style: adjust diagram scales, layouts, and remove phase labels in xinfra deck
Deploy Slides / build-and-deploy (push) Successful in 1m39s
Deploy Slides / build-and-deploy (push) Successful in 1m39s
This commit is contained in:
+9
-25
@@ -269,11 +269,6 @@ graph LR
|
||||
|
||||
</div>
|
||||
|
||||
<div class="mt-2 text-sm text-gray-400">
|
||||
|
||||
> 子系统各自独立部署和授权,主系统只做 SSO 跳转入口,各子系统自行维护操作审计。
|
||||
|
||||
</div>
|
||||
|
||||
---
|
||||
|
||||
@@ -306,17 +301,12 @@ graph TB
|
||||
|
||||
</div>
|
||||
|
||||
<div class="mt-2 text-sm text-gray-400">
|
||||
|
||||
> RKE2 是计算底座,Calico BGP 构建跨机房扁平网络,Ceph RBD 提供持久化存储,Ansible 贯穿自动化运维。
|
||||
|
||||
</div>
|
||||
|
||||
---
|
||||
|
||||
# 部署架构
|
||||
|
||||
<div class="mt-2" style="transform: scale(0.5); transform-origin: top left; height: 50vh;">
|
||||
<div class="mt-2" style="transform: scale(0.45); transform-origin: top left; height: 50vh;">
|
||||
|
||||
```mermaid
|
||||
graph TB
|
||||
@@ -364,7 +354,7 @@ Nginx 托管前端静态文件并反向代理后端 API,Go API Server 无状
|
||||
|
||||
# 监控告警数据流
|
||||
|
||||
<div class="mt-2" style="transform: scale(0.5); transform-origin: top left; height: 50vh;">
|
||||
<div class="mt-2" style="transform: scale(0.8); transform-origin: top left; height: 50vh;">
|
||||
|
||||
```mermaid
|
||||
graph LR
|
||||
@@ -396,7 +386,7 @@ graph LR
|
||||
|
||||
</div>
|
||||
|
||||
<div class="mt-2 text-sm text-gray-400">
|
||||
<div class="mt-58 text-sm text-gray-400">
|
||||
|
||||
> Zabbix 硬件监控分两条链路:告警事件通过 Webhook 推送至夜莺统一聚合;可观测数据(IPMI/温度/电源/风扇等)由主系统直接调用 Zabbix API 采集展示。
|
||||
|
||||
@@ -428,20 +418,15 @@ sequenceDiagram
|
||||
|
||||
</div>
|
||||
|
||||
<div class="mt-2 text-sm text-gray-400">
|
||||
|
||||
> 用户通过服务卡片填参 → Ansible 自动化部署 → 完成后自动注册到对应子系统,全程日志实时查看。
|
||||
|
||||
</div>
|
||||
|
||||
---
|
||||
|
||||
# 多租户隔离模型(Phase 2+)
|
||||
# 多租户隔离模型
|
||||
|
||||
<div class="mt-2" style="transform: scale(0.5); transform-origin: top left; height: 50vh;">
|
||||
<div class="mt-2" style="transform: scale(1); transform-origin: top left; height: 50vh;">
|
||||
|
||||
```mermaid
|
||||
graph TB
|
||||
graph LR
|
||||
LDAP["企业 LDAP"] -->|部门 DN| BL["业务线租户<br/>Kodo / LAS / 灵矽 / ..."]
|
||||
|
||||
BL --> NS["Kubernetes Namespace<br/>+ ResourceQuota + LimitRange"]
|
||||
@@ -457,10 +442,9 @@ graph TB
|
||||
|
||||
</div>
|
||||
|
||||
<div class="mt-4 text-sm text-gray-400">
|
||||
<div class="mt-30 text-sm text-gray-400">
|
||||
|
||||
> **双重隔离**:节点层通过 `business-line=xxx` 标签 + Taint 确保 Pod 调度隔离;命名空间层通过 ResourceQuota / LimitRange 限制资源用量上限。
|
||||
> Phase 1 仅做基础设施准备(节点标签预留),多租户功能为 Phase 2+。
|
||||
|
||||
</div>
|
||||
|
||||
@@ -468,7 +452,7 @@ graph TB
|
||||
|
||||
# 安全认证流程
|
||||
|
||||
<div class="mt-2" style="transform: scale(0.5); transform-origin: top left; height: 50vh;">
|
||||
<div class="mt-2" style="transform: scale(0.65); transform-origin: top left; height: 50vh;">
|
||||
|
||||
```mermaid
|
||||
sequenceDiagram
|
||||
@@ -491,7 +475,7 @@ sequenceDiagram
|
||||
|
||||
</div>
|
||||
|
||||
<div class="mt-2 text-sm text-gray-400">
|
||||
<div class="mt-60 text-sm text-gray-400">
|
||||
|
||||
> 外部 LDAP 通过 SAML 集成统一认证;子系统 SSO 通过 OAuth 2.0 对接,实现单点登录免跳转。
|
||||
|
||||
|
||||
Reference in New Issue
Block a user