feat(chart): use internal vpc api endpoint

Signed-off-by: roc <[email protected]>

Author: imroc

CHANGELOG.md

@@ -1,5 +1,9 @@
 # 版本说明
 
+## v2.3.3 (2025-08-04)
+
+- 优化chart：vpc 接口调用走内部地址，不依赖公网。
+
 ## v2.3.2 (2025-07-06)
 
 - 修复端口分配冲突问题。

Makefile

@@ -1,5 +1,5 @@
 # Image URL to use all building/pushing image targets
-IMG ?= imroc/tke-extend-network-controller:2.3.2
+IMG ?= imroc/tke-extend-network-controller:2.3.3
 # ENVTEST_K8S_VERSION refers to the version of kubebuilder assets to be downloaded by envtest binary.
 ENVTEST_K8S_VERSION = 1.30.0
 

api/v1alpha1/clbnodebinding_types.go

@@ -20,9 +20,6 @@ import (
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 )
 
-// EDIT THIS FILE!  THIS IS SCAFFOLDING FOR YOU TO OWN!
-// NOTE: json tags are required.  Any new fields you add must have json tags for the fields to be serialized.
-
 // CLBNodeBindingSpec defines the desired state of CLBNodeBinding.
 type CLBNodeBindingSpec struct {
 	// 网络隔离

api/v1alpha1/clbportpool_types.go

@@ -21,9 +21,6 @@ import (
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 )
 
-// EDIT THIS FILE!  THIS IS SCAFFOLDING FOR YOU TO OWN!
-// NOTE: json tags are required.  Any new fields you add must have json tags for the fields to be serialized.
-
 // CLBPortPoolSpec defines the desired state of CLBPortPool.
 type CLBPortPoolSpec struct {
 	// 端口池的起始端口号

charts/tke-extend-network-controller/Chart.yaml

@@ -18,11 +18,11 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 2.3.2
+version: 2.3.3
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: 2.3.2
+appVersion: 2.3.3
 kubeVersion: '>= 1.26.0-0'

charts/tke-extend-network-controller/templates/deployment.yaml

@@ -20,6 +20,7 @@ spec:
       hostAliases:
       - hostnames:
         - clb.tencentcloudapi.com
+        - vpc.tencentcloudapi.com
         ip: 169.254.0.95
       {{- with .Values.imagePullSecrets }}
       imagePullSecrets:

internal/controller/clbnodebinding_controller.go

@@ -106,7 +106,6 @@ func (r *CLBNodeBindingReconciler) findObjectsForNode(_ context.Context, node cl
 	return nil
 }
 
-// TODO: 优化性能
 func (r *CLBNodeBindingReconciler) findObjectsForCLBPortPool(ctx context.Context, portpool client.Object) []reconcile.Request {
 	list := &networkingv1alpha1.CLBNodeBindingList{}
 	if err := r.List(ctx, list); err != nil {

internal/controller/clbpodbinding_controller.go

@@ -119,7 +119,6 @@ func (r *CLBPodBindingReconciler) findObjectsForPod(ctx context.Context, pod cli
 	}
 }
 
-// TODO: 优化性能
 func (r *CLBPodBindingReconciler) findObjectsForCLBPortPool(ctx context.Context, portpool client.Object) []reconcile.Request {
 	list := &networkingv1alpha1.CLBPodBindingList{}
 	if err := r.List(ctx, list); err != nil {

internal/webhook/v1alpha1/clbportpool_webhook.go

@@ -50,9 +50,6 @@ func SetupCLBPortPoolWebhookWithManager(mgr ctrl.Manager) error {
 
 // CLBPortPoolCustomDefaulter struct is responsible for setting default values on the custom resource of the
 // Kind CLBPortPool when those are created or updated.
-//
-// NOTE: The +kubebuilder:object:generate=false marker prevents controller-gen from generating DeepCopy methods,
-// as it is used only for temporary operations and does not need to be deeply copied.
 type CLBPortPoolCustomDefaulter struct{}
 
 var _ webhook.CustomDefaulter = &CLBPortPoolCustomDefaulter{}
@@ -70,16 +67,10 @@ func (d *CLBPortPoolCustomDefaulter) Default(ctx context.Context, obj runtime.Ob
 	return nil
 }
 
-// TODO(user): change verbs to "verbs=create;update;delete" if you want to enable deletion validation.
-// NOTE: The 'path' attribute must follow a specific pattern and should not be modified directly here.
-// Modifying the path for an invalid path can cause API server errors; failing to locate the webhook.
 // +kubebuilder:webhook:path=/validate-networking-cloud-tencent-com-v1alpha1-clbportpool,mutating=false,failurePolicy=fail,sideEffects=None,groups=networking.cloud.tencent.com,resources=clbportpools,verbs=create;update,versions=v1alpha1,name=vclbportpool-v1alpha1.kb.io,admissionReviewVersions=v1
 
 // CLBPortPoolCustomValidator struct is responsible for validating the CLBPortPool resource
 // when it is created, updated, or deleted.
-//
-// NOTE: The +kubebuilder:object:generate=false marker prevents controller-gen from generating DeepCopy methods,
-// as this struct is used only for temporary operations and does not need to be deeply copied.
 type CLBPortPoolCustomValidator struct {
 	// TODO(user): Add more fields as needed for validation
 }

pkg/clb/batch.go

@@ -60,7 +60,6 @@ func StartBatchProccessor[T Task](maxTaskOneBatch int, apiName string, writeOp b
 			groupTasks[k] = append(groupTasks[k], task)
 		}
 		// 将合并后的 task 通过 clb 的 BatchXXX 接口批量操作
-		// TODO: 能否细化到部分成功的场景？
 		for lb, tasks := range groupTasks {
 			for len(tasks) > 0 {
 				num := min(len(tasks), maxTaskOneBatch)