Merge branch 'main' into feat/appconfig-more

chore(devbox): complete merging

Signed-off-by: Nixieboluo <[email protected]>

chore(frontend): fix lockfile

Signed-off-by: Nixieboluo <[email protected]>

Author: Nixieboluo

.github/workflows/check-link-error.yml

@@ -68,7 +68,7 @@ jobs:
         run: bash "./${PROJECT_PATH}/scripts/resolve-patch-modules.sh" "${INPUT_ARCH}"
   build:
     needs: [ resolve-modules ]
-    runs-on: ubuntu-24.04
+    runs-on: ${{ matrix.runs-on || 'ubuntu-24.04' }}
     strategy:
       matrix: ${{ fromJson(needs.resolve-modules.outputs.matrix) }}
     steps:
@@ -94,7 +94,7 @@ jobs:
       - name: Install Dependencies
         if: ${{ (matrix.binary == 'sealos' || matrix.binary == 'sealctl') && matrix.arch == 'arm64' }}
         run: |
-          sudo apt update && sudo apt install -y gcc-aarch64-linux-gnu
+          sudo apt update && sudo apt install -y gcc-aarch64-linux-gnu binutils-aarch64-linux-gnu
 
       - name: Build Binaries
         env:
@@ -143,7 +143,7 @@ jobs:
           path: ${{ env.PROJECT_PATH }}/test/e2e/e2e.test
   docker:
     needs: [ resolve-modules-arch,build ]
-    runs-on: ubuntu-24.04
+    runs-on: ${{ matrix.runs-on || 'ubuntu-24.04' }}
     if: ${{ (inputs.image == true) }}
     services:
       registry:

.github/workflows/import-patch-image.yml

@@ -30,7 +30,7 @@ jobs:
 
       - name: Install Dependencies
         run: |
-          sudo apt update && sudo apt install -y gcc-aarch64-linux-gnu \
+          sudo apt update && sudo apt install -y gcc-aarch64-linux-gnu binutils-aarch64-linux-gnu \
             libbtrfs-dev libgpgme-dev libdevmapper-dev \
             qemu-user-static binfmt-support
 

.github/workflows/release.yml

@@ -583,29 +583,6 @@ spec:
         control-plane: controller-manager
     spec:
       containers:
-      - args:
-        - --secure-listen-address=0.0.0.0:8443
-        - --upstream=http://127.0.0.1:8080/
-        - --logtostderr=true
-        - --v=0
-        image: gcr.io/kubebuilder/kube-rbac-proxy:v0.14.1
-        name: kube-rbac-proxy
-        ports:
-        - containerPort: 8443
-          name: https
-          protocol: TCP
-        resources:
-          limits:
-            cpu: 500m
-            memory: 128Mi
-          requests:
-            cpu: 5m
-            memory: 64Mi
-        securityContext:
-          allowPrivilegeEscalation: false
-          capabilities:
-            drop:
-            - ALL
       - args:
         - --health-probe-bind-address=:8081
         - --metrics-bind-address=127.0.0.1:8080

controllers/app/deploy/manifests/deploy.yaml

@@ -12,7 +12,6 @@ spec:
   template:
     metadata:
       annotations:
-        checksum/config: {{ include (print $.Template.BasePath "/configmap.yaml") . | sha256sum }}
         {{- with .Values.podAnnotations }}
         {{- toYaml . | nindent 8 }}
         {{- end }}

controllers/node/deploy/charts/node/templates/deployment.yaml

@@ -478,29 +478,6 @@ spec:
                     values:
                       - linux
       containers:
-        - args:
-            - --secure-listen-address=0.0.0.0:8443
-            - --upstream=http://127.0.0.1:8080/
-            - --logtostderr=true
-            - --v=0
-          image: gcr.io/kubebuilder/kube-rbac-proxy:v0.13.0
-          name: kube-rbac-proxy
-          ports:
-            - containerPort: 8443
-              name: https
-              protocol: TCP
-          resources:
-            limits:
-              cpu: 500m
-              memory: 512Mi
-            requests:
-              cpu: 5m
-              memory: 64Mi
-          securityContext:
-            allowPrivilegeEscalation: false
-            capabilities:
-              drop:
-                - ALL
         - args:
             - --health-probe-bind-address=:8081
             - --metrics-bind-address=127.0.0.1:8080