new version

k8s/agent-manager-configmap.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: agent-manager-config
+  namespace: agent-manager
+data:
+  NAMESPACE: "agent-manager"
+  DATABASE_URL: "postgresql://taiji:By%40123456.@taijipda.postgres.database.azure.com:5432/taijiagnet"
+  # Azure DNS 配置（如果需要）
+  AZURE_DNS_ZONE: "taijiagnet.com"
+  AZURE_SUBSCRIPTION_ID: "your-subscription-id"
+  AZURE_RESOURCE_GROUP: "your-resource-group"

k8s/agent-manager-deployment.yaml

@@ -0,0 +1,107 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: agent-manager
+  namespace: agent-manager
+  labels:
+    app: agent-manager
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: agent-manager
+  template:
+    metadata:
+      labels:
+        app: agent-manager
+    spec:
+      # 使用专用的 ServiceAccount
+      serviceAccountName: agent-manager
+      
+      # ARM 架构节点选择器
+      nodeSelector:
+        kubernetes.io/arch: arm64
+      
+      # 容忍度（如果需要）
+      tolerations:
+      - key: "kubernetes.io/arch"
+        operator: "Equal"
+        value: "arm64"
+        effect: "NoSchedule"
+      
+      containers:
+      - name: agent-manager
+        image: agnettaiji.azurecr.io/agent-manager:latest-arm64
+        imagePullPolicy: Always
+        
+        ports:
+        - containerPort: 8000
+          name: http
+          protocol: TCP
+        
+        # 环境变量 - 从 ConfigMap
+        envFrom:
+        - configMapRef:
+            name: agent-manager-config
+        
+        # 环境变量 - 从 Secret
+        env:
+        - name: AZURE_TENANT_ID
+          valueFrom:
+            secretKeyRef:
+              name: agent-manager-secret
+              key: AZURE_TENANT_ID
+        - name: AZURE_CLIENT_ID
+          valueFrom:
+            secretKeyRef:
+              name: agent-manager-secret
+              key: AZURE_CLIENT_ID
+        - name: AZURE_CLIENT_SECRET
+          valueFrom:
+            secretKeyRef:
+              name: agent-manager-secret
+              key: AZURE_CLIENT_SECRET
+        
+        # 挂载 kubeconfig（用于管理其他 Agent）
+        volumeMounts:
+        - name: kubeconfig
+          mountPath: /root/.kube
+          readOnly: true
+        
+        # 资源限制
+        resources:
+          requests:
+            memory: "256Mi"
+            cpu: "200m"
+          limits:
+            memory: "512Mi"
+            cpu: "500m"
+        
+        # 健康检查
+        livenessProbe:
+          httpGet:
+            path: /
+            port: 8000
+          initialDelaySeconds: 30
+          periodSeconds: 30
+          timeoutSeconds: 5
+          failureThreshold: 3
+        
+        readinessProbe:
+          httpGet:
+            path: /
+            port: 8000
+          initialDelaySeconds: 10
+          periodSeconds: 10
+          timeoutSeconds: 5
+          failureThreshold: 3
+      
+      volumes:
+      - name: kubeconfig
+        secret:
+          secretName: kubeconfig-secret
+          optional: true
+      
+      # 使用 ACR 拉取镜像的凭据
+      imagePullSecrets:
+      - name: acr-secret

k8s/agent-manager-namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: agent-manager
+  labels:
+    app: agent-manager

k8s/agent-manager-rbac.yaml

@@ -0,0 +1,36 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: agent-manager-role
+rules:
+- apiGroups: [""]
+  resources: ["namespaces", "pods", "services", "configmaps", "secrets"]
+  verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+- apiGroups: ["apps"]
+  resources: ["deployments", "replicasets"]
+  verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+- apiGroups: ["networking.k8s.io"]
+  resources: ["ingresses"]
+  verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
+- apiGroups: ["metrics.k8s.io"]
+  resources: ["pods", "nodes"]
+  verbs: ["get", "list"]
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: agent-manager
+  namespace: agent-manager
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: agent-manager-binding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: agent-manager-role
+subjects:
+- kind: ServiceAccount
+  name: agent-manager
+  namespace: agent-manager

k8s/agent-manager-secret.yaml

@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: agent-manager-secret
+  namespace: agent-manager
+type: Opaque
+stringData:
+  # Azure 凭据
+  AZURE_TENANT_ID: "your-tenant-id"
+  AZURE_CLIENT_ID: "your-client-id"
+  AZURE_CLIENT_SECRET: "your-client-secret"
+  
+  # 数据库密码（如果需要单独管理）
+  # DB_PASSWORD: "By@123456."

k8s/agent-manager-service.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: agent-manager
+  namespace: agent-manager
+  labels:
+    app: agent-manager
+spec:
+  type: LoadBalancer
+  selector:
+    app: agent-manager
+  ports:
+  - name: http
+    port: 80
+    targetPort: 8000
+    protocol: TCP
+  sessionAffinity: ClientIP