FastheiandClaude Opus 4.8 f8b42d373b fix(k8s/#44): RBAC 清单对齐 swarm-system + swarm-orchestrator（修 #44 Bug2） ...

orchestrator-deployment.yaml 用 ns swarm-system + SA swarm-orchestrator，但
rbac/* 仍是 ns default + SA orchestrator-sa → 按官方清单 apply 后 SA 不匹配，
orchestrator 无权拉 agent pod（#44 Bug2）。

统一三件套到 swarm-system + swarm-orchestrator（= 生产实际运行的命名）：
- serviceaccount: swarm-orchestrator / swarm-system
- role: orchestrator-role / swarm-system
- rolebinding: subject swarm-orchestrator/swarm-system, roleRef orchestrator-role

至此「从仓库 apply」可复现生产 RBAC。

影响范围：agent_swarm k8s 部署物料。不改契约/计费/审计/密钥/运行时代码。
注：agent-deployment-*/orchestrator-deployment-simple 等备用清单仍引用旧 orchestrator-sa，
属独立清理项（非 #44 Bug2 范围），另行跟进。

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-12 18:37:04 +08:00

..

rbac

fix(k8s/#44): RBAC 清单对齐 swarm-system + swarm-orchestrator（修 #44 Bug2）

2026-06-12 18:37:04 +08:00

agent-deployment-full.yaml

Initial commit

2026-06-08 17:32:34 +08:00

agent-deployment-simple.yaml

Initial commit

2026-06-08 17:32:34 +08:00

agent-deployment-v2.yaml

Initial commit

2026-06-08 17:32:34 +08:00

agent-pod-template.yaml

Initial commit

2026-06-08 17:32:34 +08:00

daemonset-image-puller.yaml

Initial commit

2026-06-08 17:32:34 +08:00

git-test-server.yaml

Initial commit

2026-06-08 17:32:34 +08:00

grafana-dashboard.json

Initial commit

2026-06-08 17:32:34 +08:00

orchestrator-deployment-simple.yaml

Initial commit

2026-06-08 17:32:34 +08:00

orchestrator-deployment.yaml

feat(redis): 加 REDIS_CLUSTER 支持 OSS Cluster 端点（heicode-rd 必需）

2026-06-12 17:00:37 +08:00

orchestrator-source-configmap.yaml

Initial commit

2026-06-08 17:32:34 +08:00

prometheus-config.yaml

Initial commit

2026-06-08 17:32:34 +08:00

redis-statefulset.yaml

Initial commit

2026-06-08 17:32:34 +08:00

test-namespace.yaml

Initial commit

2026-06-08 17:32:34 +08:00