feat: 为helm chart添加WebUI的辅助容器，用于反向同步配置到ConfigMap

helm-chart/templates/other/configmap-scripts.yaml

@@ -5,8 +5,8 @@ metadata:
   namespace: {{ .Release.Namespace }}
 data:
   # core
-  volume-linker.sh: |
-    {{ .Files.Get "files/volume-linker.sh" | nindent 4 }}
+  k8s-init.sh: |
+    {{ .Files.Get "files/k8s-init.sh" | nindent 4 }}
   # core的初始化容器
   {{- if .Values.core.setup_default_plugins }}
   setup-plugins.py: |

helm-chart/templates/other/job-gen-adapter-cm.yaml

@@ -0,0 +1,30 @@
+# 动态生成adapter配置文件的configmap的job，仅会在部署时运行一次
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: {{ .Release.Name }}-maibot-adapter-cm-generator
+  namespace: {{ .Release.Namespace }}
+  annotations:
+    "helm.sh/hook": post-install,post-upgrade
+    "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded
+spec:
+  backoffLimit: 2
+  template:
+    spec:
+      serviceAccountName: {{ .Release.Name }}-maibot-sa
+      restartPolicy: Never
+      containers:
+        - name: adapter-cm-generator
+          image: {{ .Values.adapter.cm_generator.image.repository | default "reg.mikumikumi.xyz/maibot/adapter-cm-generator" }}:{{ .Values.adapter.cm_generator.image.tag | default "0.11.5-beta" }}
+          workingDir: /app
+          env:
+            - name: PYTHONUNBUFFERED
+              value: "1"
+            - name: NAMESPACE
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.namespace
+            - name: RELEASE_NAME
+              value: {{ .Release.Name }}
+            - name: DATA_B64
+              value: {{ .Values.config.adapter_config | b64enc }}  # 将配置文件编码为base64，从环境变量注入

helm-chart/templates/other/rbac.yaml

@@ -0,0 +1,33 @@
+# 初始化及反向修改ConfigMap所需要的rbac授权
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ .Release.Name }}-maibot-sa
+  namespace: {{ .Release.Namespace }}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: {{ .Release.Name }}-maibot-role
+  namespace: {{ .Release.Namespace }}
+rules:
+  - apiGroups: [""]
+    resources: ["configmaps"]
+    verbs: ["get", "list", "create", "update", "patch"]
+  - apiGroups: ["apps"]
+    resources: ["statefulsets"]
+    verbs: ["get", "list", "create", "update", "patch"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: {{ .Release.Name }}-maibot-rolebinding
+  namespace: {{ .Release.Namespace }}
+subjects:
+  - kind: ServiceAccount
+    name: {{ .Release.Name }}-maibot-sa
+    namespace: {{ .Release.Namespace }}
+roleRef:
+  kind: Role
+  name: {{ .Release.Name }}-maibot-role
+  apiGroup: rbac.authorization.k8s.io