { label: '64Mi', value: '64Mi' },
-            { label: '128Mi', value: '128Mi' },
-            { label: '256Mi', value: '256Mi' },
-            { label: '512Mi', value: '512Mi' },
-          ],
-          default: '128Mi',
-        },
-        {
-          key: 'memoryLimit',
-          label: 'Memory Limits',
-          type: 'select',
-          options: [
-            { label: '128Mi', value: '128Mi' },
-            { label: '256Mi', value: '256Mi' },
           { label: '512Mi', value: '512Mi' },
+        ], default: '128Mi' },
+        { key: 'memoryLimit', label: 'Memory Limits', type: 'select', options: [
+          { label: '128Mi', value: '128Mi' },{ label: '256Mi', value: '256Mi' },{ label: '512Mi', value: '512Mi' },
           { label: '1Gi', value: '1Gi' },
-          ],
+        ], default: '256Mi' },
-          default: '256Mi',
-        },
       ],
     },
     {
       title: '节点调度',
       fields: [
-        {
+        { key: 'hostNetwork', label: '使用主机网络', type: 'switch', default: false, tip: 'Pod 将使用宿主机网络命名空间' },
-          key: 'hostNetwork',
+        { key: 'tolerationsEnabled', label: '添加 Toleration', type: 'switch', default: false, tip: '允许在有污点的节点上运行' },
-          label: '使用主机网络',
+        { key: 'tolerationKey', label: 'Toleration Key', type: 'text', placeholder: 'node-role.kubernetes.io/master', default: '', dependsOn: { key: 'tolerationsEnabled', value: true } },
-          type: 'switch',
+        { key: 'tolerationValue', label: 'Toleration Value', type: 'text', placeholder: '', default: '', dependsOn: { key: 'tolerationsEnabled', value: true } },
-          default: false,
-          tip: 'Pod 将使用宿主机网络命名空间',
-        },
-        {
-          key: 'tolerationsEnabled',
-          label: '添加 Toleration',
-          type: 'switch',
-          default: false,
-          tip: '允许在有污点的节点上运行',
-        },
-        {
-          key: 'tolerationKey',
-          label: 'Toleration Key',
-          type: 'text',
-          placeholder: 'node-role.kubernetes.io/master',
-          default: '',
-          dependsOn: { key: 'tolerationsEnabled', value: true },
-        },
-        {
-          key: 'tolerationValue',
-          label: 'Toleration Value',
-          type: 'text',
-          placeholder: '',
-          default: '',
-          dependsOn: { key: 'tolerationsEnabled', value: true },
-        },
       ],
     },
     {
       title: '更新策略',
       fields: [
-        {
+        { key: 'updateStrategy', label: '更新策略', type: 'select', options: [
-          key: 'updateStrategy',
-          label: '更新策略',
-          type: 'select',
-          options: [
           { label: 'RollingUpdate - 滚动更新 (推荐)', value: 'RollingUpdate' },
           { label: 'OnDelete - 手动删除触发', value: 'OnDelete' },
+        ], default: 'RollingUpdate' },
       ],
-          default: 'RollingUpdate',
     },
+    {
+      title: '启动探针 (Startup Probe)',
+      fields: [
+        { key: 'enableStartupProbe', label: '启用启动探针', type: 'switch', default: false, tip: '慢启动容器必备，通过前 liveness/readiness 不会生效' },
+        { key: 'startupProbeType', label: '探针方式', type: 'select', options: [
+          { label: 'HTTP GET', value: 'httpGet' },{ label: 'TCP Socket', value: 'tcpSocket' },{ label: 'Exec Command', value: 'exec' },
+        ], default: 'httpGet', dependsOn: { key: 'enableStartupProbe', value: true } },
+        { key: 'startupPath', label: '检查路径', type: 'text', default: '/healthz', dependsOn: { key: 'startupProbeType', value: 'httpGet' } },
+        { key: 'startupPort', label: '检查端口', type: 'number', min: 1, max: 65535, default: 8080, dependsOn: { key: 'enableStartupProbe', value: true } },
+        { key: 'startupCommand', label: 'Exec 命令', type: 'text', placeholder: 'cat /tmp/healthy', default: 'cat /tmp/healthy', dependsOn: { key: 'startupProbeType', value: 'exec' } },
+        { key: 'startupInitialDelay', label: '初始延迟 (秒)', type: 'number', min: 0, max: 600, default: 0, dependsOn: { key: 'enableStartupProbe', value: true } },
+        { key: 'startupPeriod', label: '检查周期 (秒)', type: 'number', min: 1, max: 300, default: 10, dependsOn: { key: 'enableStartupProbe', value: true } },
+        { key: 'startupFailureThreshold', label: '失败阈值', type: 'number', min: 1, max: 100, default: 30, dependsOn: { key: 'enableStartupProbe', value: true }, tip: '30次×10秒=最多等300秒启动' },
+        { key: 'startupTimeout', label: '超时时间 (秒)', type: 'number', min: 1, max: 60, default: 5, dependsOn: { key: 'enableStartupProbe', value: true } },
+      ],
+    },
+    {
+      title: '存活探针 (Liveness Probe)',
+      fields: [
+        { key: 'enableLivenessProbe', label: '启用存活探针', type: 'switch', default: true, tip: '失败则重启容器' },
+        { key: 'livenessProbeType', label: '探针方式', type: 'select', options: [
+          { label: 'HTTP GET', value: 'httpGet' },{ label: 'TCP Socket', value: 'tcpSocket' },{ label: 'Exec Command', value: 'exec' },
+        ], default: 'httpGet', dependsOn: { key: 'enableLivenessProbe', value: true } },
+        { key: 'livenessPath', label: '检查路径', type: 'text', default: '/healthz', dependsOn: { key: 'livenessProbeType', value: 'httpGet' } },
+        { key: 'livenessPort', label: '检查端口', type: 'number', min: 1, max: 65535, default: 8080, dependsOn: { key: 'enableLivenessProbe', value: true } },
+        { key: 'livenessCommand', label: 'Exec 命令', type: 'text', placeholder: 'cat /tmp/healthy', default: 'cat /tmp/healthy', dependsOn: { key: 'livenessProbeType', value: 'exec' } },
+        { key: 'livenessHttpHeaders', label: 'HTTP 请求头', type: 'text', placeholder: 'X-Custom-Header: value', default: '', dependsOn: { key: 'livenessProbeType', value: 'httpGet' }, tip: '格式: Header-Name: value' },
+        { key: 'livenessInitialDelay', label: '初始延迟 (秒)', type: 'number', min: 0, max: 600, default: 15, dependsOn: { key: 'enableLivenessProbe', value: true } },
+        { key: 'livenessPeriod', label: '检查周期 (秒)', type: 'number', min: 1, max: 300, default: 20, dependsOn: { key: 'enableLivenessProbe', value: true } },
+        { key: 'livenessTimeout', label: '超时时间 (秒)', type: 'number', min: 1, max: 60, default: 5, dependsOn: { key: 'enableLivenessProbe', value: true } },
+        { key: 'livenessFailureThreshold', label: '失败阈值', type: 'number', min: 1, max: 30, default: 3, dependsOn: { key: 'enableLivenessProbe', value: true } },
+        { key: 'livenessSuccessThreshold', label: '成功阈值', type: 'number', min: 1, max: 10, default: 1, dependsOn: { key: 'enableLivenessProbe', value: true }, tip: 'liveness 只能为 1' },
+      ],
+    },
+    {
+      title: '就绪探针 (Readiness Probe)',
+      fields: [
+        { key: 'enableReadinessProbe', label: '启用就绪探针', type: 'switch', default: true, tip: '失败则从 Service 端点摘除' },
+        { key: 'readinessProbeType', label: '探针方式', type: 'select', options: [
+          { label: 'HTTP GET', value: 'httpGet' },{ label: 'TCP Socket', value: 'tcpSocket' },{ label: 'Exec Command', value: 'exec' },
+        ], default: 'httpGet', dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessPath', label: '检查路径', type: 'text', default: '/ready', dependsOn: { key: 'readinessProbeType', value: 'httpGet' } },
+        { key: 'readinessPort', label: '检查端口', type: 'number', min: 1, max: 65535, default: 8080, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessCommand', label: 'Exec 命令', type: 'text', placeholder: 'cat /tmp/ready', default: 'cat /tmp/ready', dependsOn: { key: 'readinessProbeType', value: 'exec' } },
+        { key: 'readinessHttpHeaders', label: 'HTTP 请求头', type: 'text', placeholder: 'X-Custom-Header: value', default: '', dependsOn: { key: 'readinessProbeType', value: 'httpGet' } },
+        { key: 'readinessInitialDelay', label: '初始延迟 (秒)', type: 'number', min: 0, max: 600, default: 5, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessPeriod', label: '检查周期 (秒)', type: 'number', min: 1, max: 300, default: 10, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessTimeout', label: '超时时间 (秒)', type: 'number', min: 1, max: 60, default: 3, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessFailureThreshold', label: '失败阈值', type: 'number', min: 1, max: 30, default: 3, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessSuccessThreshold', label: '成功阈值', type: 'number', min: 1, max: 10, default: 1, dependsOn: { key: 'enableReadinessProbe', value: true } },
+      ],
+    },
+    {
+      title: '环境变量',
+      fields: [
+        { key: 'enableEnv', label: '定义环境变量', type: 'switch', default: false },
+        { key: 'envVars', label: '环境变量 (KEY=VALUE)', type: 'text', placeholder: 'APP_ENV=production\nLOG_LEVEL=info', default: 'APP_ENV=production\nLOG_LEVEL=info', dependsOn: { key: 'enableEnv', value: true }, tip: '每行一个，格式 KEY=VALUE' },
+        { key: 'enableEnvFromConfigMap', label: '从 ConfigMap 导入', type: 'switch', default: false },
+        { key: 'envFromConfigMapName', label: 'ConfigMap 名称', type: 'text', default: 'my-config', dependsOn: { key: 'enableEnvFromConfigMap', value: true } },
+        { key: 'enableEnvFromSecret', label: '从 Secret 导入', type: 'switch', default: false },
+        { key: 'envFromSecretName', label: 'Secret 名称', type: 'text', default: 'my-secret', dependsOn: { key: 'enableEnvFromSecret', value: true } },
+      ],
+    },
+    {
+      title: '卷挂载',
+      fields: [
+        { key: 'enableVolumeMount', label: '挂载卷', type: 'switch', default: false },
+        { key: 'volumeType', label: '卷类型', type: 'select', options: [
+          { label: 'emptyDir - 临时目录', value: 'emptyDir' },
+          { label: 'hostPath - 主机路径', value: 'hostPath' },
+          { label: 'ConfigMap', value: 'configMap' },
+          { label: 'Secret', value: 'secret' },
+        ], default: 'emptyDir', dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'volumeName', label: '卷名称', type: 'text', default: 'data', dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'volumeMountPath', label: '挂载路径', type: 'text', default: '/data', dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'volumeReadOnly', label: '只读挂载', type: 'switch', default: false, dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'configMapName', label: 'ConfigMap 名称', type: 'text', default: 'my-config', dependsOn: { key: 'volumeType', value: 'configMap' } },
+        { key: 'secretVolumeName', label: 'Secret 名称', type: 'text', default: 'my-secret', dependsOn: { key: 'volumeType', value: 'secret' } },
+        { key: 'hostPath', label: '主机路径', type: 'text', default: '/tmp/data', dependsOn: { key: 'volumeType', value: 'hostPath' } },
+      ],
+    },
+    {
+      title: '节点调度 — 节点亲和性 (Node Affinity)',
+      fields: [
+        { key: 'enableNodeAffinity', label: '启用节点亲和性', type: 'switch', default: false, tip: '比 NodeSelector 更灵活的调度规则' },
+        { key: 'nodeAffinityType', label: '亲和类型', type: 'select', options: [
+          { label: 'required - 必须满足 (硬性)', value: 'required' },
+          { label: 'preferred - 尽量满足 (软性)', value: 'preferred' },
+        ], default: 'required', dependsOn: { key: 'enableNodeAffinity', value: true } },
+        { key: 'nodeAffinityKey1', label: '匹配标签 Key', type: 'text', placeholder: 'topology.kubernetes.io/zone', default: 'topology.kubernetes.io/zone', dependsOn: { key: 'enableNodeAffinity', value: true } },
+        { key: 'nodeAffinityOperator1', label: '操作符', type: 'select', options: [
+          { label: 'In - 值在列表中', value: 'In' },
+          { label: 'NotIn - 值不在列表中', value: 'NotIn' },
+          { label: 'Exists - 标签存在', value: 'Exists' },
+          { label: 'DoesNotExist - 标签不存在', value: 'DoesNotExist' },
+          { label: 'Gt - 大于', value: 'Gt' },
+          { label: 'Lt - 小于', value: 'Lt' },
+        ], default: 'In', dependsOn: { key: 'enableNodeAffinity', value: true } },
+        { key: 'nodeAffinityValues1', label: '匹配值 (逗号分隔)', type: 'text', placeholder: 'cn-east-1a,cn-east-1b', default: 'cn-east-1a,cn-east-1b', dependsOn: { key: 'nodeAffinityOperator1', valueNotIn: ['Exists', 'DoesNotExist'] } },
+        { key: 'nodeAffinityWeight', label: '权重 (preferred)', type: 'number', min: 1, max: 100, default: 80, dependsOn: { key: 'nodeAffinityType', value: 'preferred' } },
+      ],
+    },
+    {
+      title: '安全上下文 (Security Context)',
+      fields: [
+        { key: 'enableSecurityContext', label: '启用安全上下文', type: 'switch', default: false },
+        { key: 'runAsUser', label: '运行用户 UID', type: 'number', min: 0, max: 65535, default: 1000, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'runAsGroup', label: '运行用户组 GID', type: 'number', min: 0, max: 65535, default: 1000, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'runAsNonRoot', label: '禁止 Root 运行', type: 'switch', default: true, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'readOnlyRootFilesystem', label: '只读根文件系统', type: 'switch', default: false, dependsOn: { key: 'enableSecurityContext', value: true }, tip: '增强安全性，需要写入的目录用 emptyDir 挂载' },
+        { key: 'allowPrivilegeEscalation', label: '允许提权', type: 'switch', default: false, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'fsGroup', label: '文件系统 GID', type: 'number', min: 0, max: 65535, default: 2000, dependsOn: { key: 'enableSecurityContext', value: true }, tip: '卷文件的所有组' },
+      ],
+    },
+    {
+      title: '标签与注解',
+      fields: [
+        { key: 'appLabel', label: 'app 标签值', type: 'text', default: '', tip: '留空则使用应用名称' },
+        { key: 'versionLabel', label: 'version 标签', type: 'text', placeholder: 'v1', default: 'v1' },
+        { key: 'serviceAccountName', label: 'ServiceAccount 名称', type: 'text', placeholder: '留空使用 default', default: '', tip: 'RBAC 权限控制' },
+        { key: 'terminationGracePeriod', label: '优雅终止时间 (秒)', type: 'number', min: 0, max: 300, default: 30, tip: 'SIGTERM 后等待多久发送 SIGKILL' },
       ],
     },
   ],
 }
 
+// ======================== YAML 生成器 ========================
+
+function buildProbe(config, prefix, type, path, port, cmd, headers, initDelay, period, timeout, failure, success) {
+  if (!config[prefix]) return null
+  const probeType = config[type] || 'httpGet'
+  const probe = {}
+
+  if (probeType === 'httpGet') {
+    probe.httpGet = { path: config[path], port: config[port], scheme: 'HTTP' }
+    const h = config[headers]
+    if (h) {
+      const hdrs = h.split('\n').filter(Boolean).map(line => {
+        const [k, ...v] = line.split(':')
+        return { name: k.trim(), value: v.join(':').trim() }
+      })
+      if (hdrs.length) probe.httpGet.httpHeaders = hdrs
+    }
+  } else if (probeType === 'tcpSocket') {
+    probe.tcpSocket = { port: config[port] }
+  } else {
+    const c = config[cmd] || 'cat /tmp/healthy'
+    probe.exec = { command: c.split(' ') }
+  }
+
+  probe.initialDelaySeconds = config[initDelay]
+  probe.periodSeconds = config[period]
+  probe.timeoutSeconds = config[timeout]
+  probe.failureThreshold = config[failure]
+  if (success !== null) probe.successThreshold = config[success]
+  return probe
+}
+
+function buildNodeAffinity(config) {
+  if (!config.enableNodeAffinity) return undefined
+  const key = config.nodeAffinityKey1
+  const op = config.nodeAffinityOperator1
+  const vals = (config.nodeAffinityValues1 || '').split(',').map(s => s.trim()).filter(Boolean)
+  const term = { matchExpressions: [{ key, operator: op }] }
+  if (['In', 'NotIn'].includes(op)) term.matchExpressions[0].values = vals
+
+  const affinity = {}
+  if (config.nodeAffinityType === 'required') {
+    affinity.nodeAffinity = { requiredDuringSchedulingIgnoredDuringExecution: { nodeSelectorTerms: [term] } }
+  } else {
+    affinity.nodeAffinity = {
+      preferredDuringSchedulingIgnoredDuringExecution: [{
+        weight: config.nodeAffinityWeight || 80,
+        preference: term,
+      }],
+    }
+  }
+  return affinity
+}
+
+export function generateK8sDaemonSetYaml(config) {
+  const labels = { app: config.appLabel || config.appName }
+  if (config.versionLabel) labels.version = config.versionLabel
+
+  const container = {
+    name: config.appName,
+    image: config.image,
+    imagePullPolicy: config.imagePullPolicy,
+    ports: [{ name: config.portName, containerPort: config.containerPort, protocol: config.protocol }],
+    resources: {
+      requests: { cpu: config.cpuRequest, memory: config.memoryRequest },
+      limits: { cpu: config.cpuLimit, memory: config.memoryLimit },
+    },
+  }
+
+  // 探针
+  container.startupProbe = buildProbe(config, 'enableStartupProbe', 'startupProbeType', 'startupPath', 'startupPort', 'startupCommand', null, 'startupInitialDelay', 'startupPeriod', 'startupTimeout', 'startupFailureThreshold', null)
+  container.livenessProbe = buildProbe(config, 'enableLivenessProbe', 'livenessProbeType', 'livenessPath', 'livenessPort', 'livenessCommand', 'livenessHttpHeaders', 'livenessInitialDelay', 'livenessPeriod', 'livenessTimeout', 'livenessFailureThreshold', 'livenessSuccessThreshold')
+  container.readinessProbe = buildProbe(config, 'enableReadinessProbe', 'readinessProbeType', 'readinessPath', 'readinessPort', 'readinessCommand', 'readinessHttpHeaders', 'readinessInitialDelay', 'readinessPeriod', 'readinessTimeout', 'readinessFailureThreshold', 'readinessSuccessThreshold')
+  if (!container.startupProbe) delete container.startupProbe
+  if (!container.livenessProbe) delete container.livenessProbe
+  if (!container.readinessProbe) delete container.readinessProbe
+
+  // 环境变量
+  if (config.enableEnv && config.envVars) {
+    container.env = config.envVars.split('\n').filter(Boolean).map(line => {
+      const [k, ...v] = line.split('=')
+      return { name: k.trim(), value: v.join('=').trim() }
+    })
+  }
+  if (config.enableEnvFromConfigMap || config.enableEnvFromSecret) {
+    container.envFrom = []
+    if (config.enableEnvFromConfigMap) container.envFrom.push({ configMapRef: { name: config.envFromConfigMapName } })
+    if (config.enableEnvFromSecret) container.envFrom.push({ secretRef: { name: config.envFromSecretName } })
+  }
+
+  // Security Context (container-level)
+  if (config.enableSecurityContext) {
+    container.securityContext = {
+      runAsUser: config.runAsUser,
+      runAsGroup: config.runAsGroup,
+      runAsNonRoot: config.runAsNonRoot,
+      readOnlyRootFilesystem: config.readOnlyRootFilesystem || undefined,
+      allowPrivilegeEscalation: config.allowPrivilegeEscalation,
+    }
+  }
+
+  // 卷挂载
+  const volumes = []
+  if (config.enableVolumeMount) {
+    container.volumeMounts = [{ name: config.volumeName, mountPath: config.volumeMountPath, readOnly: config.volumeReadOnly || undefined }]
+    const vol = { name: config.volumeName }
+    const vt = config.volumeType
+    if (vt === 'emptyDir') vol.emptyDir = {}
+    else if (vt === 'configMap') vol.configMap = { name: config.configMapName }
+    else if (vt === 'secret') vol.secret = { secretName: config.secretVolumeName }
+    else if (vt === 'hostPath') vol.hostPath = { path: config.hostPath, type: 'DirectoryOrCreate' }
+    volumes.push(vol)
+  }
+
+  const podSpec = { containers: [container] }
+
+  if (config.hostNetwork) podSpec.hostNetwork = true
+
+  // ServiceAccount
+  if (config.serviceAccountName) podSpec.serviceAccountName = config.serviceAccountName
+
+  // 优雅终止
+  if (config.terminationGracePeriod) podSpec.terminationGracePeriodSeconds = config.terminationGracePeriod
+
+  // Tolerations (existing simple + new advanced)
+  if (config.tolerationsEnabled && config.tolerationKey) {
+    const toleration = { key: config.tolerationKey, operator: 'Exists', effect: 'NoSchedule' }
+    if (config.tolerationValue) {
+      toleration.operator = 'Equal'
+      toleration.value = config.tolerationValue
+    }
+    podSpec.tolerations = [toleration]
+  }
+
+  // Node Affinity
+  const affinity = buildNodeAffinity(config)
+  if (affinity) podSpec.affinity = affinity
+
+  // Volumes
+  if (volumes.length) podSpec.volumes = volumes
+
+  // fsGroup
+  if (config.enableSecurityContext && config.fsGroup) {
+    podSpec.securityContext = { fsGroup: config.fsGroup }
+  }
+
+  const daemonset = {
+    apiVersion: 'apps/v1',
+    kind: 'DaemonSet',
+    metadata: { name: config.name, namespace: config.namespace, labels },
+    spec: {
+      selector: { matchLabels: { app: config.appLabel || config.appName } },
+      updateStrategy: config.updateStrategy === 'RollingUpdate'
+        ? { type: 'RollingUpdate', rollingUpdate: { maxUnavailable: 1 } }
+        : { type: 'OnDelete' },
+      template: { metadata: { labels }, spec: podSpec },
+    },
+  }
+
+  const header = `# K8s DaemonSet - 由 ConfTemplate 生成\n# 生成时间: ${new Date().toLocaleString('zh-CN')}\n# 部署命令: kubectl apply -f ${config.fileName || 'daemonset.yaml'}\n`
+  return header + '\n' + toYaml(daemonset)
+}
+
 function toYaml(obj, indent = 0) {
   const lines = []
   const prefix = '  '.repeat(indent)
-
   for (const [key, value] of Object.entries(obj)) {
     if (value === null || value === undefined || value === '') continue
-
     if (Array.isArray(value)) {
       lines.push(`${prefix}${key}:`)
       for (const item of value) {
@@ -172,9 +369,18 @@ function toYaml(obj, indent = 0) {
           const entries = Object.entries(item).filter(([, v]) => v !== null && v !== undefined && v !== '')
           if (entries.length === 0) continue
           const first = entries[0]
-          lines.push(`${prefix}  - ${first[0]}: ${first[1]}`)
+          lines.push(`${prefix}  - ${first[0]}: ${typeof first[1] === 'object' ? '' : first[1]}`)
+          if (typeof first[1] === 'object') {
+            lines.push(toYaml(first[1], indent + 3))
+          }
           for (let i = 1; i < entries.length; i++) {
-            lines.push(`${prefix}    ${entries[i][0]}: ${entries[i][1]}`)
+            const [k, v] = entries[i]
+            if (typeof v === 'object') {
+              lines.push(`${prefix}    ${k}:`)
+              lines.push(toYaml(v, indent + 4))
+            } else {
+              lines.push(`${prefix}    ${k}: ${v}`)
+            }
           }
         } else {
           lines.push(`${prefix}  - ${item}`)
@@ -187,61 +393,5 @@ function toYaml(obj, indent = 0) {
       lines.push(`${prefix}${key}: ${value}`)
     }
   }
-
   return lines.join('\n')
 }
-
-export function generateK8sDaemonSetYaml(config) {
-  const labels = { app: config.appName }
-
-  const container = {
-    name: config.appName,
-    image: config.image,
-    ports: [{ containerPort: config.containerPort, name: 'http' }],
-    resources: {
-      requests: { cpu: config.cpuRequest, memory: config.memoryRequest },
-      limits: { cpu: config.cpuLimit, memory: config.memoryLimit },
-    },
-  }
-
-  const podSpec = {
-    containers: [container],
-  }
-
-  if (config.hostNetwork) {
-    podSpec.hostNetwork = true
-  }
-
-  if (config.tolerationsEnabled && config.tolerationKey) {
-    const toleration = { key: config.tolerationKey, operator: 'Exists', effect: 'NoSchedule' }
-    if (config.tolerationValue) {
-      toleration.operator = 'Equal'
-      toleration.value = config.tolerationValue
-    }
-    podSpec.tolerations = [toleration]
-  }
-
-  const daemonset = {
-    apiVersion: 'apps/v1',
-    kind: 'DaemonSet',
-    metadata: {
-      name: config.name,
-      namespace: config.namespace,
-      labels,
-    },
-    spec: {
-      selector: { matchLabels: { app: config.appName } },
-      updateStrategy: config.updateStrategy === 'RollingUpdate'
-        ? { type: 'RollingUpdate', rollingUpdate: { maxUnavailable: 1 } }
-        : { type: 'OnDelete' },
-      template: {
-        metadata: { labels },
-        spec: podSpec,
-      },
-    },
-  }
-
-  const header = `# K8s DaemonSet - 由 ConfTemplate 生成\n# 生成时间: ${new Date().toLocaleString('zh-CN')}\n# 部署命令: kubectl apply -f ${config.fileName || 'daemonset.yaml'}\n`
-
-  return header + '\n' + toYaml(daemonset)
-}

src/schemas/k8s-deployment.js

@@ -2,7 +2,7 @@ export const k8sDeploymentSchema = {
   id: 'k8s-deployment',
   name: 'K8s Deployment',
   icon: 'Box',
-  category: '云原生',
+  category: 'K8S 工作负载',
   description: 'Kubernetes 无状态应用部署控制器',
   format: 'yaml',
   fileName: 'deployment.yaml',
@@ -10,287 +10,434 @@ export const k8sDeploymentSchema = {
     {
       title: '基础信息',
       fields: [
-        {
+        { key: 'appName', label: '应用名称', type: 'text', default: 'my-app', required: true, tip: 'Deployment 和 Label 名称' },
-          key: 'appName',
+        { key: 'namespace', label: '命名空间', type: 'text', default: 'default' },
-          label: '应用名称',
+        { key: 'image', label: '容器镜像', type: 'text', placeholder: 'nginx:1.24', default: 'nginx:1.24', required: true },
-          type: 'text',
+        { key: 'replicas', label: '副本数', type: 'number', min: 1, max: 100, default: 3 },
-          placeholder: 'my-app',
+        { key: 'imagePullPolicy', label: '镜像拉取策略', type: 'select', options: [
-          default: 'my-app',
+          { label: 'IfNotPresent (推荐)', value: 'IfNotPresent' },
-          required: true,
+          { label: 'Always (每次拉取)', value: 'Always' },
-          tip: '将用作 Deployment 和 Label 的名称',
+          { label: 'Never (仅本地)', value: 'Never' },
-        },
+        ], default: 'IfNotPresent' },
-        {
-          key: 'namespace',
-          label: '命名空间',
-          type: 'text',
-          placeholder: 'default',
-          default: 'default',
-        },
-        {
-          key: 'image',
-          label: '容器镜像地址',
-          type: 'text',
-          placeholder: 'nginx:1.24',
-          default: 'nginx:1.24',
-          required: true,
-        },
-        {
-          key: 'replicas',
-          label: '副本数',
-          type: 'number',
-          min: 1,
-          max: 100,
-          default: 3,
-          tip: '建议生产环境至少 2 副本',
-        },
       ],
     },
     {
       title: '容器端口',
       fields: [
-        {
+        { key: 'containerPort', label: '容器端口', type: 'number', min: 1, max: 65535, default: 80 },
-          key: 'containerPort',
+        { key: 'portName', label: '端口名称', type: 'text', default: 'http' },
-          label: '容器端口',
+        { key: 'protocol', label: '协议', type: 'select', options: [{ label: 'TCP', value: 'TCP' }, { label: 'UDP', value: 'UDP' }], default: 'TCP' },
-          type: 'number',
-          min: 1,
-          max: 65535,
-          default: 80,
-        },
-        {
-          key: 'protocol',
-          label: '协议',
-          type: 'select',
-          options: [
-            { label: 'TCP', value: 'TCP' },
-            { label: 'UDP', value: 'UDP' },
-          ],
-          default: 'TCP',
-        },
-        {
-          key: 'portName',
-          label: '端口名称',
-          type: 'text',
-          placeholder: 'http',
-          default: 'http',
-          tip: 'Service 匹配时使用',
-        },
       ],
     },
     {
       title: '资源限制',
       fields: [
-        {
+        { key: 'cpuRequest', label: 'CPU Requests', type: 'select', options: [
-          key: 'cpuRequest',
+          { label: '50m', value: '50m' },{ label: '100m', value: '100m' },{ label: '200m', value: '200m' },
-          label: 'CPU Requests',
+          { label: '500m', value: '500m' },{ label: '1', value: '1' },{ label: '2', value: '2' },
-          type: 'select',
+        ], default: '100m' },
-          options: [
+        { key: 'cpuLimit', label: 'CPU Limits', type: 'select', options: [
-            { label: '50m', value: '50m' },
+          { label: '200m', value: '200m' },{ label: '500m', value: '500m' },{ label: '1', value: '1' },
-            { label: '100m', value: '100m' },
+          { label: '2', value: '2' },{ label: '4', value: '4' },
-            { label: '200m', value: '200m' },
+        ], default: '500m' },
-            { label: '500m', value: '500m' },
+        { key: 'memoryRequest', label: 'Memory Requests', type: 'select', options: [
-            { label: '1', value: '1' },
+          { label: '64Mi', value: '64Mi' },{ label: '128Mi', value: '128Mi' },{ label: '256Mi', value: '256Mi' },
-            { label: '2', value: '2' },
+          { label: '512Mi', value: '512Mi' },{ label: '1Gi', value: '1Gi' },
-          ],
+        ], default: '128Mi' },
-          default: '100m',
+        { key: 'memoryLimit', label: 'Memory Limits', type: 'select', options: [
-        },
+          { label: '128Mi', value: '128Mi' },{ label: '256Mi', value: '256Mi' },{ label: '512Mi', value: '512Mi' },
-        {
+          { label: '1Gi', value: '1Gi' },{ label: '2Gi', value: '2Gi' },{ label: '4Gi', value: '4Gi' },
-          key: 'cpuLimit',
+        ], default: '256Mi' },
-          label: 'CPU Limits',
-          type: 'select',
-          options: [
-            { label: '200m', value: '200m' },
-            { label: '500m', value: '500m' },
-            { label: '1', value: '1' },
-            { label: '2', value: '2' },
-            { label: '4', value: '4' },
-          ],
-          default: '500m',
-        },
-        {
-          key: 'memoryRequest',
-          label: 'Memory Requests',
-          type: 'select',
-          options: [
-            { label: '64Mi', value: '64Mi' },
-            { label: '128Mi', value: '128Mi' },
-            { label: '256Mi', value: '256Mi' },
-            { label: '512Mi', value: '512Mi' },
-            { label: '1Gi', value: '1Gi' },
-          ],
-          default: '128Mi',
-        },
-        {
-          key: 'memoryLimit',
-          label: 'Memory Limits',
-          type: 'select',
-          options: [
-            { label: '128Mi', value: '128Mi' },
-            { label: '256Mi', value: '256Mi' },
-            { label: '512Mi', value: '512Mi' },
-            { label: '1Gi', value: '1Gi' },
-            { label: '2Gi', value: '2Gi' },
-          ],
-          default: '256Mi',
-        },
       ],
     },
     {
-      title: '健康检查',
+      title: '启动探针 (Startup Probe)',
       fields: [
-        {
+        { key: 'enableStartupProbe', label: '启用启动探针', type: 'switch', default: false, tip: '慢启动容器必备，通过前 liveness/readiness 不会生效' },
-          key: 'enableLivenessProbe',
+        { key: 'startupProbeType', label: '探针方式', type: 'select', options: [
-          label: '存活探针 (Liveness)',
+          { label: 'HTTP GET', value: 'httpGet' },{ label: 'TCP Socket', value: 'tcpSocket' },{ label: 'Exec Command', value: 'exec' },
-          type: 'switch',
+        ], default: 'httpGet', dependsOn: { key: 'enableStartupProbe', value: true } },
-          default: true,
+        { key: 'startupPath', label: '检查路径', type: 'text', default: '/healthz', dependsOn: { key: 'startupProbeType', value: 'httpGet' } },
-          tip: '检测容器是否存活，失败则重启',
+        { key: 'startupPort', label: '检查端口', type: 'number', min: 1, max: 65535, default: 80, dependsOn: { key: 'enableStartupProbe', value: true } },
-        },
+        { key: 'startupCommand', label: 'Exec 命令', type: 'text', placeholder: 'cat /tmp/healthy', default: 'cat /tmp/healthy', dependsOn: { key: 'startupProbeType', value: 'exec' } },
-        {
+        { key: 'startupInitialDelay', label: '初始延迟 (秒)', type: 'number', min: 0, max: 600, default: 0, dependsOn: { key: 'enableStartupProbe', value: true } },
-          key: 'livenessProbeType',
+        { key: 'startupPeriod', label: '检查周期 (秒)', type: 'number', min: 1, max: 300, default: 10, dependsOn: { key: 'enableStartupProbe', value: true } },
-          label: '探针方式',
+        { key: 'startupFailureThreshold', label: '失败阈值', type: 'number', min: 1, max: 100, default: 30, dependsOn: { key: 'enableStartupProbe', value: true }, tip: '30次×10秒=最多等300秒启动' },
-          type: 'select',
+        { key: 'startupTimeout', label: '超时时间 (秒)', type: 'number', min: 1, max: 60, default: 5, dependsOn: { key: 'enableStartupProbe', value: true } },
-          options: [
-            { label: 'HTTP GET', value: 'httpGet' },
-            { label: 'TCP Socket', value: 'tcpSocket' },
-            { label: 'Exec Command', value: 'exec' },
       ],
-          default: 'httpGet',
-          dependsOn: { key: 'enableLivenessProbe', value: true },
     },
     {
-          key: 'livenessPath',
+      title: '存活探针 (Liveness Probe)',
-          label: '健康检查路径',
+      fields: [
-          type: 'text',
+        { key: 'enableLivenessProbe', label: '启用存活探针', type: 'switch', default: true, tip: '失败则重启容器' },
-          placeholder: '/healthz',
+        { key: 'livenessProbeType', label: '探针方式', type: 'select', options: [
-          default: '/healthz',
+          { label: 'HTTP GET', value: 'httpGet' },{ label: 'TCP Socket', value: 'tcpSocket' },{ label: 'Exec Command', value: 'exec' },
-          dependsOn: { key: 'livenessProbeType', value: 'httpGet' },
+        ], default: 'httpGet', dependsOn: { key: 'enableLivenessProbe', value: true } },
-        },
+        { key: 'livenessPath', label: '检查路径', type: 'text', default: '/healthz', dependsOn: { key: 'livenessProbeType', value: 'httpGet' } },
-        {
+        { key: 'livenessPort', label: '检查端口', type: 'number', min: 1, max: 65535, default: 80, dependsOn: { key: 'enableLivenessProbe', value: true } },
-          key: 'livenessPort',
+        { key: 'livenessCommand', label: 'Exec 命令', type: 'text', placeholder: 'cat /tmp/healthy', default: 'cat /tmp/healthy', dependsOn: { key: 'livenessProbeType', value: 'exec' } },
-          label: '探针端口',
+        { key: 'livenessHttpHeaders', label: 'HTTP 请求头', type: 'text', placeholder: 'X-Custom-Header: value', default: '', dependsOn: { key: 'livenessProbeType', value: 'httpGet' }, tip: '格式: Header-Name: value' },
-          type: 'number',
+        { key: 'livenessInitialDelay', label: '初始延迟 (秒)', type: 'number', min: 0, max: 600, default: 15, dependsOn: { key: 'enableLivenessProbe', value: true } },
-          min: 1,
+        { key: 'livenessPeriod', label: '检查周期 (秒)', type: 'number', min: 1, max: 300, default: 20, dependsOn: { key: 'enableLivenessProbe', value: true } },
-          max: 65535,
+        { key: 'livenessTimeout', label: '超时时间 (秒)', type: 'number', min: 1, max: 60, default: 5, dependsOn: { key: 'enableLivenessProbe', value: true } },
-          default: 80,
+        { key: 'livenessFailureThreshold', label: '失败阈值', type: 'number', min: 1, max: 30, default: 3, dependsOn: { key: 'enableLivenessProbe', value: true } },
-          dependsOn: { key: 'enableLivenessProbe', value: true },
+        { key: 'livenessSuccessThreshold', label: '成功阈值', type: 'number', min: 1, max: 10, default: 1, dependsOn: { key: 'enableLivenessProbe', value: true }, tip: 'liveness 只能为 1' },
-        },
-        {
-          key: 'enableReadinessProbe',
-          label: '就绪探针 (Readiness)',
-          type: 'switch',
-          default: true,
-          tip: '检测容器是否就绪接收流量',
-        },
-        {
-          key: 'readinessProbeType',
-          label: '探针方式',
-          type: 'select',
-          options: [
-            { label: 'HTTP GET', value: 'httpGet' },
-            { label: 'TCP Socket', value: 'tcpSocket' },
-            { label: 'Exec Command', value: 'exec' },
       ],
-          default: 'httpGet',
-          dependsOn: { key: 'enableReadinessProbe', value: true },
     },
     {
-          key: 'readinessPath',
+      title: '就绪探针 (Readiness Probe)',
-          label: '就绪检查路径',
+      fields: [
-          type: 'text',
+        { key: 'enableReadinessProbe', label: '启用就绪探针', type: 'switch', default: true, tip: '失败则从 Service 端点摘除' },
-          placeholder: '/ready',
+        { key: 'readinessProbeType', label: '探针方式', type: 'select', options: [
-          default: '/ready',
+          { label: 'HTTP GET', value: 'httpGet' },{ label: 'TCP Socket', value: 'tcpSocket' },{ label: 'Exec Command', value: 'exec' },
-          dependsOn: { key: 'readinessProbeType', value: 'httpGet' },
+        ], default: 'httpGet', dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessPath', label: '检查路径', type: 'text', default: '/ready', dependsOn: { key: 'readinessProbeType', value: 'httpGet' } },
+        { key: 'readinessPort', label: '检查端口', type: 'number', min: 1, max: 65535, default: 80, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessCommand', label: 'Exec 命令', type: 'text', placeholder: 'cat /tmp/ready', default: 'cat /tmp/ready', dependsOn: { key: 'readinessProbeType', value: 'exec' } },
+        { key: 'readinessHttpHeaders', label: 'HTTP 请求头', type: 'text', placeholder: 'X-Custom-Header: value', default: '', dependsOn: { key: 'readinessProbeType', value: 'httpGet' } },
+        { key: 'readinessInitialDelay', label: '初始延迟 (秒)', type: 'number', min: 0, max: 600, default: 5, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessPeriod', label: '检查周期 (秒)', type: 'number', min: 1, max: 300, default: 10, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessTimeout', label: '超时时间 (秒)', type: 'number', min: 1, max: 60, default: 3, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessFailureThreshold', label: '失败阈值', type: 'number', min: 1, max: 30, default: 3, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessSuccessThreshold', label: '成功阈值', type: 'number', min: 1, max: 10, default: 1, dependsOn: { key: 'enableReadinessProbe', value: true } },
+      ],
     },
     {
-          key: 'readinessPort',
+      title: '环境变量',
-          label: '探针端口',
+      fields: [
-          type: 'number',
+        { key: 'enableEnv', label: '定义环境变量', type: 'switch', default: false },
-          min: 1,
+        { key: 'envVars', label: '环境变量 (KEY=VALUE)', type: 'text', placeholder: 'APP_ENV=production\nLOG_LEVEL=info', default: 'APP_ENV=production\nLOG_LEVEL=info', dependsOn: { key: 'enableEnv', value: true }, tip: '每行一个，格式 KEY=VALUE' },
-          max: 65535,
+        { key: 'enableEnvFromConfigMap', label: '从 ConfigMap 导入', type: 'switch', default: false },
-          default: 80,
+        { key: 'envFromConfigMapName', label: 'ConfigMap 名称', type: 'text', default: 'my-config', dependsOn: { key: 'enableEnvFromConfigMap', value: true } },
-          dependsOn: { key: 'enableReadinessProbe', value: true },
+        { key: 'enableEnvFromSecret', label: '从 Secret 导入', type: 'switch', default: false },
+        { key: 'envFromSecretName', label: 'Secret 名称', type: 'text', default: 'my-secret', dependsOn: { key: 'enableEnvFromSecret', value: true } },
+      ],
     },
+    {
+      title: '卷挂载',
+      fields: [
+        { key: 'enableVolumeMount', label: '挂载卷', type: 'switch', default: false },
+        { key: 'volumeType', label: '卷类型', type: 'select', options: [
+          { label: 'emptyDir - 临时目录', value: 'emptyDir' },
+          { label: 'PersistentVolumeClaim', value: 'pvc' },
+          { label: 'ConfigMap', value: 'configMap' },
+          { label: 'Secret', value: 'secret' },
+          { label: 'HostPath - 主机路径', value: 'hostPath' },
+        ], default: 'emptyDir', dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'volumeName', label: '卷名称', type: 'text', default: 'data', dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'volumeMountPath', label: '挂载路径', type: 'text', default: '/data', dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'volumeReadOnly', label: '只读挂载', type: 'switch', default: false, dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'pvcClaimName', label: 'PVC 名称', type: 'text', default: 'my-pvc', dependsOn: { key: 'volumeType', value: 'pvc' } },
+        { key: 'configMapName', label: 'ConfigMap 名称', type: 'text', default: 'my-config', dependsOn: { key: 'volumeType', value: 'configMap' } },
+        { key: 'secretVolumeName', label: 'Secret 名称', type: 'text', default: 'my-secret', dependsOn: { key: 'volumeType', value: 'secret' } },
+        { key: 'hostPath', label: '主机路径', type: 'text', default: '/tmp/data', dependsOn: { key: 'volumeType', value: 'hostPath' } },
+      ],
+    },
+    {
+      title: '节点调度 — NodeSelector',
+      fields: [
+        { key: 'enableNodeSelector', label: '启用 NodeSelector', type: 'switch', default: false, tip: '简单的节点标签匹配' },
+        { key: 'nodeSelectorKey', label: '标签 Key', type: 'text', placeholder: 'kubernetes.io/os', default: 'kubernetes.io/os', dependsOn: { key: 'enableNodeSelector', value: true } },
+        { key: 'nodeSelectorValue', label: '标签 Value', type: 'text', placeholder: 'linux', default: 'linux', dependsOn: { key: 'enableNodeSelector', value: true } },
+      ],
+    },
+    {
+      title: '节点调度 — 节点亲和性 (Node Affinity)',
+      fields: [
+        { key: 'enableNodeAffinity', label: '启用节点亲和性', type: 'switch', default: false, tip: '比 NodeSelector 更灵活的调度规则' },
+        { key: 'nodeAffinityType', label: '亲和类型', type: 'select', options: [
+          { label: 'required - 必须满足 (硬性)', value: 'required' },
+          { label: 'preferred - 尽量满足 (软性)', value: 'preferred' },
+        ], default: 'required', dependsOn: { key: 'enableNodeAffinity', value: true } },
+        { key: 'nodeAffinityKey1', label: '匹配标签 Key', type: 'text', placeholder: 'topology.kubernetes.io/zone', default: 'topology.kubernetes.io/zone', dependsOn: { key: 'enableNodeAffinity', value: true } },
+        { key: 'nodeAffinityOperator1', label: '操作符', type: 'select', options: [
+          { label: 'In - 值在列表中', value: 'In' },
+          { label: 'NotIn - 值不在列表中', value: 'NotIn' },
+          { label: 'Exists - 标签存在', value: 'Exists' },
+          { label: 'DoesNotExist - 标签不存在', value: 'DoesNotExist' },
+          { label: 'Gt - 大于', value: 'Gt' },
+          { label: 'Lt - 小于', value: 'Lt' },
+        ], default: 'In', dependsOn: { key: 'enableNodeAffinity', value: true } },
+        { key: 'nodeAffinityValues1', label: '匹配值 (逗号分隔)', type: 'text', placeholder: 'cn-east-1a,cn-east-1b', default: 'cn-east-1a,cn-east-1b', dependsOn: { key: 'nodeAffinityOperator1', valueNotIn: ['Exists', 'DoesNotExist'] } },
+        { key: 'nodeAffinityWeight', label: '权重 (preferred)', type: 'number', min: 1, max: 100, default: 80, dependsOn: { key: 'nodeAffinityType', value: 'preferred' } },
+      ],
+    },
+    {
+      title: 'Pod 反亲和性 (Pod Anti-Affinity)',
+      fields: [
+        { key: 'enablePodAntiAffinity', label: '启用 Pod 反亲和性', type: 'switch', default: false, tip: '让副本分散到不同节点/区域，提高可用性' },
+        { key: 'podAntiAffinityType', label: '亲和类型', type: 'select', options: [
+          { label: 'required - 必须分散 (硬性)', value: 'required' },
+          { label: 'preferred - 尽量分散 (软性)', value: 'preferred' },
+        ], default: 'preferred', dependsOn: { key: 'enablePodAntiAffinity', value: true } },
+        { key: 'podAntiAffinityKey', label: '匹配标签 Key', type: 'text', default: 'app', dependsOn: { key: 'enablePodAntiAffinity', value: true } },
+        { key: 'podAntiAffinityTopology', label: '拓扑域', type: 'select', options: [
+          { label: 'kubernetes.io/hostname (节点级)', value: 'kubernetes.io/hostname' },
+          { label: 'topology.kubernetes.io/zone (可用区级)', value: 'topology.kubernetes.io/zone' },
+          { label: 'topology.kubernetes.io/region (地域级)', value: 'topology.kubernetes.io/region' },
+        ], default: 'kubernetes.io/hostname', dependsOn: { key: 'enablePodAntiAffinity', value: true } },
+        { key: 'podAntiAffinityWeight', label: '权重 (preferred)', type: 'number', min: 1, max: 100, default: 100, dependsOn: { key: 'podAntiAffinityType', value: 'preferred' } },
+      ],
+    },
+    {
+      title: '容忍度 (Tolerations)',
+      fields: [
+        { key: 'enableToleration', label: '启用容忍度', type: 'switch', default: false, tip: '允许调度到有 taint 的节点' },
+        { key: 'tolerationKey', label: 'Taint Key', type: 'text', placeholder: 'node-role.kubernetes.io/master', default: 'node-role.kubernetes.io/master', dependsOn: { key: 'enableToleration', value: true } },
+        { key: 'tolerationOperator', label: '操作符', type: 'select', options: [
+          { label: 'Equal - 值匹配', value: 'Equal' },
+          { label: 'Exists - Key 存在即可', value: 'Exists' },
+        ], default: 'Exists', dependsOn: { key: 'enableToleration', value: true } },
+        { key: 'tolerationValue', label: 'Taint Value', type: 'text', default: '', dependsOn: { key: 'tolerationOperator', value: 'Equal' } },
+        { key: 'tolerationEffect', label: 'Taint Effect', type: 'select', options: [
+          { label: 'NoSchedule - 不调度新 Pod', value: 'NoSchedule' },
+          { label: 'PreferNoSchedule - 尽量不调度', value: 'PreferNoSchedule' },
+          { label: 'NoExecute - 驱逐已有 Pod', value: 'NoExecute' },
+        ], default: 'NoSchedule', dependsOn: { key: 'enableToleration', value: true } },
+        { key: 'tolerationSeconds', label: '容忍时长 (秒)', type: 'number', min: 0, max: 86400, default: 300, dependsOn: { key: 'tolerationEffect', value: 'NoExecute' }, tip: '仅 NoExecute 有效' },
+      ],
+    },
+    {
+      title: '安全上下文 (Security Context)',
+      fields: [
+        { key: 'enableSecurityContext', label: '启用安全上下文', type: 'switch', default: false },
+        { key: 'runAsUser', label: '运行用户 UID', type: 'number', min: 0, max: 65535, default: 1000, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'runAsGroup', label: '运行用户组 GID', type: 'number', min: 0, max: 65535, default: 1000, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'runAsNonRoot', label: '禁止 Root 运行', type: 'switch', default: true, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'readOnlyRootFilesystem', label: '只读根文件系统', type: 'switch', default: false, dependsOn: { key: 'enableSecurityContext', value: true }, tip: '增强安全性，需要写入的目录用 emptyDir 挂载' },
+        { key: 'allowPrivilegeEscalation', label: '允许提权', type: 'switch', default: false, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'fsGroup', label: '文件系统 GID', type: 'number', min: 0, max: 65535, default: 2000, dependsOn: { key: 'enableSecurityContext', value: true }, tip: '卷文件的所有组' },
       ],
     },
     {
       title: '部署策略',
       fields: [
-        {
+        { key: 'strategy', label: '更新策略', type: 'select', options: [
-          key: 'strategy',
-          label: '更新策略',
-          type: 'select',
-          options: [
           { label: 'RollingUpdate - 滚动更新 (推荐)', value: 'RollingUpdate' },
           { label: 'Recreate - 先删后建', value: 'Recreate' },
-          ],
+        ], default: 'RollingUpdate' },
-          default: 'RollingUpdate',
+        { key: 'maxSurge', label: '最大超出副本数', type: 'select', options: [
-        },
+          { label: '0', value: '0' },{ label: '1', value: '1' },{ label: '25%', value: '25%' },
-        {
+          { label: '50%', value: '50%' },{ label: '100%', value: '100%' },
-          key: 'maxSurge',
+        ], default: '25%', dependsOn: { key: 'strategy', value: 'RollingUpdate' } },
-          label: '最大超出副本数',
+        { key: 'maxUnavailable', label: '最大不可用副本数', type: 'select', options: [
-          type: 'select',
+          { label: '0 (零停机)', value: '0' },{ label: '1', value: '1' },{ label: '25%', value: '25%' },
-          options: [
+        ], default: '0', dependsOn: { key: 'strategy', value: 'RollingUpdate' } },
-            { label: '1', value: '1' },
+        { key: 'revisionHistoryLimit', label: '历史版本保留数', type: 'number', min: 0, max: 50, default: 10, tip: '用于回滚' },
-            { label: '25%', value: '25%' },
+        { key: 'progressDeadlineSeconds', label: '部署超时 (秒)', type: 'number', min: 60, max: 3600, default: 600, tip: '超时则标记为失败' },
-            { label: '50%', value: '50%' },
+        { key: 'minReadySeconds', label: '最小就绪等待 (秒)', type: 'number', min: 0, max: 300, default: 0, tip: '容器就绪后多久视为可用' },
-            { label: '100%', value: '100%' },
-          ],
-          default: '25%',
-          dependsOn: { key: 'strategy', value: 'RollingUpdate' },
-        },
-        {
-          key: 'maxUnavailable',
-          label: '最大不可用副本数',
-          type: 'select',
-          options: [
-            { label: '0 (零停机)', value: '0' },
-            { label: '1', value: '1' },
-            { label: '25%', value: '25%' },
-          ],
-          default: '0',
-          dependsOn: { key: 'strategy', value: 'RollingUpdate' },
-        },
       ],
     },
     {
       title: '标签与注解',
       fields: [
-        {
+        { key: 'appLabel', label: 'app 标签值', type: 'text', default: '', tip: '留空则使用应用名称' },
-          key: 'appLabel',
+        { key: 'versionLabel', label: 'version 标签', type: 'text', placeholder: 'v1', default: 'v1' },
-          label: 'app 标签值',
+        { key: 'serviceAccountName', label: 'ServiceAccount 名称', type: 'text', placeholder: '留空使用 default', default: '', tip: 'RBAC 权限控制' },
-          type: 'text',
+        { key: 'terminationGracePeriod', label: '优雅终止时间 (秒)', type: 'number', min: 0, max: 300, default: 30, tip: 'SIGTERM 后等待多久发送 SIGKILL' },
-          default: '',
-          tip: '留空则使用应用名称',
-        },
-        {
-          key: 'versionLabel',
-          label: 'version 标签',
-          type: 'text',
-          placeholder: 'v1',
-          default: 'v1',
-        },
-        {
-          key: 'imagePullPolicy',
-          label: '镜像拉取策略',
-          type: 'select',
-          options: [
-            { label: 'IfNotPresent (推荐)', value: 'IfNotPresent' },
-            { label: 'Always', value: 'Always' },
-            { label: 'Never', value: 'Never' },
-          ],
-          default: 'IfNotPresent',
-        },
       ],
     },
   ],
 }
 
+// ======================== YAML 生成器 ========================
+
+function buildProbe(config, prefix, type, path, port, cmd, headers, initDelay, period, timeout, failure, success) {
+  if (!config[prefix]) return null
+  const probeType = config[type] || 'httpGet'
+  const probe = {}
+
+  if (probeType === 'httpGet') {
+    probe.httpGet = { path: config[path], port: config[port], scheme: 'HTTP' }
+    const h = config[headers]
+    if (h) {
+      const hdrs = h.split('\n').filter(Boolean).map(line => {
+        const [k, ...v] = line.split(':')
+        return { name: k.trim(), value: v.join(':').trim() }
+      })
+      if (hdrs.length) probe.httpGet.httpHeaders = hdrs
+    }
+  } else if (probeType === 'tcpSocket') {
+    probe.tcpSocket = { port: config[port] }
+  } else {
+    const c = config[cmd] || 'cat /tmp/healthy'
+    probe.exec = { command: c.split(' ') }
+  }
+
+  probe.initialDelaySeconds = config[initDelay]
+  probe.periodSeconds = config[period]
+  probe.timeoutSeconds = config[timeout]
+  probe.failureThreshold = config[failure]
+  if (success !== null) probe.successThreshold = config[success]
+  return probe
+}
+
+function buildAffinity(config) {
+  const affinity = {}
+
+  // Node Affinity
+  if (config.enableNodeAffinity) {
+    const key = config.nodeAffinityKey1
+    const op = config.nodeAffinityOperator1
+    const vals = (config.nodeAffinityValues1 || '').split(',').map(s => s.trim()).filter(Boolean)
+    const term = { matchExpressions: [{ key, operator: op }] }
+    if (['In', 'NotIn'].includes(op)) term.matchExpressions[0].values = vals
+
+    if (config.nodeAffinityType === 'required') {
+      affinity.nodeAffinity = { requiredDuringSchedulingIgnoredDuringExecution: { nodeSelectorTerms: [term] } }
+    } else {
+      affinity.nodeAffinity = {
+        preferredDuringSchedulingIgnoredDuringExecution: [{
+          weight: config.nodeAffinityWeight || 80,
+          preference: term,
+        }],
+      }
+    }
+  }
+
+  // Pod Anti-Affinity
+  if (config.enablePodAntiAffinity) {
+    const labelKey = config.podAntiAffinityKey || 'app'
+    const topology = config.podAntiAffinityTopology || 'kubernetes.io/hostname'
+    const term = {
+      labelSelector: { matchExpressions: [{ key: labelKey, operator: 'In', values: [config.appLabel || config.appName] }] },
+      topologyKey: topology,
+    }
+    if (config.podAntiAffinityType === 'required') {
+      affinity.podAntiAffinity = { requiredDuringSchedulingIgnoredDuringExecution: [term] }
+    } else {
+      affinity.podAntiAffinity = {
+        preferredDuringSchedulingIgnoredDuringExecution: [{
+          weight: config.podAntiAffinityWeight || 100,
+          podAffinityTerm: term,
+        }],
+      }
+    }
+  }
+
+  return Object.keys(affinity).length ? affinity : undefined
+}
+
+export function generateK8sDeploymentYaml(config) {
+  const labels = { app: config.appLabel || config.appName }
+  if (config.versionLabel) labels.version = config.versionLabel
+
+  const container = {
+    name: config.appName,
+    image: config.image,
+    imagePullPolicy: config.imagePullPolicy,
+    ports: [{ name: config.portName, containerPort: config.containerPort, protocol: config.protocol }],
+    resources: {
+      requests: { cpu: config.cpuRequest, memory: config.memoryRequest },
+      limits: { cpu: config.cpuLimit, memory: config.memoryLimit },
+    },
+  }
+
+  // 探针
+  container.startupProbe = buildProbe(config, 'enableStartupProbe', 'startupProbeType', 'startupPath', 'startupPort', 'startupCommand', null, 'startupInitialDelay', 'startupPeriod', 'startupTimeout', 'startupFailureThreshold', null)
+  container.livenessProbe = buildProbe(config, 'enableLivenessProbe', 'livenessProbeType', 'livenessPath', 'livenessPort', 'livenessCommand', 'livenessHttpHeaders', 'livenessInitialDelay', 'livenessPeriod', 'livenessTimeout', 'livenessFailureThreshold', 'livenessSuccessThreshold')
+  container.readinessProbe = buildProbe(config, 'enableReadinessProbe', 'readinessProbeType', 'readinessPath', 'readinessPort', 'readinessCommand', 'readinessHttpHeaders', 'readinessInitialDelay', 'readinessPeriod', 'readinessTimeout', 'readinessFailureThreshold', 'readinessSuccessThreshold')
+  if (!container.startupProbe) delete container.startupProbe
+  if (!container.livenessProbe) delete container.livenessProbe
+  if (!container.readinessProbe) delete container.readinessProbe
+
+  // 环境变量
+  if (config.enableEnv && config.envVars) {
+    container.env = config.envVars.split('\n').filter(Boolean).map(line => {
+      const [k, ...v] = line.split('=')
+      return { name: k.trim(), value: v.join('=').trim() }
+    })
+  }
+  if (config.enableEnvFromConfigMap || config.enableEnvFromSecret) {
+    container.envFrom = []
+    if (config.enableEnvFromConfigMap) container.envFrom.push({ configMapRef: { name: config.envFromConfigMapName } })
+    if (config.enableEnvFromSecret) container.envFrom.push({ secretRef: { name: config.envFromSecretName } })
+  }
+
+  // 卷挂载
+  const volumes = []
+  if (config.enableVolumeMount) {
+    container.volumeMounts = [{ name: config.volumeName, mountPath: config.volumeMountPath, readOnly: config.volumeReadOnly || undefined }]
+    const vol = { name: config.volumeName }
+    const vt = config.volumeType
+    if (vt === 'emptyDir') vol.emptyDir = {}
+    else if (vt === 'pvc') vol.persistentVolumeClaim = { claimName: config.pvcClaimName }
+    else if (vt === 'configMap') vol.configMap = { name: config.configMapName }
+    else if (vt === 'secret') vol.secret = { secretName: config.secretVolumeName }
+    else if (vt === 'hostPath') vol.hostPath = { path: config.hostPath, type: 'DirectoryOrCreate' }
+    volumes.push(vol)
+  }
+
+  // Security Context
+  if (config.enableSecurityContext) {
+    container.securityContext = {
+      runAsUser: config.runAsUser,
+      runAsGroup: config.runAsGroup,
+      runAsNonRoot: config.runAsNonRoot,
+      readOnlyRootFilesystem: config.readOnlyRootFilesystem || undefined,
+      allowPrivilegeEscalation: config.allowPrivilegeEscalation,
+    }
+  }
+
+  const podSpec = { containers: [container] }
+
+  // ServiceAccount
+  if (config.serviceAccountName) podSpec.serviceAccountName = config.serviceAccountName
+
+  // 优雅终止
+  if (config.terminationGracePeriod) podSpec.terminationGracePeriodSeconds = config.terminationGracePeriod
+
+  // NodeSelector
+  if (config.enableNodeSelector && config.nodeSelectorKey) {
+    podSpec.nodeSelector = { [config.nodeSelectorKey]: config.nodeSelectorValue }
+  }
+
+  // Affinity
+  const affinity = buildAffinity(config)
+  if (affinity) podSpec.affinity = affinity
+
+  // Tolerations
+  if (config.enableToleration) {
+    const t = { key: config.tolerationKey, operator: config.tolerationOperator, effect: config.tolerationEffect }
+    if (config.tolerationOperator === 'Equal') t.value = config.tolerationValue
+    if (config.tolerationEffect === 'NoExecute' && config.tolerationSeconds) t.tolerationSeconds = config.tolerationSeconds
+    podSpec.tolerations = [t]
+  }
+
+  // Volumes
+  if (volumes.length) podSpec.volumes = volumes
+
+  // fsGroup
+  if (config.enableSecurityContext && config.fsGroup) {
+    podSpec.securityContext = { fsGroup: config.fsGroup }
+  }
+
+  const deployment = {
+    apiVersion: 'apps/v1',
+    kind: 'Deployment',
+    metadata: { name: config.appName, namespace: config.namespace, labels },
+    spec: {
+      replicas: config.replicas,
+      revisionHistoryLimit: config.revisionHistoryLimit,
+      progressDeadlineSeconds: config.progressDeadlineSeconds,
+      minReadySeconds: config.minReadySeconds,
+      selector: { matchLabels: { app: labels.app } },
+      strategy: config.strategy === 'RollingUpdate'
+        ? { type: 'RollingUpdate', rollingUpdate: { maxSurge: config.maxSurge, maxUnavailable: config.maxUnavailable } }
+        : { type: 'Recreate' },
+      template: { metadata: { labels }, spec: podSpec },
+    },
+  }
+
+  const header = `# K8s Deployment - 由 ConfTemplate 生成\n# 生成时间: ${new Date().toLocaleString('zh-CN')}\n# 部署命令: kubectl apply -f ${config.fileName || 'deployment.yaml'}\n`
+  return header + '\n' + toYaml(deployment)
+}
+
 function toYaml(obj, indent = 0) {
   const lines = []
   const prefix = '  '.repeat(indent)
-
   for (const [key, value] of Object.entries(obj)) {
     if (value === null || value === undefined || value === '') continue
-
     if (Array.isArray(value)) {
       lines.push(`${prefix}${key}:`)
       for (const item of value) {
@@ -298,9 +445,18 @@ function toYaml(obj, indent = 0) {
           const entries = Object.entries(item).filter(([, v]) => v !== null && v !== undefined && v !== '')
           if (entries.length === 0) continue
           const first = entries[0]
-          lines.push(`${prefix}  - ${first[0]}: ${first[1]}`)
+          lines.push(`${prefix}  - ${first[0]}: ${typeof first[1] === 'object' ? '' : first[1]}`)
+          if (typeof first[1] === 'object') {
+            lines.push(toYaml(first[1], indent + 3))
+          }
           for (let i = 1; i < entries.length; i++) {
-            lines.push(`${prefix}    ${entries[i][0]}: ${entries[i][1]}`)
+            const [k, v] = entries[i]
+            if (typeof v === 'object') {
+              lines.push(`${prefix}    ${k}:`)
+              lines.push(toYaml(v, indent + 4))
+            } else {
+              lines.push(`${prefix}    ${k}: ${v}`)
+            }
           }
         } else {
           lines.push(`${prefix}  - ${item}`)
@@ -313,104 +469,5 @@ function toYaml(obj, indent = 0) {
       lines.push(`${prefix}${key}: ${value}`)
     }
   }
-
   return lines.join('\n')
 }
-
-export function generateK8sDeploymentYaml(config) {
-  const labels = {
-    app: config.appLabel || config.appName,
-  }
-  if (config.versionLabel) {
-    labels.version = config.versionLabel
-  }
-
-  const container = {
-    name: config.appName,
-    image: config.image,
-    imagePullPolicy: config.imagePullPolicy,
-    ports: [{
-      name: config.portName,
-      containerPort: config.containerPort,
-      protocol: config.protocol,
-    }],
-    resources: {
-      requests: {
-        cpu: config.cpuRequest,
-        memory: config.memoryRequest,
-      },
-      limits: {
-        cpu: config.cpuLimit,
-        memory: config.memoryLimit,
-      },
-    },
-  }
-
-  const probeConfig = (type, path, port) => {
-    if (type === 'httpGet') {
-      return { httpGet: { path, port, scheme: 'HTTP' } }
-    }
-    if (type === 'tcpSocket') {
-      return { tcpSocket: { port } }
-    }
-    return { exec: { command: ['cat', '/tmp/healthy'] } }
-  }
-
-  if (config.enableLivenessProbe) {
-    container.livenessProbe = {
-      ...probeConfig(config.livenessProbeType, config.livenessPath, config.livenessPort),
-      initialDelaySeconds: 15,
-      periodSeconds: 20,
-      timeoutSeconds: 5,
-      failureThreshold: 3,
-    }
-  }
-
-  if (config.enableReadinessProbe) {
-    container.readinessProbe = {
-      ...probeConfig(config.readinessProbeType, config.readinessPath, config.readinessPort),
-      initialDelaySeconds: 5,
-      periodSeconds: 10,
-      timeoutSeconds: 3,
-      failureThreshold: 3,
-    }
-  }
-
-  const deployment = {
-    apiVersion: 'apps/v1',
-    kind: 'Deployment',
-    metadata: {
-      name: config.appName,
-      namespace: config.namespace,
-      labels,
-    },
-    spec: {
-      replicas: config.replicas,
-      selector: {
-        matchLabels: { app: labels.app },
-      },
-      strategy: config.strategy === 'RollingUpdate'
-        ? {
-            type: 'RollingUpdate',
-            rollingUpdate: {
-              maxSurge: config.maxSurge,
-              maxUnavailable: config.maxUnavailable,
-            },
-          }
-        : { type: 'Recreate' },
-      template: {
-        metadata: { labels },
-        spec: {
-          containers: [container],
-        },
-      },
-    },
-  }
-
-  const header = `# K8s Deployment - 由 ConfTemplate 生成
-# 生成时间: ${new Date().toLocaleString('zh-CN')}
-# 部署命令: kubectl apply -f ${config.fileName || 'deployment.yaml'}
-`
-
-  return header + '\n' + toYaml(deployment)
-}

src/schemas/k8s-job.js

@@ -1,9 +1,14 @@
+/**
+ * K8s Job 生产级 Schema — 由 ConfTemplate 生成
+ * 增强: 容器端口、资源限制、环境变量、卷挂载、安全上下文、ServiceAccount
+ */
+
 export const k8sJobSchema = {
   id: 'k8s-job',
   name: 'K8s Job',
   icon: 'Box',
   category: 'K8S 工作负载',
-  description: 'Kubernetes Job — 运行一次性批处理任务',
+  description: 'Kubernetes Job — 运行一次性批处理任务（生产级）',
   format: 'yaml',
   fileName: 'job.yaml',
   groups: [
@@ -33,6 +38,17 @@ export const k8sJobSchema = {
           default: 'busybox:latest',
           required: true,
         },
+        {
+          key: 'imagePullPolicy',
+          label: '镜像拉取策略',
+          type: 'select',
+          options: [
+            { label: 'IfNotPresent (推荐)', value: 'IfNotPresent' },
+            { label: 'Always (每次拉取)', value: 'Always' },
+            { label: 'Never (仅本地)', value: 'Never' },
+          ],
+          default: 'IfNotPresent',
+        },
         {
           key: 'command',
           label: 'Command',
@@ -109,50 +125,244 @@ export const k8sJobSchema = {
         },
       ],
     },
+    {
+      title: '容器端口',
+      fields: [
+        { key: 'containerPort', label: '容器端口', type: 'number', min: 1, max: 65535, default: 80 },
+        { key: 'portName', label: '端口名称', type: 'text', default: 'http' },
+        { key: 'protocol', label: '协议', type: 'select', options: [{ label: 'TCP', value: 'TCP' }, { label: 'UDP', value: 'UDP' }], default: 'TCP' },
+      ],
+    },
+    {
+      title: '资源限制',
+      fields: [
+        { key: 'cpuRequest', label: 'CPU Requests', type: 'select', options: [
+          { label: '50m', value: '50m' },{ label: '100m', value: '100m' },{ label: '200m', value: '200m' },
+          { label: '500m', value: '500m' },{ label: '1', value: '1' },{ label: '2', value: '2' },
+        ], default: '100m' },
+        { key: 'cpuLimit', label: 'CPU Limits', type: 'select', options: [
+          { label: '200m', value: '200m' },{ label: '500m', value: '500m' },{ label: '1', value: '1' },
+          { label: '2', value: '2' },{ label: '4', value: '4' },
+        ], default: '500m' },
+        { key: 'memoryRequest', label: 'Memory Requests', type: 'select', options: [
+          { label: '64Mi', value: '64Mi' },{ label: '128Mi', value: '128Mi' },{ label: '256Mi', value: '256Mi' },
+          { label: '512Mi', value: '512Mi' },{ label: '1Gi', value: '1Gi' },
+        ], default: '128Mi' },
+        { key: 'memoryLimit', label: 'Memory Limits', type: 'select', options: [
+          { label: '128Mi', value: '128Mi' },{ label: '256Mi', value: '256Mi' },{ label: '512Mi', value: '512Mi' },
+          { label: '1Gi', value: '1Gi' },{ label: '2Gi', value: '2Gi' },{ label: '4Gi', value: '4Gi' },
+        ], default: '256Mi' },
+      ],
+    },
+    {
+      title: '环境变量',
+      fields: [
+        { key: 'enableEnv', label: '定义环境变量', type: 'switch', default: false },
+        { key: 'envVars', label: '环境变量 (KEY=VALUE)', type: 'text', placeholder: 'APP_ENV=production\nLOG_LEVEL=info', default: 'APP_ENV=production\nLOG_LEVEL=info', dependsOn: { key: 'enableEnv', value: true }, tip: '每行一个，格式 KEY=VALUE' },
+        { key: 'enableEnvFromConfigMap', label: '从 ConfigMap 导入', type: 'switch', default: false },
+        { key: 'envFromConfigMapName', label: 'ConfigMap 名称', type: 'text', default: 'my-config', dependsOn: { key: 'enableEnvFromConfigMap', value: true } },
+        { key: 'enableEnvFromSecret', label: '从 Secret 导入', type: 'switch', default: false },
+        { key: 'envFromSecretName', label: 'Secret 名称', type: 'text', default: 'my-secret', dependsOn: { key: 'enableEnvFromSecret', value: true } },
+      ],
+    },
+    {
+      title: '卷挂载',
+      fields: [
+        { key: 'enableVolumeMount', label: '挂载卷', type: 'switch', default: false },
+        { key: 'volumeType', label: '卷类型', type: 'select', options: [
+          { label: 'emptyDir - 临时目录', value: 'emptyDir' },
+          { label: 'PersistentVolumeClaim', value: 'pvc' },
+          { label: 'ConfigMap', value: 'configMap' },
+          { label: 'Secret', value: 'secret' },
+          { label: 'HostPath - 主机路径', value: 'hostPath' },
+        ], default: 'emptyDir', dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'volumeName', label: '卷名称', type: 'text', default: 'data', dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'volumeMountPath', label: '挂载路径', type: 'text', default: '/data', dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'volumeReadOnly', label: '只读挂载', type: 'switch', default: false, dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'pvcClaimName', label: 'PVC 名称', type: 'text', default: 'my-pvc', dependsOn: { key: 'volumeType', value: 'pvc' } },
+        { key: 'configMapName', label: 'ConfigMap 名称', type: 'text', default: 'my-config', dependsOn: { key: 'volumeType', value: 'configMap' } },
+        { key: 'secretVolumeName', label: 'Secret 名称', type: 'text', default: 'my-secret', dependsOn: { key: 'volumeType', value: 'secret' } },
+        { key: 'hostPath', label: '主机路径', type: 'text', default: '/tmp/data', dependsOn: { key: 'volumeType', value: 'hostPath' } },
+      ],
+    },
+    {
+      title: '安全上下文 (Security Context)',
+      fields: [
+        { key: 'enableSecurityContext', label: '启用安全上下文', type: 'switch', default: false },
+        { key: 'runAsUser', label: '运行用户 UID', type: 'number', min: 0, max: 65535, default: 1000, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'runAsGroup', label: '运行用户组 GID', type: 'number', min: 0, max: 65535, default: 1000, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'runAsNonRoot', label: '禁止 Root 运行', type: 'switch', default: true, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'readOnlyRootFilesystem', label: '只读根文件系统', type: 'switch', default: false, dependsOn: { key: 'enableSecurityContext', value: true }, tip: '增强安全性，需要写入的目录用 emptyDir 挂载' },
+        { key: 'allowPrivilegeEscalation', label: '允许提权', type: 'switch', default: false, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'fsGroup', label: '文件系统 GID', type: 'number', min: 0, max: 65535, default: 2000, dependsOn: { key: 'enableSecurityContext', value: true }, tip: '卷文件的所有组' },
+      ],
+    },
+    {
+      title: 'ServiceAccount',
+      fields: [
+        { key: 'serviceAccountName', label: 'ServiceAccount 名称', type: 'text', placeholder: '留空使用 default', default: '', tip: 'RBAC 权限控制' },
+      ],
+    },
   ],
 }
 
-function toYaml(obj, indent = 0) {
+// ======================== YAML 生成器 ========================
-  const lines = []
-  const prefix = '  '.repeat(indent)
 
-  for (const [key, value] of Object.entries(obj)) {
+function toYaml(obj, indent) {
+  indent = indent || 0
+  var lines = []
+  var prefix = ''
+  for (var p = 0; p < indent; p++) prefix += '  '
+  var keys = Object.keys(obj)
+  for (var ki = 0; ki < keys.length; ki++) {
+    var key = keys[ki]
+    var value = obj[key]
     if (value === null || value === undefined || value === '') continue
-
     if (Array.isArray(value)) {
-      lines.push(`${prefix}${key}:`)
+      lines.push(prefix + key + ':')
-      for (const item of value) {
+      for (var ai = 0; ai < value.length; ai++) {
+        var item = value[ai]
         if (typeof item === 'object' && item !== null) {
-          const entries = Object.entries(item).filter(([, v]) => v !== null && v !== undefined && v !== '')
+          lines.push(renderArrayObject(item, indent + 1))
-          if (entries.length === 0) continue
-          const first = entries[0]
-          lines.push(`${prefix}  - ${first[0]}: ${first[1]}`)
-          for (let i = 1; i < entries.length; i++) {
-            lines.push(`${prefix}    ${entries[i][0]}: ${entries[i][1]}`)
-          }
         } else {
-          lines.push(`${prefix}  - ${item}`)
+          lines.push(prefix + '  - ' + item)
         }
       }
     } else if (typeof value === 'object') {
-      lines.push(`${prefix}${key}:`)
+      lines.push(prefix + key + ':')
       lines.push(toYaml(value, indent + 1))
     } else {
-      lines.push(`${prefix}${key}: ${value}`)
+      lines.push(prefix + key + ': ' + value)
     }
   }
+  return lines.join('\n')
+}
 
+function renderArrayObject(item, indent) {
+  var prefix = ''
+  for (var p = 0; p < indent; p++) prefix += '  '
+  var entries = Object.entries(item).filter(function(pair) { return pair[1] !== null && pair[1] !== undefined && pair[1] !== '' })
+  if (entries.length === 0) return ''
+  var lines = []
+  var first = entries[0]
+  var fk = first[0], fv = first[1]
+  if (Array.isArray(fv)) {
+    lines.push(prefix + '- ' + fk + ':')
+    for (var ai = 0; ai < fv.length; ai++) {
+      var arrItem = fv[ai]
+      if (typeof arrItem === 'object' && arrItem !== null) {
+        lines.push(renderArrayObject(arrItem, indent + 2))
+      } else {
+        lines.push(prefix + '    - ' + arrItem)
+      }
+    }
+  } else if (typeof fv === 'object' && fv !== null) {
+    lines.push(prefix + '- ' + fk + ':')
+    lines.push(toYaml(fv, indent + 2))
+  } else {
+    lines.push(prefix + '- ' + fk + ': ' + fv)
+  }
+  for (var i = 1; i < entries.length; i++) {
+    var k = entries[i][0], v = entries[i][1]
+    if (v === null || v === undefined || v === '') continue
+    if (Array.isArray(v)) {
+      lines.push(prefix + '  ' + k + ':')
+      for (var ai = 0; ai < v.length; ai++) {
+        var arrItem = v[ai]
+        if (typeof arrItem === 'object' && arrItem !== null) {
+          lines.push(renderArrayObject(arrItem, indent + 2))
+        } else {
+          lines.push(prefix + '    - ' + arrItem)
+        }
+      }
+    } else if (typeof v === 'object') {
+      lines.push(prefix + '  ' + k + ':')
+      lines.push(toYaml(v, indent + 2))
+    } else {
+      lines.push(prefix + '  ' + k + ': ' + v)
+    }
+  }
   return lines.join('\n')
 }
 
 export function generateK8sJobYaml(config) {
-  const container = {
+  var container = {
     name: config.name,
     image: config.image,
+    imagePullPolicy: config.imagePullPolicy,
     command: config.command.split(' '),
   }
 
-  const job = {
+  // 容器端口
+  if (config.containerPort) {
+    container.ports = [{
+      name: config.portName || 'http',
+      containerPort: config.containerPort,
+      protocol: config.protocol || 'TCP',
+    }]
+  }
+
+  // 资源限制
+  container.resources = {
+    requests: { cpu: config.cpuRequest, memory: config.memoryRequest },
+    limits: { cpu: config.cpuLimit, memory: config.memoryLimit },
+  }
+
+  // 环境变量
+  if (config.enableEnv && config.envVars) {
+    container.env = config.envVars.split('\n').filter(Boolean).map(function(line) {
+      var idx = line.indexOf('=')
+      return { name: line.substring(0, idx).trim(), value: line.substring(idx + 1).trim() }
+    })
+  }
+  if (config.enableEnvFromConfigMap || config.enableEnvFromSecret) {
+    container.envFrom = []
+    if (config.enableEnvFromConfigMap) container.envFrom.push({ configMapRef: { name: config.envFromConfigMapName } })
+    if (config.enableEnvFromSecret) container.envFrom.push({ secretRef: { name: config.envFromSecretName } })
+  }
+
+  // 卷挂载
+  var volumes = []
+  if (config.enableVolumeMount) {
+    container.volumeMounts = [{ name: config.volumeName, mountPath: config.volumeMountPath, readOnly: config.volumeReadOnly || undefined }]
+    var vol = { name: config.volumeName }
+    var vt = config.volumeType
+    if (vt === 'emptyDir') vol.emptyDir = {}
+    else if (vt === 'pvc') vol.persistentVolumeClaim = { claimName: config.pvcClaimName }
+    else if (vt === 'configMap') vol.configMap = { name: config.configMapName }
+    else if (vt === 'secret') vol.secret = { secretName: config.secretVolumeName }
+    else if (vt === 'hostPath') vol.hostPath = { path: config.hostPath, type: 'DirectoryOrCreate' }
+    volumes.push(vol)
+  }
+
+  // Security Context
+  if (config.enableSecurityContext) {
+    container.securityContext = {
+      runAsUser: config.runAsUser,
+      runAsGroup: config.runAsGroup,
+      runAsNonRoot: config.runAsNonRoot,
+      readOnlyRootFilesystem: config.readOnlyRootFilesystem || undefined,
+      allowPrivilegeEscalation: config.allowPrivilegeEscalation,
+    }
+  }
+
+  var podSpec = {
+    containers: [container],
+    restartPolicy: config.restartPolicy,
+  }
+
+  // ServiceAccount
+  if (config.serviceAccountName) podSpec.serviceAccountName = config.serviceAccountName
+
+  // Volumes
+  if (volumes.length) podSpec.volumes = volumes
+
+  // fsGroup
+  if (config.enableSecurityContext && config.fsGroup) {
+    podSpec.securityContext = { fsGroup: config.fsGroup }
+  }
+
+  var job = {
     apiVersion: 'batch/v1',
     kind: 'Job',
     metadata: {
@@ -163,24 +373,15 @@ export function generateK8sJobYaml(config) {
       backoffLimit: config.backoffLimit,
       completions: config.completions,
       parallelism: config.parallelism,
+      activeDeadlineSeconds: config.activeDeadlineSeconds > 0 ? config.activeDeadlineSeconds : undefined,
+      ttlSecondsAfterFinished: config.ttlSecondsAfterFinished > 0 ? config.ttlSecondsAfterFinished : undefined,
       template: {
-        spec: {
+        spec: podSpec,
-          containers: [container],
-          restartPolicy: config.restartPolicy,
-        },
       },
     },
   }
 
-  if (config.activeDeadlineSeconds > 0) {
+  var header = '# K8s Job - 由 ConfTemplate 生成\n# 生成时间: ' + new Date().toLocaleString('zh-CN') + '\n# 部署命令: kubectl apply -f ' + (config.fileName || 'job.yaml') + '\n'
-    job.spec.activeDeadlineSeconds = config.activeDeadlineSeconds
-  }
-
-  if (config.ttlSecondsAfterFinished > 0) {
-    job.spec.ttlSecondsAfterFinished = config.ttlSecondsAfterFinished
-  }
-
-  const header = `# K8s Job - 由 ConfTemplate 生成\n# 生成时间: ${new Date().toLocaleString('zh-CN')}\n# 部署命令: kubectl apply -f ${config.fileName || 'job.yaml'}\n`
 
   return header + '\n' + toYaml(job)
 }

src/schemas/k8s-pod.js

@@ -10,217 +10,446 @@ export const k8sPodSchema = {
     {
       title: '基础信息',
       fields: [
-        {
+        { key: 'name', label: 'Pod 名称', type: 'text', placeholder: 'my-pod', default: 'my-pod', required: true },
-          key: 'name',
+        { key: 'namespace', label: '命名空间', type: 'text', placeholder: 'default', default: 'default' },
-          label: 'Pod 名称',
+        { key: 'containerName', label: '容器名称', type: 'text', placeholder: 'main', default: 'main', required: true },
-          type: 'text',
+        { key: 'image', label: '容器镜像', type: 'text', placeholder: 'nginx:1.24', default: 'nginx:1.24', required: true },
-          placeholder: 'my-pod',
+        { key: 'imagePullPolicy', label: '镜像拉取策略', type: 'select', options: [
-          default: 'my-pod',
-          required: true,
-        },
-        {
-          key: 'namespace',
-          label: '命名空间',
-          type: 'text',
-          placeholder: 'default',
-          default: 'default',
-        },
-        {
-          key: 'containerName',
-          label: '容器名称',
-          type: 'text',
-          placeholder: 'main',
-          default: 'main',
-          required: true,
-        },
-        {
-          key: 'image',
-          label: '容器镜像',
-          type: 'text',
-          placeholder: 'nginx:1.24',
-          default: 'nginx:1.24',
-          required: true,
-        },
-        {
-          key: 'imagePullPolicy',
-          label: '镜像拉取策略',
-          type: 'select',
-          options: [
           { label: 'IfNotPresent (推荐)', value: 'IfNotPresent' },
           { label: 'Always', value: 'Always' },
           { label: 'Never', value: 'Never' },
-          ],
+        ], default: 'IfNotPresent' },
-          default: 'IfNotPresent',
-        },
       ],
     },
     {
       title: '容器端口',
       fields: [
-        {
+        { key: 'containerPort', label: '容器端口', type: 'number', min: 1, max: 65535, default: 80 },
-          key: 'containerPort',
+        { key: 'portName', label: '端口名称', type: 'text', default: 'http' },
-          label: '容器端口',
+        { key: 'protocol', label: '协议', type: 'select', options: [
-          type: 'number',
-          min: 1,
-          max: 65535,
-          default: 80,
-        },
-        {
-          key: 'protocol',
-          label: '协议',
-          type: 'select',
-          options: [
           { label: 'TCP', value: 'TCP' },
           { label: 'UDP', value: 'UDP' },
-          ],
+        ], default: 'TCP' },
-          default: 'TCP',
-        },
       ],
     },
     {
       title: '启动命令 (可选)',
       fields: [
-        {
+        { key: 'command', label: 'Command', type: 'text', placeholder: '/bin/sh', default: '', tip: '容器 ENTRYPOINT，留空则使用镜像默认值' },
-          key: 'command',
+        { key: 'args', label: 'Args', type: 'text', placeholder: '-c, echo hello', default: '', tip: '逗号分隔多个参数' },
-          label: 'Command',
-          type: 'text',
-          placeholder: '/bin/sh',
-          default: '',
-          tip: '容器 ENTRYPOINT，留空则使用镜像默认值',
-        },
-        {
-          key: 'args',
-          label: 'Args',
-          type: 'text',
-          placeholder: '-c, echo hello',
-          default: '',
-          tip: '逗号分隔多个参数',
-        },
       ],
     },
     {
       title: '环境变量 (可选)',
       fields: [
-        {
+        { key: 'envVars', label: '环境变量', type: 'keyvalue', default: [], tip: '键值对，将注入为容器环境变量' },
-          key: 'envVars',
+        { key: 'enableEnvFromConfigMap', label: '从 ConfigMap 导入', type: 'switch', default: false },
-          label: '环境变量',
+        { key: 'envFromConfigMapName', label: 'ConfigMap 名称', type: 'text', default: 'my-config', dependsOn: { key: 'enableEnvFromConfigMap', value: true } },
-          type: 'keyvalue',
+        { key: 'enableEnvFromSecret', label: '从 Secret 导入', type: 'switch', default: false },
-          default: [],
+        { key: 'envFromSecretName', label: 'Secret 名称', type: 'text', default: 'my-secret', dependsOn: { key: 'enableEnvFromSecret', value: true } },
-          tip: '键值对，将注入为容器环境变量',
-        },
       ],
     },
     {
       title: '资源限制',
       fields: [
-        {
+        { key: 'cpuRequest', label: 'CPU Requests', type: 'select', options: [
-          key: 'cpuRequest',
+          { label: '50m', value: '50m' },{ label: '100m', value: '100m' },{ label: '200m', value: '200m' },
-          label: 'CPU Requests',
+          { label: '500m', value: '500m' },{ label: '1', value: '1' },{ label: '2', value: '2' },
-          type: 'select',
+        ], default: '100m' },
-          options: [
+        { key: 'cpuLimit', label: 'CPU Limits', type: 'select', options: [
-            { label: '50m', value: '50m' },
+          { label: '200m', value: '200m' },{ label: '500m', value: '500m' },{ label: '1', value: '1' },
-            { label: '100m', value: '100m' },
+          { label: '2', value: '2' },{ label: '4', value: '4' },
-            { label: '200m', value: '200m' },
+        ], default: '500m' },
-            { label: '500m', value: '500m' },
+        { key: 'memoryRequest', label: 'Memory Requests', type: 'select', options: [
-            { label: '1', value: '1' },
+          { label: '64Mi', value: '64Mi' },{ label: '128Mi', value: '128Mi' },{ label: '256Mi', value: '256Mi' },
-            { label: '2', value: '2' },
+          { label: '512Mi', value: '512Mi' },{ label: '1Gi', value: '1Gi' },
-          ],
+        ], default: '128Mi' },
-          default: '100m',
+        { key: 'memoryLimit', label: 'Memory Limits', type: 'select', options: [
-        },
+          { label: '128Mi', value: '128Mi' },{ label: '256Mi', value: '256Mi' },{ label: '512Mi', value: '512Mi' },
-        {
+          { label: '1Gi', value: '1Gi' },{ label: '2Gi', value: '2Gi' },
-          key: 'cpuLimit',
+        ], default: '256Mi' },
-          label: 'CPU Limits',
-          type: 'select',
-          options: [
-            { label: '200m', value: '200m' },
-            { label: '500m', value: '500m' },
-            { label: '1', value: '1' },
-            { label: '2', value: '2' },
-            { label: '4', value: '4' },
-          ],
-          default: '500m',
-        },
-        {
-          key: 'memoryRequest',
-          label: 'Memory Requests',
-          type: 'select',
-          options: [
-            { label: '64Mi', value: '64Mi' },
-            { label: '128Mi', value: '128Mi' },
-            { label: '256Mi', value: '256Mi' },
-            { label: '512Mi', value: '512Mi' },
-            { label: '1Gi', value: '1Gi' },
-          ],
-          default: '128Mi',
-        },
-        {
-          key: 'memoryLimit',
-          label: 'Memory Limits',
-          type: 'select',
-          options: [
-            { label: '128Mi', value: '128Mi' },
-            { label: '256Mi', value: '256Mi' },
-            { label: '512Mi', value: '512Mi' },
-            { label: '1Gi', value: '1Gi' },
-            { label: '2Gi', value: '2Gi' },
-          ],
-          default: '256Mi',
-        },
       ],
     },
     {
       title: '重启与调度',
       fields: [
-        {
+        { key: 'restartPolicy', label: '重启策略', type: 'select', options: [
-          key: 'restartPolicy',
-          label: '重启策略',
-          type: 'select',
-          options: [
           { label: 'Always (默认)', value: 'Always' },
           { label: 'OnFailure', value: 'OnFailure' },
           { label: 'Never', value: 'Never' },
-          ],
+        ], default: 'Always' },
-          default: 'Always',
+        { key: 'nodeName', label: '指定节点', type: 'text', placeholder: 'node-1', default: '', tip: '留空则由调度器自动分配' },
-        },
-        {
-          key: 'nodeName',
-          label: '指定节点',
-          type: 'text',
-          placeholder: 'node-1',
-          default: '',
-          tip: '留空则由调度器自动分配',
-        },
       ],
     },
     {
       title: '标签',
       fields: [
-        {
+        { key: 'appLabel', label: 'app 标签值', type: 'text', default: '', tip: '留空则使用 Pod 名称' },
-          key: 'appLabel',
+        { key: 'versionLabel', label: 'version 标签', type: 'text', placeholder: 'v1', default: 'v1' },
-          label: 'app 标签值',
+      ],
-          type: 'text',
-          default: '',
-          tip: '留空则使用 Pod 名称',
     },
     {
-          key: 'versionLabel',
+      title: '启动探针 (Startup Probe)',
-          label: 'version 标签',
+      fields: [
-          type: 'text',
+        { key: 'enableStartupProbe', label: '启用启动探针', type: 'switch', default: false, tip: '慢启动容器必备，通过前 liveness/readiness 不会生效' },
-          placeholder: 'v1',
+        { key: 'startupProbeType', label: '探针方式', type: 'select', options: [
-          default: 'v1',
+          { label: 'HTTP GET', value: 'httpGet' },{ label: 'TCP Socket', value: 'tcpSocket' },{ label: 'Exec Command', value: 'exec' },
+        ], default: 'httpGet', dependsOn: { key: 'enableStartupProbe', value: true } },
+        { key: 'startupPath', label: '检查路径', type: 'text', default: '/healthz', dependsOn: { key: 'startupProbeType', value: 'httpGet' } },
+        { key: 'startupPort', label: '检查端口', type: 'number', min: 1, max: 65535, default: 80, dependsOn: { key: 'enableStartupProbe', value: true } },
+        { key: 'startupCommand', label: 'Exec 命令', type: 'text', placeholder: 'cat /tmp/healthy', default: 'cat /tmp/healthy', dependsOn: { key: 'startupProbeType', value: 'exec' } },
+        { key: 'startupInitialDelay', label: '初始延迟 (秒)', type: 'number', min: 0, max: 600, default: 0, dependsOn: { key: 'enableStartupProbe', value: true } },
+        { key: 'startupPeriod', label: '检查周期 (秒)', type: 'number', min: 1, max: 300, default: 10, dependsOn: { key: 'enableStartupProbe', value: true } },
+        { key: 'startupFailureThreshold', label: '失败阈值', type: 'number', min: 1, max: 100, default: 30, dependsOn: { key: 'enableStartupProbe', value: true }, tip: '30次×10秒=最多等300秒启动' },
+        { key: 'startupTimeout', label: '超时时间 (秒)', type: 'number', min: 1, max: 60, default: 5, dependsOn: { key: 'enableStartupProbe', value: true } },
+      ],
     },
+    {
+      title: '存活探针 (Liveness Probe)',
+      fields: [
+        { key: 'enableLivenessProbe', label: '启用存活探针', type: 'switch', default: true, tip: '失败则重启容器' },
+        { key: 'livenessProbeType', label: '探针方式', type: 'select', options: [
+          { label: 'HTTP GET', value: 'httpGet' },{ label: 'TCP Socket', value: 'tcpSocket' },{ label: 'Exec Command', value: 'exec' },
+        ], default: 'httpGet', dependsOn: { key: 'enableLivenessProbe', value: true } },
+        { key: 'livenessPath', label: '检查路径', type: 'text', default: '/healthz', dependsOn: { key: 'livenessProbeType', value: 'httpGet' } },
+        { key: 'livenessPort', label: '检查端口', type: 'number', min: 1, max: 65535, default: 80, dependsOn: { key: 'enableLivenessProbe', value: true } },
+        { key: 'livenessCommand', label: 'Exec 命令', type: 'text', placeholder: 'cat /tmp/healthy', default: 'cat /tmp/healthy', dependsOn: { key: 'livenessProbeType', value: 'exec' } },
+        { key: 'livenessHttpHeaders', label: 'HTTP 请求头', type: 'text', placeholder: 'X-Custom-Header: value', default: '', dependsOn: { key: 'livenessProbeType', value: 'httpGet' }, tip: '格式: Header-Name: value' },
+        { key: 'livenessInitialDelay', label: '初始延迟 (秒)', type: 'number', min: 0, max: 600, default: 15, dependsOn: { key: 'enableLivenessProbe', value: true } },
+        { key: 'livenessPeriod', label: '检查周期 (秒)', type: 'number', min: 1, max: 300, default: 20, dependsOn: { key: 'enableLivenessProbe', value: true } },
+        { key: 'livenessTimeout', label: '超时时间 (秒)', type: 'number', min: 1, max: 60, default: 5, dependsOn: { key: 'enableLivenessProbe', value: true } },
+        { key: 'livenessFailureThreshold', label: '失败阈值', type: 'number', min: 1, max: 30, default: 3, dependsOn: { key: 'enableLivenessProbe', value: true } },
+        { key: 'livenessSuccessThreshold', label: '成功阈值', type: 'number', min: 1, max: 10, default: 1, dependsOn: { key: 'enableLivenessProbe', value: true }, tip: 'liveness 只能为 1' },
+      ],
+    },
+    {
+      title: '就绪探针 (Readiness Probe)',
+      fields: [
+        { key: 'enableReadinessProbe', label: '启用就绪探针', type: 'switch', default: true, tip: '失败则从 Service 端点摘除' },
+        { key: 'readinessProbeType', label: '探针方式', type: 'select', options: [
+          { label: 'HTTP GET', value: 'httpGet' },{ label: 'TCP Socket', value: 'tcpSocket' },{ label: 'Exec Command', value: 'exec' },
+        ], default: 'httpGet', dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessPath', label: '检查路径', type: 'text', default: '/ready', dependsOn: { key: 'readinessProbeType', value: 'httpGet' } },
+        { key: 'readinessPort', label: '检查端口', type: 'number', min: 1, max: 65535, default: 80, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessCommand', label: 'Exec 命令', type: 'text', placeholder: 'cat /tmp/ready', default: 'cat /tmp/ready', dependsOn: { key: 'readinessProbeType', value: 'exec' } },
+        { key: 'readinessHttpHeaders', label: 'HTTP 请求头', type: 'text', placeholder: 'X-Custom-Header: value', default: '', dependsOn: { key: 'readinessProbeType', value: 'httpGet' } },
+        { key: 'readinessInitialDelay', label: '初始延迟 (秒)', type: 'number', min: 0, max: 600, default: 5, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessPeriod', label: '检查周期 (秒)', type: 'number', min: 1, max: 300, default: 10, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessTimeout', label: '超时时间 (秒)', type: 'number', min: 1, max: 60, default: 3, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessFailureThreshold', label: '失败阈值', type: 'number', min: 1, max: 30, default: 3, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessSuccessThreshold', label: '成功阈值', type: 'number', min: 1, max: 10, default: 1, dependsOn: { key: 'enableReadinessProbe', value: true } },
+      ],
+    },
+    {
+      title: '卷挂载',
+      fields: [
+        { key: 'enableVolumeMount', label: '挂载卷', type: 'switch', default: false },
+        { key: 'volumeType', label: '卷类型', type: 'select', options: [
+          { label: 'emptyDir - 临时目录', value: 'emptyDir' },
+          { label: 'PersistentVolumeClaim', value: 'pvc' },
+          { label: 'ConfigMap', value: 'configMap' },
+          { label: 'Secret', value: 'secret' },
+          { label: 'HostPath - 主机路径', value: 'hostPath' },
+        ], default: 'emptyDir', dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'volumeName', label: '卷名称', type: 'text', default: 'data', dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'volumeMountPath', label: '挂载路径', type: 'text', default: '/data', dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'volumeReadOnly', label: '只读挂载', type: 'switch', default: false, dependsOn: { key: 'enableVolumeMount', value: true } },
+        { key: 'pvcClaimName', label: 'PVC 名称', type: 'text', default: 'my-pvc', dependsOn: { key: 'volumeType', value: 'pvc' } },
+        { key: 'configMapName', label: 'ConfigMap 名称', type: 'text', default: 'my-config', dependsOn: { key: 'volumeType', value: 'configMap' } },
+        { key: 'secretVolumeName', label: 'Secret 名称', type: 'text', default: 'my-secret', dependsOn: { key: 'volumeType', value: 'secret' } },
+        { key: 'hostPath', label: '主机路径', type: 'text', default: '/tmp/data', dependsOn: { key: 'volumeType', value: 'hostPath' } },
+      ],
+    },
+    {
+      title: '节点调度 — NodeSelector',
+      fields: [
+        { key: 'enableNodeSelector', label: '启用 NodeSelector', type: 'switch', default: false, tip: '简单的节点标签匹配' },
+        { key: 'nodeSelectorKey', label: '标签 Key', type: 'text', placeholder: 'kubernetes.io/os', default: 'kubernetes.io/os', dependsOn: { key: 'enableNodeSelector', value: true } },
+        { key: 'nodeSelectorValue', label: '标签 Value', type: 'text', placeholder: 'linux', default: 'linux', dependsOn: { key: 'enableNodeSelector', value: true } },
+      ],
+    },
+    {
+      title: '节点调度 — 节点亲和性 (Node Affinity)',
+      fields: [
+        { key: 'enableNodeAffinity', label: '启用节点亲和性', type: 'switch', default: false, tip: '比 NodeSelector 更灵活的调度规则' },
+        { key: 'nodeAffinityType', label: '亲和类型', type: 'select', options: [
+          { label: 'required - 必须满足 (硬性)', value: 'required' },
+          { label: 'preferred - 尽量满足 (软性)', value: 'preferred' },
+        ], default: 'required', dependsOn: { key: 'enableNodeAffinity', value: true } },
+        { key: 'nodeAffinityKey1', label: '匹配标签 Key', type: 'text', placeholder: 'topology.kubernetes.io/zone', default: 'topology.kubernetes.io/zone', dependsOn: { key: 'enableNodeAffinity', value: true } },
+        { key: 'nodeAffinityOperator1', label: '操作符', type: 'select', options: [
+          { label: 'In - 值在列表中', value: 'In' },
+          { label: 'NotIn - 值不在列表中', value: 'NotIn' },
+          { label: 'Exists - 标签存在', value: 'Exists' },
+          { label: 'DoesNotExist - 标签不存在', value: 'DoesNotExist' },
+          { label: 'Gt - 大于', value: 'Gt' },
+          { label: 'Lt - 小于', value: 'Lt' },
+        ], default: 'In', dependsOn: { key: 'enableNodeAffinity', value: true } },
+        { key: 'nodeAffinityValues1', label: '匹配值 (逗号分隔)', type: 'text', placeholder: 'cn-east-1a,cn-east-1b', default: 'cn-east-1a,cn-east-1b', dependsOn: { key: 'nodeAffinityOperator1', valueNotIn: ['Exists', 'DoesNotExist'] } },
+        { key: 'nodeAffinityWeight', label: '权重 (preferred)', type: 'number', min: 1, max: 100, default: 80, dependsOn: { key: 'nodeAffinityType', value: 'preferred' } },
+      ],
+    },
+    {
+      title: 'Pod 反亲和性 (Pod Anti-Affinity)',
+      fields: [
+        { key: 'enablePodAntiAffinity', label: '启用 Pod 反亲和性', type: 'switch', default: false, tip: '让副本分散到不同节点/区域，提高可用性' },
+        { key: 'podAntiAffinityType', label: '亲和类型', type: 'select', options: [
+          { label: 'required - 必须分散 (硬性)', value: 'required' },
+          { label: 'preferred - 尽量分散 (软性)', value: 'preferred' },
+        ], default: 'preferred', dependsOn: { key: 'enablePodAntiAffinity', value: true } },
+        { key: 'podAntiAffinityKey', label: '匹配标签 Key', type: 'text', default: 'app', dependsOn: { key: 'enablePodAntiAffinity', value: true } },
+        { key: 'podAntiAffinityTopology', label: '拓扑域', type: 'select', options: [
+          { label: 'kubernetes.io/hostname (节点级)', value: 'kubernetes.io/hostname' },
+          { label: 'topology.kubernetes.io/zone (可用区级)', value: 'topology.kubernetes.io/zone' },
+          { label: 'topology.kubernetes.io/region (地域级)', value: 'topology.kubernetes.io/region' },
+        ], default: 'kubernetes.io/hostname', dependsOn: { key: 'enablePodAntiAffinity', value: true } },
+        { key: 'podAntiAffinityWeight', label: '权重 (preferred)', type: 'number', min: 1, max: 100, default: 100, dependsOn: { key: 'podAntiAffinityType', value: 'preferred' } },
+      ],
+    },
+    {
+      title: '容忍度 (Tolerations)',
+      fields: [
+        { key: 'enableToleration', label: '启用容忍度', type: 'switch', default: false, tip: '允许调度到有 taint 的节点' },
+        { key: 'tolerationKey', label: 'Taint Key', type: 'text', placeholder: 'node-role.kubernetes.io/master', default: 'node-role.kubernetes.io/master', dependsOn: { key: 'enableToleration', value: true } },
+        { key: 'tolerationOperator', label: '操作符', type: 'select', options: [
+          { label: 'Equal - 值匹配', value: 'Equal' },
+          { label: 'Exists - Key 存在即可', value: 'Exists' },
+        ], default: 'Exists', dependsOn: { key: 'enableToleration', value: true } },
+        { key: 'tolerationValue', label: 'Taint Value', type: 'text', default: '', dependsOn: { key: 'tolerationOperator', value: 'Equal' } },
+        { key: 'tolerationEffect', label: 'Taint Effect', type: 'select', options: [
+          { label: 'NoSchedule - 不调度新 Pod', value: 'NoSchedule' },
+          { label: 'PreferNoSchedule - 尽量不调度', value: 'PreferNoSchedule' },
+          { label: 'NoExecute - 驱逐已有 Pod', value: 'NoExecute' },
+        ], default: 'NoSchedule', dependsOn: { key: 'enableToleration', value: true } },
+        { key: 'tolerationSeconds', label: '容忍时长 (秒)', type: 'number', min: 0, max: 86400, default: 300, dependsOn: { key: 'tolerationEffect', value: 'NoExecute' }, tip: '仅 NoExecute 有效' },
+      ],
+    },
+    {
+      title: '安全上下文 (Security Context)',
+      fields: [
+        { key: 'enableSecurityContext', label: '启用安全上下文', type: 'switch', default: false },
+        { key: 'runAsUser', label: '运行用户 UID', type: 'number', min: 0, max: 65535, default: 1000, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'runAsGroup', label: '运行用户组 GID', type: 'number', min: 0, max: 65535, default: 1000, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'runAsNonRoot', label: '禁止 Root 运行', type: 'switch', default: true, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'readOnlyRootFilesystem', label: '只读根文件系统', type: 'switch', default: false, dependsOn: { key: 'enableSecurityContext', value: true }, tip: '增强安全性，需要写入的目录用 emptyDir 挂载' },
+        { key: 'allowPrivilegeEscalation', label: '允许提权', type: 'switch', default: false, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'fsGroup', label: '文件系统 GID', type: 'number', min: 0, max: 65535, default: 2000, dependsOn: { key: 'enableSecurityContext', value: true }, tip: '卷文件的所有组' },
+      ],
+    },
+    {
+      title: '高级选项',
+      fields: [
+        { key: 'serviceAccountName', label: 'ServiceAccount 名称', type: 'text', placeholder: '留空使用 default', default: '', tip: 'RBAC 权限控制' },
+        { key: 'terminationGracePeriod', label: '优雅终止时间 (秒)', type: 'number', min: 0, max: 300, default: 30, tip: 'SIGTERM 后等待多久发送 SIGKILL' },
+        { key: 'hostNetwork', label: '使用主机网络', type: 'switch', default: false, tip: 'Pod 将使用宿主机网络命名空间' },
+        { key: 'dnsPolicy', label: 'DNS 策略', type: 'select', options: [
+          { label: 'ClusterFirst (默认)', value: 'ClusterFirst' },
+          { label: 'Default - 继承节点 DNS', value: 'Default' },
+          { label: 'ClusterFirstWithHostNet - hostNetwork 时集群优先', value: 'ClusterFirstWithHostNet' },
+          { label: 'None - 使用 dnsConfig', value: 'None' },
+        ], default: 'ClusterFirst' },
       ],
     },
   ],
 }
 
+// ======================== YAML 生成器 ========================
+
+function buildProbe(config, prefix, type, path, port, cmd, headers, initDelay, period, timeout, failure, success) {
+  if (!config[prefix]) return null
+  const probeType = config[type] || 'httpGet'
+  const probe = {}
+
+  if (probeType === 'httpGet') {
+    probe.httpGet = { path: config[path], port: config[port], scheme: 'HTTP' }
+    const h = config[headers]
+    if (h) {
+      const hdrs = h.split('\n').filter(Boolean).map(line => {
+        const [k, ...v] = line.split(':')
+        return { name: k.trim(), value: v.join(':').trim() }
+      })
+      if (hdrs.length) probe.httpGet.httpHeaders = hdrs
+    }
+  } else if (probeType === 'tcpSocket') {
+    probe.tcpSocket = { port: config[port] }
+  } else {
+    const c = config[cmd] || 'cat /tmp/healthy'
+    probe.exec = { command: c.split(' ') }
+  }
+
+  probe.initialDelaySeconds = config[initDelay]
+  probe.periodSeconds = config[period]
+  probe.timeoutSeconds = config[timeout]
+  probe.failureThreshold = config[failure]
+  if (success !== null) probe.successThreshold = config[success]
+  return probe
+}
+
+function buildAffinity(config) {
+  const affinity = {}
+
+  // Node Affinity
+  if (config.enableNodeAffinity) {
+    const key = config.nodeAffinityKey1
+    const op = config.nodeAffinityOperator1
+    const vals = (config.nodeAffinityValues1 || '').split(',').map(s => s.trim()).filter(Boolean)
+    const term = { matchExpressions: [{ key, operator: op }] }
+    if (['In', 'NotIn'].includes(op)) term.matchExpressions[0].values = vals
+
+    if (config.nodeAffinityType === 'required') {
+      affinity.nodeAffinity = { requiredDuringSchedulingIgnoredDuringExecution: { nodeSelectorTerms: [term] } }
+    } else {
+      affinity.nodeAffinity = {
+        preferredDuringSchedulingIgnoredDuringExecution: [{
+          weight: config.nodeAffinityWeight || 80,
+          preference: term,
+        }],
+      }
+    }
+  }
+
+  // Pod Anti-Affinity
+  if (config.enablePodAntiAffinity) {
+    const labelKey = config.podAntiAffinityKey || 'app'
+    const topology = config.podAntiAffinityTopology || 'kubernetes.io/hostname'
+    const term = {
+      labelSelector: { matchExpressions: [{ key: labelKey, operator: 'In', values: [config.appLabel || config.name] }] },
+      topologyKey: topology,
+    }
+    if (config.podAntiAffinityType === 'required') {
+      affinity.podAntiAffinity = { requiredDuringSchedulingIgnoredDuringExecution: [term] }
+    } else {
+      affinity.podAntiAffinity = {
+        preferredDuringSchedulingIgnoredDuringExecution: [{
+          weight: config.podAntiAffinityWeight || 100,
+          podAffinityTerm: term,
+        }],
+      }
+    }
+  }
+
+  return Object.keys(affinity).length ? affinity : undefined
+}
+
+export function generateK8sPodYaml(config) {
+  const labels = { app: config.appLabel || config.name }
+  if (config.versionLabel) labels.version = config.versionLabel
+
+  const container = {
+    name: config.containerName,
+    image: config.image,
+    imagePullPolicy: config.imagePullPolicy,
+    ports: [{ name: config.portName, containerPort: config.containerPort, protocol: config.protocol }],
+    resources: {
+      requests: { cpu: config.cpuRequest, memory: config.memoryRequest },
+      limits: { cpu: config.cpuLimit, memory: config.memoryLimit },
+    },
+  }
+
+  if (config.command) container.command = config.command.split(',').map(s => s.trim())
+  if (config.args) container.args = config.args.split(',').map(s => s.trim())
+  if (config.envVars && config.envVars.length > 0) {
+    container.env = config.envVars.map(e => ({ name: e.key, value: e.value }))
+  }
+
+  // envFrom
+  if (config.enableEnvFromConfigMap || config.enableEnvFromSecret) {
+    container.envFrom = []
+    if (config.enableEnvFromConfigMap) container.envFrom.push({ configMapRef: { name: config.envFromConfigMapName } })
+    if (config.enableEnvFromSecret) container.envFrom.push({ secretRef: { name: config.envFromSecretName } })
+  }
+
+  // 探针
+  container.startupProbe = buildProbe(config, 'enableStartupProbe', 'startupProbeType', 'startupPath', 'startupPort', 'startupCommand', null, 'startupInitialDelay', 'startupPeriod', 'startupTimeout', 'startupFailureThreshold', null)
+  container.livenessProbe = buildProbe(config, 'enableLivenessProbe', 'livenessProbeType', 'livenessPath', 'livenessPort', 'livenessCommand', 'livenessHttpHeaders', 'livenessInitialDelay', 'livenessPeriod', 'livenessTimeout', 'livenessFailureThreshold', 'livenessSuccessThreshold')
+  container.readinessProbe = buildProbe(config, 'enableReadinessProbe', 'readinessProbeType', 'readinessPath', 'readinessPort', 'readinessCommand', 'readinessHttpHeaders', 'readinessInitialDelay', 'readinessPeriod', 'readinessTimeout', 'readinessFailureThreshold', 'readinessSuccessThreshold')
+  if (!container.startupProbe) delete container.startupProbe
+  if (!container.livenessProbe) delete container.livenessProbe
+  if (!container.readinessProbe) delete container.readinessProbe
+
+  // Security Context (container-level)
+  if (config.enableSecurityContext) {
+    container.securityContext = {
+      runAsUser: config.runAsUser,
+      runAsGroup: config.runAsGroup,
+      runAsNonRoot: config.runAsNonRoot,
+      readOnlyRootFilesystem: config.readOnlyRootFilesystem || undefined,
+      allowPrivilegeEscalation: config.allowPrivilegeEscalation,
+    }
+  }
+
+  // 卷挂载
+  const volumes = []
+  if (config.enableVolumeMount) {
+    container.volumeMounts = [{ name: config.volumeName, mountPath: config.volumeMountPath, readOnly: config.volumeReadOnly || undefined }]
+    const vol = { name: config.volumeName }
+    const vt = config.volumeType
+    if (vt === 'emptyDir') vol.emptyDir = {}
+    else if (vt === 'pvc') vol.persistentVolumeClaim = { claimName: config.pvcClaimName }
+    else if (vt === 'configMap') vol.configMap = { name: config.configMapName }
+    else if (vt === 'secret') vol.secret = { secretName: config.secretVolumeName }
+    else if (vt === 'hostPath') vol.hostPath = { path: config.hostPath, type: 'DirectoryOrCreate' }
+    volumes.push(vol)
+  }
+
+  const podSpec = { containers: [container] }
+
+  podSpec.restartPolicy = config.restartPolicy
+  if (config.nodeName) podSpec.nodeName = config.nodeName
+
+  // ServiceAccount
+  if (config.serviceAccountName) podSpec.serviceAccountName = config.serviceAccountName
+
+  // 优雅终止
+  if (config.terminationGracePeriod) podSpec.terminationGracePeriodSeconds = config.terminationGracePeriod
+
+  // HostNetwork
+  if (config.hostNetwork) podSpec.hostNetwork = true
+
+  // DNS Policy
+  if (config.dnsPolicy && config.dnsPolicy !== 'ClusterFirst') podSpec.dnsPolicy = config.dnsPolicy
+
+  // NodeSelector
+  if (config.enableNodeSelector && config.nodeSelectorKey) {
+    podSpec.nodeSelector = { [config.nodeSelectorKey]: config.nodeSelectorValue }
+  }
+
+  // Affinity
+  const affinity = buildAffinity(config)
+  if (affinity) podSpec.affinity = affinity
+
+  // Tolerations
+  if (config.enableToleration) {
+    const t = { key: config.tolerationKey, operator: config.tolerationOperator, effect: config.tolerationEffect }
+    if (config.tolerationOperator === 'Equal') t.value = config.tolerationValue
+    if (config.tolerationEffect === 'NoExecute' && config.tolerationSeconds) t.tolerationSeconds = config.tolerationSeconds
+    podSpec.tolerations = [t]
+  }
+
+  // Volumes
+  if (volumes.length) podSpec.volumes = volumes
+
+  // fsGroup
+  if (config.enableSecurityContext && config.fsGroup) {
+    podSpec.securityContext = { fsGroup: config.fsGroup }
+  }
+
+  const pod = {
+    apiVersion: 'v1',
+    kind: 'Pod',
+    metadata: { name: config.name, namespace: config.namespace, labels },
+    spec: podSpec,
+  }
+
+  const header = `# K8s Pod - 由 ConfTemplate 生成\n# 生成时间: ${new Date().toLocaleString('zh-CN')}\n# 部署命令: kubectl apply -f ${config.fileName || 'pod.yaml'}\n`
+  return header + '\n' + toYaml(pod)
+}
+
 function toYaml(obj, indent = 0) {
   const lines = []
   const prefix = '  '.repeat(indent)
-
   for (const [key, value] of Object.entries(obj)) {
     if (value === null || value === undefined || value === '') continue
-
     if (Array.isArray(value)) {
       lines.push(`${prefix}${key}:`)
       for (const item of value) {
@@ -228,9 +457,18 @@ function toYaml(obj, indent = 0) {
           const entries = Object.entries(item).filter(([, v]) => v !== null && v !== undefined && v !== '')
           if (entries.length === 0) continue
           const first = entries[0]
-          lines.push(`${prefix}  - ${first[0]}: ${first[1]}`)
+          lines.push(`${prefix}  - ${first[0]}: ${typeof first[1] === 'object' ? '' : first[1]}`)
+          if (typeof first[1] === 'object') {
+            lines.push(toYaml(first[1], indent + 3))
+          }
           for (let i = 1; i < entries.length; i++) {
-            lines.push(`${prefix}    ${entries[i][0]}: ${entries[i][1]}`)
+            const [k, v] = entries[i]
+            if (typeof v === 'object') {
+              lines.push(`${prefix}    ${k}:`)
+              lines.push(toYaml(v, indent + 4))
+            } else {
+              lines.push(`${prefix}    ${k}: ${v}`)
+            }
           }
         } else {
           lines.push(`${prefix}  - ${item}`)
@@ -243,62 +481,5 @@ function toYaml(obj, indent = 0) {
       lines.push(`${prefix}${key}: ${value}`)
     }
   }
-
   return lines.join('\n')
 }
-
-export function generateK8sPodYaml(config) {
-  const labels = {
-    app: config.appLabel || config.name,
-  }
-  if (config.versionLabel) {
-    labels.version = config.versionLabel
-  }
-
-  const container = {
-    name: config.containerName,
-    image: config.image,
-    imagePullPolicy: config.imagePullPolicy,
-    ports: [{
-      containerPort: config.containerPort,
-      protocol: config.protocol,
-    }],
-    resources: {
-      requests: { cpu: config.cpuRequest, memory: config.memoryRequest },
-      limits: { cpu: config.cpuLimit, memory: config.memoryLimit },
-    },
-  }
-
-  if (config.command) {
-    container.command = config.command.split(',').map(s => s.trim())
-  }
-  if (config.args) {
-    container.args = config.args.split(',').map(s => s.trim())
-  }
-  if (config.envVars && config.envVars.length > 0) {
-    container.env = config.envVars.map(e => ({ name: e.key, value: e.value }))
-  }
-
-  const podSpec = {
-    containers: [container],
-    restartPolicy: config.restartPolicy,
-  }
-  if (config.nodeName) {
-    podSpec.nodeName = config.nodeName
-  }
-
-  const pod = {
-    apiVersion: 'v1',
-    kind: 'Pod',
-    metadata: {
-      name: config.name,
-      namespace: config.namespace,
-      labels,
-    },
-    spec: podSpec,
-  }
-
-  const header = `# K8s Pod - 由 ConfTemplate 生成\n# 生成时间: ${new Date().toLocaleString('zh-CN')}\n# 部署命令: kubectl apply -f ${config.fileName || 'pod.yaml'}\n`
-
-  return header + '\n' + toYaml(pod)
-}

src/schemas/k8s-statefulset.js

@@ -10,242 +10,348 @@ export const k8sStatefulSetSchema = {
     {
       title: '基础信息',
       fields: [
-        {
+        { key: 'name', label: 'StatefulSet 名称', type: 'text', placeholder: 'my-statefulset', default: 'my-statefulset', required: true },
-          key: 'name',
+        { key: 'namespace', label: '命名空间', type: 'text', placeholder: 'default', default: 'default' },
-          label: 'StatefulSet 名称',
+        { key: 'appName', label: '应用名称', type: 'text', placeholder: 'my-app', default: 'my-app', required: true, tip: '用作 selector 和 label 的 app 值' },
-          type: 'text',
+        { key: 'image', label: '容器镜像', type: 'text', placeholder: 'nginx:1.24', default: 'nginx:1.24', required: true },
-          placeholder: 'my-statefulset',
+        { key: 'replicas', label: '副本数', type: 'number', min: 1, max: 100, default: 3 },
-          default: 'my-statefulset',
+        { key: 'imagePullPolicy', label: '镜像拉取策略', type: 'select', options: [
-          required: true,
+          { label: 'IfNotPresent (推荐)', value: 'IfNotPresent' },
-        },
+          { label: 'Always (每次拉取)', value: 'Always' },
-        {
+          { label: 'Never (仅本地)', value: 'Never' },
-          key: 'namespace',
+        ], default: 'IfNotPresent' },
-          label: '命名空间',
-          type: 'text',
-          placeholder: 'default',
-          default: 'default',
-        },
-        {
-          key: 'appName',
-          label: '应用名称',
-          type: 'text',
-          placeholder: 'my-app',
-          default: 'my-app',
-          required: true,
-          tip: '用作 selector 和 label 的 app 值',
-        },
-        {
-          key: 'image',
-          label: '容器镜像',
-          type: 'text',
-          placeholder: 'nginx:1.24',
-          default: 'nginx:1.24',
-          required: true,
-        },
-        {
-          key: 'replicas',
-          label: '副本数',
-          type: 'number',
-          min: 1,
-          max: 100,
-          default: 3,
-        },
       ],
     },
     {
       title: '网络与服务',
       fields: [
-        {
+        { key: 'containerPort', label: '容器端口', type: 'number', min: 1, max: 65535, default: 80 },
-          key: 'containerPort',
+        { key: 'portName', label: '端口名称', type: 'text', default: 'http' },
-          label: '容器端口',
+        { key: 'protocol', label: '协议', type: 'select', options: [{ label: 'TCP', value: 'TCP' }, { label: 'UDP', value: 'UDP' }], default: 'TCP' },
-          type: 'number',
+        { key: 'serviceName', label: 'Headless Service 名称', type: 'text', placeholder: 'my-service', default: 'my-service', required: true, tip: '必须已存在的 Headless Service' },
-          min: 1,
-          max: 65535,
-          default: 80,
-        },
-        {
-          key: 'serviceName',
-          label: 'Headless Service 名称',
-          type: 'text',
-          placeholder: 'my-service',
-          default: 'my-service',
-          required: true,
-          tip: '必须已存在的 Headless Service',
-        },
       ],
     },
     {
       title: '持久存储',
       fields: [
-        {
+        { key: 'volumeClaimEnabled', label: '启用 PVC', type: 'switch', default: true, tip: '为每个 Pod 创建独立的 PersistentVolumeClaim' },
-          key: 'volumeClaimEnabled',
+        { key: 'storageClassName', label: 'StorageClass', type: 'text', placeholder: 'standard', default: 'standard', dependsOn: { key: 'volumeClaimEnabled', value: true } },
-          label: '启用 PVC',
+        { key: 'storageSize', label: '存储大小', type: 'text', placeholder: '10Gi', default: '10Gi', dependsOn: { key: 'volumeClaimEnabled', value: true } },
-          type: 'switch',
+        { key: 'pvcAccessMode', label: '访问模式', type: 'select', options: [
-          default: true,
-          tip: '为每个 Pod 创建独立的 PersistentVolumeClaim',
-        },
-        {
-          key: 'storageClassName',
-          label: 'StorageClass',
-          type: 'text',
-          placeholder: 'standard',
-          default: 'standard',
-          dependsOn: { key: 'volumeClaimEnabled', value: true },
-        },
-        {
-          key: 'storageSize',
-          label: '存储大小',
-          type: 'text',
-          placeholder: '10Gi',
-          default: '10Gi',
-          dependsOn: { key: 'volumeClaimEnabled', value: true },
-        },
-        {
-          key: 'pvcAccessMode',
-          label: '访问模式',
-          type: 'select',
-          options: [
           { label: 'ReadWriteOnce', value: 'ReadWriteOnce' },
           { label: 'ReadWriteMany', value: 'ReadWriteMany' },
           { label: 'ReadOnlyMany', value: 'ReadOnlyMany' },
-          ],
+        ], default: 'ReadWriteOnce', dependsOn: { key: 'volumeClaimEnabled', value: true } },
-          default: 'ReadWriteOnce',
-          dependsOn: { key: 'volumeClaimEnabled', value: true },
-        },
       ],
     },
     {
       title: '资源限制',
       fields: [
-        {
+        { key: 'cpuRequest', label: 'CPU Requests', type: 'select', options: [
-          key: 'cpuRequest',
+          { label: '50m', value: '50m' },{ label: '100m', value: '100m' },{ label: '200m', value: '200m' },
-          label: 'CPU Requests',
+          { label: '500m', value: '500m' },{ label: '1', value: '1' },{ label: '2', value: '2' },
-          type: 'select',
+        ], default: '100m' },
-          options: [
+        { key: 'cpuLimit', label: 'CPU Limits', type: 'select', options: [
-            { label: '50m', value: '50m' },
+          { label: '200m', value: '200m' },{ label: '500m', value: '500m' },{ label: '1', value: '1' },
-            { label: '100m', value: '100m' },
+          { label: '2', value: '2' },{ label: '4', value: '4' },
-            { label: '200m', value: '200m' },
+        ], default: '500m' },
-            { label: '500m', value: '500m' },
+        { key: 'memoryRequest', label: 'Memory Requests', type: 'select', options: [
-            { label: '1', value: '1' },
+          { label: '64Mi', value: '64Mi' },{ label: '128Mi', value: '128Mi' },{ label: '256Mi', value: '256Mi' },
-            { label: '2', value: '2' },
+          { label: '512Mi', value: '512Mi' },{ label: '1Gi', value: '1Gi' },
-          ],
+        ], default: '128Mi' },
-          default: '100m',
+        { key: 'memoryLimit', label: 'Memory Limits', type: 'select', options: [
-        },
+          { label: '128Mi', value: '128Mi' },{ label: '256Mi', value: '256Mi' },{ label: '512Mi', value: '512Mi' },
-        {
+          { label: '1Gi', value: '1Gi' },{ label: '2Gi', value: '2Gi' },{ label: '4Gi', value: '4Gi' },
-          key: 'cpuLimit',
+        ], default: '256Mi' },
-          label: 'CPU Limits',
-          type: 'select',
-          options: [
-            { label: '200m', value: '200m' },
-            { label: '500m', value: '500m' },
-            { label: '1', value: '1' },
-            { label: '2', value: '2' },
-            { label: '4', value: '4' },
-          ],
-          default: '500m',
-        },
-        {
-          key: 'memoryRequest',
-          label: 'Memory Requests',
-          type: 'select',
-          options: [
-            { label: '64Mi', value: '64Mi' },
-            { label: '128Mi', value: '128Mi' },
-            { label: '256Mi', value: '256Mi' },
-            { label: '512Mi', value: '512Mi' },
-            { label: '1Gi', value: '1Gi' },
-          ],
-          default: '128Mi',
-        },
-        {
-          key: 'memoryLimit',
-          label: 'Memory Limits',
-          type: 'select',
-          options: [
-            { label: '128Mi', value: '128Mi' },
-            { label: '256Mi', value: '256Mi' },
-            { label: '512Mi', value: '512Mi' },
-            { label: '1Gi', value: '1Gi' },
-            { label: '2Gi', value: '2Gi' },
-          ],
-          default: '256Mi',
-        },
       ],
     },
     {
       title: '更新策略',
       fields: [
-        {
+        { key: 'updateStrategy', label: '更新策略', type: 'select', options: [
-          key: 'updateStrategy',
-          label: '更新策略',
-          type: 'select',
-          options: [
           { label: 'RollingUpdate - 滚动更新 (推荐)', value: 'RollingUpdate' },
           { label: 'OnDelete - 手动删除触发', value: 'OnDelete' },
+        ], default: 'RollingUpdate' },
+        { key: 'partition', label: 'Partition', type: 'number', min: 0, max: 100, default: 0, tip: '仅更新序号 >= partition 的 Pod', dependsOn: { key: 'updateStrategy', value: 'RollingUpdate' } },
       ],
-          default: 'RollingUpdate',
     },
     {
-          key: 'partition',
+      title: '启动探针 (Startup Probe)',
-          label: 'Partition',
+      fields: [
-          type: 'number',
+        { key: 'enableStartupProbe', label: '启用启动探针', type: 'switch', default: false, tip: '慢启动容器必备，通过前 liveness/readiness 不会生效' },
-          min: 0,
+        { key: 'startupProbeType', label: '探针方式', type: 'select', options: [
-          max: 100,
+          { label: 'HTTP GET', value: 'httpGet' },{ label: 'TCP Socket', value: 'tcpSocket' },{ label: 'Exec Command', value: 'exec' },
-          default: 0,
+        ], default: 'httpGet', dependsOn: { key: 'enableStartupProbe', value: true } },
-          tip: '仅更新序号 >= partition 的 Pod',
+        { key: 'startupPath', label: '检查路径', type: 'text', default: '/healthz', dependsOn: { key: 'startupProbeType', value: 'httpGet' } },
-          dependsOn: { key: 'updateStrategy', value: 'RollingUpdate' },
+        { key: 'startupPort', label: '检查端口', type: 'number', min: 1, max: 65535, default: 80, dependsOn: { key: 'enableStartupProbe', value: true } },
+        { key: 'startupCommand', label: 'Exec 命令', type: 'text', placeholder: 'cat /tmp/healthy', default: 'cat /tmp/healthy', dependsOn: { key: 'startupProbeType', value: 'exec' } },
+        { key: 'startupInitialDelay', label: '初始延迟 (秒)', type: 'number', min: 0, max: 600, default: 0, dependsOn: { key: 'enableStartupProbe', value: true } },
+        { key: 'startupPeriod', label: '检查周期 (秒)', type: 'number', min: 1, max: 300, default: 10, dependsOn: { key: 'enableStartupProbe', value: true } },
+        { key: 'startupFailureThreshold', label: '失败阈值', type: 'number', min: 1, max: 100, default: 30, dependsOn: { key: 'enableStartupProbe', value: true }, tip: '30次×10秒=最多等300秒启动' },
+        { key: 'startupTimeout', label: '超时时间 (秒)', type: 'number', min: 1, max: 60, default: 5, dependsOn: { key: 'enableStartupProbe', value: true } },
+      ],
     },
+    {
+      title: '存活探针 (Liveness Probe)',
+      fields: [
+        { key: 'enableLivenessProbe', label: '启用存活探针', type: 'switch', default: true, tip: '失败则重启容器' },
+        { key: 'livenessProbeType', label: '探针方式', type: 'select', options: [
+          { label: 'HTTP GET', value: 'httpGet' },{ label: 'TCP Socket', value: 'tcpSocket' },{ label: 'Exec Command', value: 'exec' },
+        ], default: 'httpGet', dependsOn: { key: 'enableLivenessProbe', value: true } },
+        { key: 'livenessPath', label: '检查路径', type: 'text', default: '/healthz', dependsOn: { key: 'livenessProbeType', value: 'httpGet' } },
+        { key: 'livenessPort', label: '检查端口', type: 'number', min: 1, max: 65535, default: 80, dependsOn: { key: 'enableLivenessProbe', value: true } },
+        { key: 'livenessCommand', label: 'Exec 命令', type: 'text', placeholder: 'cat /tmp/healthy', default: 'cat /tmp/healthy', dependsOn: { key: 'livenessProbeType', value: 'exec' } },
+        { key: 'livenessHttpHeaders', label: 'HTTP 请求头', type: 'text', placeholder: 'X-Custom-Header: value', default: '', dependsOn: { key: 'livenessProbeType', value: 'httpGet' }, tip: '格式: Header-Name: value' },
+        { key: 'livenessInitialDelay', label: '初始延迟 (秒)', type: 'number', min: 0, max: 600, default: 15, dependsOn: { key: 'enableLivenessProbe', value: true } },
+        { key: 'livenessPeriod', label: '检查周期 (秒)', type: 'number', min: 1, max: 300, default: 20, dependsOn: { key: 'enableLivenessProbe', value: true } },
+        { key: 'livenessTimeout', label: '超时时间 (秒)', type: 'number', min: 1, max: 60, default: 5, dependsOn: { key: 'enableLivenessProbe', value: true } },
+        { key: 'livenessFailureThreshold', label: '失败阈值', type: 'number', min: 1, max: 30, default: 3, dependsOn: { key: 'enableLivenessProbe', value: true } },
+        { key: 'livenessSuccessThreshold', label: '成功阈值', type: 'number', min: 1, max: 10, default: 1, dependsOn: { key: 'enableLivenessProbe', value: true }, tip: 'liveness 只能为 1' },
+      ],
+    },
+    {
+      title: '就绪探针 (Readiness Probe)',
+      fields: [
+        { key: 'enableReadinessProbe', label: '启用就绪探针', type: 'switch', default: true, tip: '失败则从 Service 端点摘除' },
+        { key: 'readinessProbeType', label: '探针方式', type: 'select', options: [
+          { label: 'HTTP GET', value: 'httpGet' },{ label: 'TCP Socket', value: 'tcpSocket' },{ label: 'Exec Command', value: 'exec' },
+        ], default: 'httpGet', dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessPath', label: '检查路径', type: 'text', default: '/ready', dependsOn: { key: 'readinessProbeType', value: 'httpGet' } },
+        { key: 'readinessPort', label: '检查端口', type: 'number', min: 1, max: 65535, default: 80, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessCommand', label: 'Exec 命令', type: 'text', placeholder: 'cat /tmp/ready', default: 'cat /tmp/ready', dependsOn: { key: 'readinessProbeType', value: 'exec' } },
+        { key: 'readinessHttpHeaders', label: 'HTTP 请求头', type: 'text', placeholder: 'X-Custom-Header: value', default: '', dependsOn: { key: 'readinessProbeType', value: 'httpGet' } },
+        { key: 'readinessInitialDelay', label: '初始延迟 (秒)', type: 'number', min: 0, max: 600, default: 5, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessPeriod', label: '检查周期 (秒)', type: 'number', min: 1, max: 300, default: 10, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessTimeout', label: '超时时间 (秒)', type: 'number', min: 1, max: 60, default: 3, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessFailureThreshold', label: '失败阈值', type: 'number', min: 1, max: 30, default: 3, dependsOn: { key: 'enableReadinessProbe', value: true } },
+        { key: 'readinessSuccessThreshold', label: '成功阈值', type: 'number', min: 1, max: 10, default: 1, dependsOn: { key: 'enableReadinessProbe', value: true } },
+      ],
+    },
+    {
+      title: '环境变量',
+      fields: [
+        { key: 'enableEnv', label: '定义环境变量', type: 'switch', default: false },
+        { key: 'envVars', label: '环境变量 (KEY=VALUE)', type: 'text', placeholder: 'APP_ENV=production\nLOG_LEVEL=info', default: 'APP_ENV=production\nLOG_LEVEL=info', dependsOn: { key: 'enableEnv', value: true }, tip: '每行一个，格式 KEY=VALUE' },
+        { key: 'enableEnvFromConfigMap', label: '从 ConfigMap 导入', type: 'switch', default: false },
+        { key: 'envFromConfigMapName', label: 'ConfigMap 名称', type: 'text', default: 'my-config', dependsOn: { key: 'enableEnvFromConfigMap', value: true } },
+        { key: 'enableEnvFromSecret', label: '从 Secret 导入', type: 'switch', default: false },
+        { key: 'envFromSecretName', label: 'Secret 名称', type: 'text', default: 'my-secret', dependsOn: { key: 'enableEnvFromSecret', value: true } },
+      ],
+    },
+    {
+      title: '节点调度 — NodeSelector',
+      fields: [
+        { key: 'enableNodeSelector', label: '启用 NodeSelector', type: 'switch', default: false, tip: '简单的节点标签匹配' },
+        { key: 'nodeSelectorKey', label: '标签 Key', type: 'text', placeholder: 'kubernetes.io/os', default: 'kubernetes.io/os', dependsOn: { key: 'enableNodeSelector', value: true } },
+        { key: 'nodeSelectorValue', label: '标签 Value', type: 'text', placeholder: 'linux', default: 'linux', dependsOn: { key: 'enableNodeSelector', value: true } },
+      ],
+    },
+    {
+      title: '节点调度 — 节点亲和性 (Node Affinity)',
+      fields: [
+        { key: 'enableNodeAffinity', label: '启用节点亲和性', type: 'switch', default: false, tip: '比 NodeSelector 更灵活的调度规则' },
+        { key: 'nodeAffinityType', label: '亲和类型', type: 'select', options: [
+          { label: 'required - 必须满足 (硬性)', value: 'required' },
+          { label: 'preferred - 尽量满足 (软性)', value: 'preferred' },
+        ], default: 'required', dependsOn: { key: 'enableNodeAffinity', value: true } },
+        { key: 'nodeAffinityKey1', label: '匹配标签 Key', type: 'text', placeholder: 'topology.kubernetes.io/zone', default: 'topology.kubernetes.io/zone', dependsOn: { key: 'enableNodeAffinity', value: true } },
+        { key: 'nodeAffinityOperator1', label: '操作符', type: 'select', options: [
+          { label: 'In - 值在列表中', value: 'In' },
+          { label: 'NotIn - 值不在列表中', value: 'NotIn' },
+          { label: 'Exists - 标签存在', value: 'Exists' },
+          { label: 'DoesNotExist - 标签不存在', value: 'DoesNotExist' },
+          { label: 'Gt - 大于', value: 'Gt' },
+          { label: 'Lt - 小于', value: 'Lt' },
+        ], default: 'In', dependsOn: { key: 'enableNodeAffinity', value: true } },
+        { key: 'nodeAffinityValues1', label: '匹配值 (逗号分隔)', type: 'text', placeholder: 'cn-east-1a,cn-east-1b', default: 'cn-east-1a,cn-east-1b', dependsOn: { key: 'nodeAffinityOperator1', valueNotIn: ['Exists', 'DoesNotExist'] } },
+        { key: 'nodeAffinityWeight', label: '权重 (preferred)', type: 'number', min: 1, max: 100, default: 80, dependsOn: { key: 'nodeAffinityType', value: 'preferred' } },
+      ],
+    },
+    {
+      title: 'Pod 反亲和性 (Pod Anti-Affinity)',
+      fields: [
+        { key: 'enablePodAntiAffinity', label: '启用 Pod 反亲和性', type: 'switch', default: false, tip: '让副本分散到不同节点/区域，提高可用性' },
+        { key: 'podAntiAffinityType', label: '亲和类型', type: 'select', options: [
+          { label: 'required - 必须分散 (硬性)', value: 'required' },
+          { label: 'preferred - 尽量分散 (软性)', value: 'preferred' },
+        ], default: 'preferred', dependsOn: { key: 'enablePodAntiAffinity', value: true } },
+        { key: 'podAntiAffinityKey', label: '匹配标签 Key', type: 'text', default: 'app', dependsOn: { key: 'enablePodAntiAffinity', value: true } },
+        { key: 'podAntiAffinityTopology', label: '拓扑域', type: 'select', options: [
+          { label: 'kubernetes.io/hostname (节点级)', value: 'kubernetes.io/hostname' },
+          { label: 'topology.kubernetes.io/zone (可用区级)', value: 'topology.kubernetes.io/zone' },
+          { label: 'topology.kubernetes.io/region (地域级)', value: 'topology.kubernetes.io/region' },
+        ], default: 'kubernetes.io/hostname', dependsOn: { key: 'enablePodAntiAffinity', value: true } },
+        { key: 'podAntiAffinityWeight', label: '权重 (preferred)', type: 'number', min: 1, max: 100, default: 100, dependsOn: { key: 'podAntiAffinityType', value: 'preferred' } },
+      ],
+    },
+    {
+      title: '容忍度 (Tolerations)',
+      fields: [
+        { key: 'enableToleration', label: '启用容忍度', type: 'switch', default: false, tip: '允许调度到有 taint 的节点' },
+        { key: 'tolerationKey', label: 'Taint Key', type: 'text', placeholder: 'node-role.kubernetes.io/master', default: 'node-role.kubernetes.io/master', dependsOn: { key: 'enableToleration', value: true } },
+        { key: 'tolerationOperator', label: '操作符', type: 'select', options: [
+          { label: 'Equal - 值匹配', value: 'Equal' },
+          { label: 'Exists - Key 存在即可', value: 'Exists' },
+        ], default: 'Exists', dependsOn: { key: 'enableToleration', value: true } },
+        { key: 'tolerationValue', label: 'Taint Value', type: 'text', default: '', dependsOn: { key: 'tolerationOperator', value: 'Equal' } },
+        { key: 'tolerationEffect', label: 'Taint Effect', type: 'select', options: [
+          { label: 'NoSchedule - 不调度新 Pod', value: 'NoSchedule' },
+          { label: 'PreferNoSchedule - 尽量不调度', value: 'PreferNoSchedule' },
+          { label: 'NoExecute - 驱逐已有 Pod', value: 'NoExecute' },
+        ], default: 'NoSchedule', dependsOn: { key: 'enableToleration', value: true } },
+        { key: 'tolerationSeconds', label: '容忍时长 (秒)', type: 'number', min: 0, max: 86400, default: 300, dependsOn: { key: 'tolerationEffect', value: 'NoExecute' }, tip: '仅 NoExecute 有效' },
+      ],
+    },
+    {
+      title: '安全上下文 (Security Context)',
+      fields: [
+        { key: 'enableSecurityContext', label: '启用安全上下文', type: 'switch', default: false },
+        { key: 'runAsUser', label: '运行用户 UID', type: 'number', min: 0, max: 65535, default: 1000, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'runAsGroup', label: '运行用户组 GID', type: 'number', min: 0, max: 65535, default: 1000, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'runAsNonRoot', label: '禁止 Root 运行', type: 'switch', default: true, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'readOnlyRootFilesystem', label: '只读根文件系统', type: 'switch', default: false, dependsOn: { key: 'enableSecurityContext', value: true }, tip: '增强安全性，需要写入的目录用 emptyDir 挂载' },
+        { key: 'allowPrivilegeEscalation', label: '允许提权', type: 'switch', default: false, dependsOn: { key: 'enableSecurityContext', value: true } },
+        { key: 'fsGroup', label: '文件系统 GID', type: 'number', min: 0, max: 65535, default: 2000, dependsOn: { key: 'enableSecurityContext', value: true }, tip: '卷文件的所有组' },
+      ],
+    },
+    {
+      title: '标签与注解',
+      fields: [
+        { key: 'appLabel', label: 'app 标签值', type: 'text', default: '', tip: '留空则使用应用名称' },
+        { key: 'versionLabel', label: 'version 标签', type: 'text', placeholder: 'v1', default: 'v1' },
+        { key: 'serviceAccountName', label: 'ServiceAccount 名称', type: 'text', placeholder: '留空使用 default', default: '', tip: 'RBAC 权限控制' },
+        { key: 'terminationGracePeriod', label: '优雅终止时间 (秒)', type: 'number', min: 0, max: 300, default: 30, tip: 'SIGTERM 后等待多久发送 SIGKILL' },
       ],
     },
   ],
 }
 
-function toYaml(obj, indent = 0) {
+// ======================== YAML 生成器 ========================
-  const lines = []
-  const prefix = '  '.repeat(indent)
 
-  for (const [key, value] of Object.entries(obj)) {
+function buildProbe(config, prefix, type, path, port, cmd, headers, initDelay, period, timeout, failure, success) {
-    if (value === null || value === undefined || value === '') continue
+  if (!config[prefix]) return null
+  const probeType = config[type] || 'httpGet'
+  const probe = {}
 
-    if (Array.isArray(value)) {
+  if (probeType === 'httpGet') {
-      lines.push(`${prefix}${key}:`)
+    probe.httpGet = { path: config[path], port: config[port], scheme: 'HTTP' }
-      for (const item of value) {
+    const h = config[headers]
-        if (typeof item === 'object' && item !== null) {
+    if (h) {
-          const entries = Object.entries(item).filter(([, v]) => v !== null && v !== undefined && v !== '')
+      const hdrs = h.split('\n').filter(Boolean).map(line => {
-          if (entries.length === 0) continue
+        const [k, ...v] = line.split(':')
-          const first = entries[0]
+        return { name: k.trim(), value: v.join(':').trim() }
-          lines.push(`${prefix}  - ${first[0]}: ${first[1]}`)
+      })
-          for (let i = 1; i < entries.length; i++) {
+      if (hdrs.length) probe.httpGet.httpHeaders = hdrs
-            lines.push(`${prefix}    ${entries[i][0]}: ${entries[i][1]}`)
     }
+  } else if (probeType === 'tcpSocket') {
+    probe.tcpSocket = { port: config[port] }
   } else {
-          lines.push(`${prefix}  - ${item}`)
+    const c = config[cmd] || 'cat /tmp/healthy'
+    probe.exec = { command: c.split(' ') }
   }
-      }
+
-    } else if (typeof value === 'object') {
+  probe.initialDelaySeconds = config[initDelay]
-      lines.push(`${prefix}${key}:`)
+  probe.periodSeconds = config[period]
-      lines.push(toYaml(value, indent + 1))
+  probe.timeoutSeconds = config[timeout]
+  probe.failureThreshold = config[failure]
+  if (success !== null) probe.successThreshold = config[success]
+  return probe
+}
+
+function buildAffinity(config) {
+  const affinity = {}
+
+  // Node Affinity
+  if (config.enableNodeAffinity) {
+    const key = config.nodeAffinityKey1
+    const op = config.nodeAffinityOperator1
+    const vals = (config.nodeAffinityValues1 || '').split(',').map(s => s.trim()).filter(Boolean)
+    const term = { matchExpressions: [{ key, operator: op }] }
+    if (['In', 'NotIn'].includes(op)) term.matchExpressions[0].values = vals
+
+    if (config.nodeAffinityType === 'required') {
+      affinity.nodeAffinity = { requiredDuringSchedulingIgnoredDuringExecution: { nodeSelectorTerms: [term] } }
     } else {
-      lines.push(`${prefix}${key}: ${value}`)
+      affinity.nodeAffinity = {
+        preferredDuringSchedulingIgnoredDuringExecution: [{
+          weight: config.nodeAffinityWeight || 80,
+          preference: term,
+        }],
+      }
     }
   }
 
-  return lines.join('\n')
+  // Pod Anti-Affinity
+  if (config.enablePodAntiAffinity) {
+    const labelKey = config.podAntiAffinityKey || 'app'
+    const topology = config.podAntiAffinityTopology || 'kubernetes.io/hostname'
+    const term = {
+      labelSelector: { matchExpressions: [{ key: labelKey, operator: 'In', values: [config.appLabel || config.appName] }] },
+      topologyKey: topology,
+    }
+    if (config.podAntiAffinityType === 'required') {
+      affinity.podAntiAffinity = { requiredDuringSchedulingIgnoredDuringExecution: [term] }
+    } else {
+      affinity.podAntiAffinity = {
+        preferredDuringSchedulingIgnoredDuringExecution: [{
+          weight: config.podAntiAffinityWeight || 100,
+          podAffinityTerm: term,
+        }],
+      }
+    }
+  }
+
+  return Object.keys(affinity).length ? affinity : undefined
 }
 
 export function generateK8sStatefulSetYaml(config) {
-  const labels = { app: config.appName }
+  const labels = { app: config.appLabel || config.appName }
+  if (config.versionLabel) labels.version = config.versionLabel
 
   const container = {
     name: config.appName,
     image: config.image,
-    ports: [{ containerPort: config.containerPort, name: 'http' }],
+    imagePullPolicy: config.imagePullPolicy,
+    ports: [{ name: config.portName, containerPort: config.containerPort, protocol: config.protocol }],
     resources: {
       requests: { cpu: config.cpuRequest, memory: config.memoryRequest },
       limits: { cpu: config.cpuLimit, memory: config.memoryLimit },
     },
   }
 
+  // 探针
+  container.startupProbe = buildProbe(config, 'enableStartupProbe', 'startupProbeType', 'startupPath', 'startupPort', 'startupCommand', null, 'startupInitialDelay', 'startupPeriod', 'startupTimeout', 'startupFailureThreshold', null)
+  container.livenessProbe = buildProbe(config, 'enableLivenessProbe', 'livenessProbeType', 'livenessPath', 'livenessPort', 'livenessCommand', 'livenessHttpHeaders', 'livenessInitialDelay', 'livenessPeriod', 'livenessTimeout', 'livenessFailureThreshold', 'livenessSuccessThreshold')
+  container.readinessProbe = buildProbe(config, 'enableReadinessProbe', 'readinessProbeType', 'readinessPath', 'readinessPort', 'readinessCommand', 'readinessHttpHeaders', 'readinessInitialDelay', 'readinessPeriod', 'readinessTimeout', 'readinessFailureThreshold', 'readinessSuccessThreshold')
+  if (!container.startupProbe) delete container.startupProbe
+  if (!container.livenessProbe) delete container.livenessProbe
+  if (!container.readinessProbe) delete container.readinessProbe
+
+  // 环境变量
+  if (config.enableEnv && config.envVars) {
+    container.env = config.envVars.split('\n').filter(Boolean).map(line => {
+      const [k, ...v] = line.split('=')
+      return { name: k.trim(), value: v.join('=').trim() }
+    })
+  }
+  if (config.enableEnvFromConfigMap || config.enableEnvFromSecret) {
+    container.envFrom = []
+    if (config.enableEnvFromConfigMap) container.envFrom.push({ configMapRef: { name: config.envFromConfigMapName } })
+    if (config.enableEnvFromSecret) container.envFrom.push({ secretRef: { name: config.envFromSecretName } })
+  }
+
+  // Security Context (container-level)
+  if (config.enableSecurityContext) {
+    container.securityContext = {
+      runAsUser: config.runAsUser,
+      runAsGroup: config.runAsGroup,
+      runAsNonRoot: config.runAsNonRoot,
+      readOnlyRootFilesystem: config.readOnlyRootFilesystem || undefined,
+      allowPrivilegeEscalation: config.allowPrivilegeEscalation,
+    }
+  }
+
+  // Volume mounts for PVC
   const volumeMounts = []
   const volumeClaimTemplates = []
 
@@ -265,25 +371,48 @@ export function generateK8sStatefulSetYaml(config) {
     container.volumeMounts = volumeMounts
   }
 
+  const podSpec = { containers: [container] }
+
+  // ServiceAccount
+  if (config.serviceAccountName) podSpec.serviceAccountName = config.serviceAccountName
+
+  // 优雅终止
+  if (config.terminationGracePeriod) podSpec.terminationGracePeriodSeconds = config.terminationGracePeriod
+
+  // NodeSelector
+  if (config.enableNodeSelector && config.nodeSelectorKey) {
+    podSpec.nodeSelector = { [config.nodeSelectorKey]: config.nodeSelectorValue }
+  }
+
+  // Affinity
+  const affinity = buildAffinity(config)
+  if (affinity) podSpec.affinity = affinity
+
+  // Tolerations
+  if (config.enableToleration) {
+    const t = { key: config.tolerationKey, operator: config.tolerationOperator, effect: config.tolerationEffect }
+    if (config.tolerationOperator === 'Equal') t.value = config.tolerationValue
+    if (config.tolerationEffect === 'NoExecute' && config.tolerationSeconds) t.tolerationSeconds = config.tolerationSeconds
+    podSpec.tolerations = [t]
+  }
+
+  // fsGroup
+  if (config.enableSecurityContext && config.fsGroup) {
+    podSpec.securityContext = { fsGroup: config.fsGroup }
+  }
+
   const statefulset = {
     apiVersion: 'apps/v1',
     kind: 'StatefulSet',
-    metadata: {
+    metadata: { name: config.name, namespace: config.namespace, labels },
-      name: config.name,
-      namespace: config.namespace,
-      labels,
-    },
     spec: {
       replicas: config.replicas,
       serviceName: config.serviceName,
-      selector: { matchLabels: { app: config.appName } },
+      selector: { matchLabels: { app: config.appLabel || config.appName } },
       updateStrategy: config.updateStrategy === 'RollingUpdate'
         ? { type: 'RollingUpdate', rollingUpdate: { partition: config.partition } }
         : { type: 'OnDelete' },
-      template: {
+      template: { metadata: { labels }, spec: podSpec },
-        metadata: { labels },
-        spec: { containers: [container] },
-      },
     },
   }
 
@@ -292,6 +421,44 @@ export function generateK8sStatefulSetYaml(config) {
   }
 
   const header = `# K8s StatefulSet - 由 ConfTemplate 生成\n# 生成时间: ${new Date().toLocaleString('zh-CN')}\n# 部署命令: kubectl apply -f ${config.fileName || 'statefulset.yaml'}\n`
-
   return header + '\n' + toYaml(statefulset)
 }
+
+function toYaml(obj, indent = 0) {
+  const lines = []
+  const prefix = '  '.repeat(indent)
+  for (const [key, value] of Object.entries(obj)) {
+    if (value === null || value === undefined || value === '') continue
+    if (Array.isArray(value)) {
+      lines.push(`${prefix}${key}:`)
+      for (const item of value) {
+        if (typeof item === 'object' && item !== null) {
+          const entries = Object.entries(item).filter(([, v]) => v !== null && v !== undefined && v !== '')
+          if (entries.length === 0) continue
+          const first = entries[0]
+          lines.push(`${prefix}  - ${first[0]}: ${typeof first[1] === 'object' ? '' : first[1]}`)
+          if (typeof first[1] === 'object') {
+            lines.push(toYaml(first[1], indent + 3))
+          }
+          for (let i = 1; i < entries.length; i++) {
+            const [k, v] = entries[i]
+            if (typeof v === 'object') {
+              lines.push(`${prefix}    ${k}:`)
+              lines.push(toYaml(v, indent + 4))
+            } else {
+              lines.push(`${prefix}    ${k}: ${v}`)
+            }
+          }
+        } else {
+          lines.push(`${prefix}  - ${item}`)
+        }
+      }
+    } else if (typeof value === 'object') {
+      lines.push(`${prefix}${key}:`)
+      lines.push(toYaml(value, indent + 1))
+    } else {
+      lines.push(`${prefix}${key}: ${value}`)
+    }
+  }
+  return lines.join('\n')
+}

src/schemas/nginx.js

@@ -192,6 +192,105 @@ export const nginxSchema = {
         },
       ],
     },
+    {
+      title: '限流配置',
+      fields: [
+        {
+          key: 'enableLimitReq',
+          label: '启用请求限流',
+          type: 'switch',
+          default: false,
+          tip: '限制客户端请求速率，防止恶意请求',
+        },
+        {
+          key: 'limitReqZone',
+          label: '限流区域配置',
+          type: 'text',
+          default: "'$binary_remote_addr' zone=one:10m rate=10r/s",
+          tip: 'limit_zone 参数，如 $binary_remote_addr zone=one:10m rate=10r/s',
+          dependsOn: { key: 'enableLimitReq', value: true },
+        },
+        {
+          key: 'limitReqBurst',
+          label: '突发请求数',
+          type: 'number',
+          min: 0,
+          max: 1000,
+          default: 20,
+          tip: '允许超出 rate 的突发请求数（burst）',
+          dependsOn: { key: 'enableLimitReq', value: true },
+        },
+      ],
+    },
+    {
+      title: 'Upstream 负载均衡',
+      fields: [
+        {
+          key: 'enableUpstream',
+          label: '启用 Upstream',
+          type: 'switch',
+          default: false,
+          tip: '配置后端服务器负载均衡组',
+        },
+        {
+          key: 'upstreamName',
+          label: 'Upstream 名称',
+          type: 'text',
+          default: 'backend',
+          tip: 'upstream 块名称，用于 proxy_pass 引用',
+          dependsOn: { key: 'enableUpstream', value: true },
+        },
+        {
+          key: 'upstreamServers',
+          label: '后端服务器列表',
+          type: 'text',
+          default: "server 127.0.0.1:8080 weight=3\nserver 127.0.0.1:8081 weight=2",
+          tip: '每行一个 server 指令，支持 weight/down/backup 参数',
+          dependsOn: { key: 'enableUpstream', value: true },
+        },
+        {
+          key: 'upstreamMethod',
+          label: '负载均衡算法',
+          type: 'select',
+          options: [
+            { label: 'round-robin - 轮询 (默认)', value: 'round-robin' },
+            { label: 'least_conn - 最少连接', value: 'least_conn' },
+            { label: 'ip_hash - IP 哈希', value: 'ip_hash' },
+          ],
+          default: 'least_conn',
+          tip: '请求分发策略',
+          dependsOn: { key: 'enableUpstream', value: true },
+        },
+      ],
+    },
+    {
+      title: '缓存配置',
+      fields: [
+        {
+          key: 'enableCache',
+          label: '启用代理缓存',
+          type: 'switch',
+          default: false,
+          tip: '缓存后端响应以提升性能',
+        },
+        {
+          key: 'cachePath',
+          label: '缓存路径',
+          type: 'text',
+          default: '/var/cache/nginx levels=1:2 keys_zone=my_cache:10m max_size=1g inactive=60m',
+          tip: 'proxy_cache_path 参数',
+          dependsOn: { key: 'enableCache', value: true },
+        },
+        {
+          key: 'cacheBypass',
+          label: '缓存绕过条件',
+          type: 'text',
+          default: '$cookie_nocache',
+          tip: 'proxy_cache_bypass 条件，满足时跳过缓存',
+          dependsOn: { key: 'enableCache', value: true },
+        },
+      ],
+    },
   ],
 }
 
@@ -244,11 +343,45 @@ export function generateNginxConf(config) {
     lines.push(``)
   }
 
+  // 限流配置
+  if (config.enableLimitReq) {
+    lines.push(`    # 限流配置`)
+    lines.push(`    limit_req_zone ${config.limitReqZone};`)
+    lines.push(``)
+  }
+
+  // Upstream 负载均衡
+  if (config.enableUpstream) {
+    lines.push(`    # Upstream 负载均衡`)
+    if (config.upstreamMethod && config.upstreamMethod !== 'round-robin') {
+      lines.push(`    upstream ${config.upstreamName} {`)
+      lines.push(`        ${config.upstreamMethod};`)
+    } else {
+      lines.push(`    upstream ${config.upstreamName} {`)
+    }
+    const servers = config.upstreamServers.split('\n').filter(s => s.trim())
+    servers.forEach(server => {
+      lines.push(`        ${server.trim()}`)
+    })
+    lines.push(`    }`)
+    lines.push(``)
+  }
+
+  // 缓存配置
+  if (config.enableCache) {
+    lines.push(`    # 代理缓存配置`)
+    lines.push(`    proxy_cache_path ${config.cachePath};`)
+    lines.push(``)
+  }
+
+  // Upstream fallback when not enabled
+  if (!config.enableUpstream) {
     lines.push(`    # 上游服务器${config.enableProxy ? '' : ' (示例，未启用)'}`)
     lines.push(`    # upstream backend {`)
     lines.push(`    #     server 127.0.0.1:8080;`)
     lines.push(`    # }`)
     lines.push(``)
+  }
 
   lines.push(`    server {`)
   lines.push(`        listen ${config.httpPort};`)
@@ -308,10 +441,19 @@ export function generateNginxConf(config) {
     lines.push(``)
   }
 
+  // 限流应用到 location
   lines.push(`        location / {`)
 
+  if (config.enableLimitReq) {
+    lines.push(`            limit_req zone=one burst=${config.limitReqBurst} nodelay;`)
+  }
+
   if (config.enableProxy) {
+    if (config.enableUpstream) {
+      lines.push(`            proxy_pass http://${config.upstreamName};`)
+    } else {
       lines.push(`            proxy_pass ${config.proxyTarget};`)
+    }
     lines.push(`            proxy_http_version 1.1;`)
     lines.push(`            proxy_set_header Upgrade $http_upgrade;`)
     lines.push(`            proxy_set_header Connection 'upgrade';`)
@@ -320,6 +462,14 @@ export function generateNginxConf(config) {
     lines.push(`            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;`)
     lines.push(`            proxy_set_header X-Forwarded-Proto $scheme;`)
     lines.push(`            proxy_cache_bypass $http_upgrade;`)
+
+    if (config.enableCache) {
+      lines.push(`            proxy_cache my_cache;`)
+      lines.push(`            proxy_cache_valid 200 302 10m;`)
+      lines.push(`            proxy_cache_valid 404 1m;`)
+      lines.push(`            proxy_cache_bypass ${config.cacheBypass};`)
+      lines.push(`            add_header X-Cache-Status $upstream_cache_status;`)
+    }
   } else {
     lines.push(`            root /usr/share/nginx/html;`)
     lines.push(`            index index.html index.htm;`)

src/schemas/postgresql.js

@@ -180,6 +180,114 @@ export const postgresqlSchema = {
         },
       ],
     },
+    {
+      title: '连接池',
+      fields: [
+        {
+          key: 'superuserReservedConnections',
+          label: '超级用户保留连接数',
+          type: 'number',
+          min: 0,
+          max: 100,
+          default: 3,
+          tip: '为超级用户保留的连接数，确保管理员总能连入',
+        },
+        {
+          key: 'idleInTransactionSessionTimeout',
+          label: '空闲事务超时 (毫秒)',
+          type: 'number',
+          min: 0,
+          max: 86400000,
+          default: 0,
+          tip: '0 = 禁用。空闲事务超过此时间将被终止，防止连接泄漏',
+        },
+      ],
+    },
+    {
+      title: '流复制',
+      fields: [
+        {
+          key: 'enableReplication',
+          label: '启用流复制',
+          type: 'switch',
+          default: false,
+          tip: '配置此实例支持流复制（主库或备库）',
+        },
+        {
+          key: 'hotStandby',
+          label: '热备模式',
+          type: 'switch',
+          default: true,
+          tip: '备库是否允许只读查询',
+          dependsOn: { key: 'enableReplication', value: true },
+        },
+        {
+          key: 'synchronousCommit',
+          label: '同步提交模式',
+          type: 'select',
+          options: [
+            { label: 'on - 等待 WAL 写入本地磁盘 (默认)', value: 'on' },
+            { label: 'remote_write - 等待备库写入 WAL', value: 'remote_write' },
+            { label: 'off - 异步提交，性能最高', value: 'off' },
+          ],
+          default: 'on',
+          tip: '同步提交级别，影响数据安全与性能',
+          dependsOn: { key: 'enableReplication', value: true },
+        },
+      ],
+    },
+    {
+      title: 'Autovacuum',
+      fields: [
+        {
+          key: 'enableAutovacuum',
+          label: '启用 Autovacuum',
+          type: 'switch',
+          default: true,
+          tip: '自动清理死元组并更新统计信息',
+        },
+        {
+          key: 'autovacuumMaxWorkers',
+          label: '最大工作进程数',
+          type: 'number',
+          min: 1,
+          max: 10,
+          default: 3,
+          tip: '并行执行 autovacuum 的最大进程数',
+          dependsOn: { key: 'enableAutovacuum', value: true },
+        },
+        {
+          key: 'autovacuumNaptime',
+          label: '休眠间隔 (秒)',
+          type: 'number',
+          min: 1,
+          max: 86400,
+          default: 60,
+          tip: 'autovacuum 守护进程两次运行之间的休眠时间',
+          dependsOn: { key: 'enableAutovacuum', value: true },
+        },
+        {
+          key: 'autovacuumVacuumThreshold',
+          label: 'VACUUM 阈值',
+          type: 'number',
+          min: 0,
+          max: 10000,
+          default: 50,
+          tip: '触发 VACUUM 的最小死元组数量',
+          dependsOn: { key: 'enableAutovacuum', value: true },
+        },
+        {
+          key: 'autovacuumAnalyzeThreshold',
+          label: 'ANALYZE 阈值',
+          type: 'number',
+          min: 0,
+          max: 10000,
+          default: 50,
+          tip: '触发 ANALYZE 的最小变更行数',
+          dependsOn: { key: 'enableAutovacuum', value: true },
+        },
+      ],
+    },
   ],
 }
 
@@ -225,5 +333,31 @@ export function generatePostgresqlConf(config) {
     lines.push(``)
   }
 
+  // 连接池
+  lines.push(`# ======================== 连接池 ========================`)
+  lines.push(`superuser_reserved_connections = ${config.superuserReservedConnections}`)
+  if (config.idleInTransactionSessionTimeout > 0) {
+    lines.push(`idle_in_transaction_session_timeout = ${config.idleInTransactionSessionTimeout}`)
+  }
+  lines.push(``)
+
+  // 流复制
+  if (config.enableReplication) {
+    lines.push(`# ======================== 流复制 ========================`)
+    lines.push(`hot_standby = ${config.hotStandby ? 'on' : 'off'}`)
+    lines.push(`synchronous_commit = ${config.synchronousCommit}`)
+    lines.push(``)
+  }
+
+  // Autovacuum
+  lines.push(`# ======================== Autovacuum ========================`)
+  lines.push(`autovacuum = ${config.enableAutovacuum ? 'on' : 'off'}`)
+  if (config.enableAutovacuum) {
+    lines.push(`autovacuum_max_workers = ${config.autovacuumMaxWorkers}`)
+    lines.push(`autovacuum_naptime = ${config.autovacuumNaptime}`)
+    lines.push(`autovacuum_vacuum_threshold = ${config.autovacuumVacuumThreshold}`)
+    lines.push(`autovacuum_analyze_threshold = ${config.autovacuumAnalyzeThreshold}`)
+  }
+
   return lines.join('\n')
 }

src/schemas/redis.js

@@ -204,6 +204,117 @@ export const redisSchema = {
         },
       ],
     },
+    {
+      title: 'ACL 配置',
+      fields: [
+        {
+          key: 'enableAcl',
+          label: '启用 ACL',
+          type: 'switch',
+          default: false,
+          tip: '启用 Redis ACL 访问控制列表',
+        },
+        {
+          key: 'aclFile',
+          label: 'ACL 文件路径',
+          type: 'text',
+          default: '/etc/redis/users.acl',
+          tip: 'ACL 规则文件路径',
+          dependsOn: { key: 'enableAcl', value: true },
+        },
+        {
+          key: 'defaultUserPassword',
+          label: '默认用户密码',
+          type: 'text',
+          placeholder: '留空表示无密码',
+          default: '',
+          tip: '设置 default 用户的密码',
+          dependsOn: { key: 'enableAcl', value: true },
+        },
+        {
+          key: 'enableRenameCommand',
+          label: '重命名危险命令',
+          type: 'switch',
+          default: false,
+          tip: '重命名 FLUSHALL/FLUSHDB/CONFIG 命令以增强安全性',
+          dependsOn: { key: 'enableAcl', value: true },
+        },
+      ],
+    },
+    {
+      title: '慢日志',
+      fields: [
+        {
+          key: 'slowlogLogSlowerThan',
+          label: '慢日志阈值 (微秒)',
+          type: 'number',
+          min: 0,
+          max: 10000000,
+          default: 10000,
+          tip: '执行时间超过此值（微秒）的命令将被记录，0 表示记录所有',
+        },
+        {
+          key: 'slowlogMaxLen',
+          label: '慢日志最大条数',
+          type: 'number',
+          min: 1,
+          max: 10000,
+          default: 128,
+          tip: '慢日志队列最大长度，超出后旧记录被丢弃',
+        },
+      ],
+    },
+    {
+      title: '延迟监控',
+      fields: [
+        {
+          key: 'latencyMonitorThreshold',
+          label: '延迟监控阈值 (毫秒)',
+          type: 'number',
+          min: 0,
+          max: 86400000,
+          default: 0,
+          tip: '0 = 禁用延迟监控，设置大于 0 的值启用（单位毫秒）',
+        },
+      ],
+    },
+    {
+      title: '客户端管理',
+      fields: [
+        {
+          key: 'maxmemorySamples',
+          label: '内存采样数量',
+          type: 'number',
+          min: 1,
+          max: 10,
+          default: 5,
+          tip: 'LRU/TTL 淘汰算法的采样数，越大越精确但越慢',
+        },
+        {
+          key: 'lazyfreeLazyEviction',
+          label: '惰性释放内存淘汰',
+          type: 'switch',
+          default: false,
+          tip: '内存淘汰时异步释放键，避免阻塞主线程',
+        },
+        {
+          key: 'lazyfreeLazyExpire',
+          label: '惰性释放过期键',
+          type: 'switch',
+          default: true,
+          tip: '过期键异步释放，避免阻塞主线程',
+        },
+        {
+          key: 'ioThreads',
+          label: 'IO 线程数',
+          type: 'number',
+          min: 1,
+          max: 8,
+          default: 1,
+          tip: '1 表示禁用多线程 IO，建议不超过 CPU 核心数',
+        },
+      ],
+    },
   ],
 }
 
@@ -314,6 +425,47 @@ export function generateRedisConf(config) {
   lines.push(`tcp-keepalive ${config.tcpKeepalive}`)
   lines.push(`maxclients ${config.maxclients}`)
   lines.push(`tcp-backlog 511`)
+  lines.push(``)
+
+  // ACL 配置
+  if (config.enableAcl) {
+    lines.push(`################################## ACL 配置 ##################################`)
+    lines.push(``)
+    lines.push(`aclfile ${config.aclFile}`)
+    if (config.defaultUserPassword) {
+      lines.push(`# 默认用户密码已设置`)
+      lines.push(`acl setuser default >${config.defaultUserPassword} ~* +@all`)
+    }
+    if (config.enableRenameCommand) {
+      lines.push(``)
+      lines.push(`# 重命名危险命令`)
+      lines.push(`rename-command FLUSHALL ""`)
+      lines.push(`rename-command FLUSHDB ""`)
+      lines.push(`rename-command CONFIG ""`)
+    }
+    lines.push(``)
+  }
+
+  // 慢日志
+  lines.push(`################################## 慢日志 ##################################`)
+  lines.push(``)
+  lines.push(`slowlog-log-slower-than ${config.slowlogLogSlowerThan}`)
+  lines.push(`slowlog-max-len ${config.slowlogMaxLen}`)
+  lines.push(``)
+
+  // 延迟监控
+  lines.push(`################################## 延迟监控 ##################################`)
+  lines.push(``)
+  lines.push(`latency-monitor-threshold ${config.latencyMonitorThreshold}`)
+  lines.push(``)
+
+  // 客户端管理
+  lines.push(`################################## 客户端管理 ##################################`)
+  lines.push(``)
+  lines.push(`maxmemory-samples ${config.maxmemorySamples}`)
+  lines.push(`lazyfree-lazy-eviction ${config.lazyfreeLazyEviction ? 'yes' : 'no'}`)
+  lines.push(`lazyfree-lazy-expire ${config.lazyfreeLazyExpire ? 'yes' : 'no'}`)
+  lines.push(`io-threads ${config.ioThreads}`)
 
   return lines.join('\n')
 }