From add645557a3a6cc0701a5f4e18afdb0c39850695 Mon Sep 17 00:00:00 2001
From: roc <roc@imroc.cc>
Date: Tue, 30 Jun 2026 20:04:47 +0800
Subject: [PATCH] =?UTF-8?q?chore(tke-extend-network-controller):=20?=
 =?UTF-8?q?=E5=90=8C=E6=AD=A5=20v2.4.2=20=E5=8F=98=E6=9B=B4?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

将应用市场 chart 从 2.4.1 同步到 2.4.2，与组件 v2.4.2 release 对齐。

- Chart.yaml version/appVersion: 2.4.1 -> 2.4.2
- deployment.yaml: hostAliases 增加 cam.tencentcloudapi.com，避免无公网环境启动失败
- clbportpools CRD: 补充 listenerPrecreate 字段（监听器预创建）
- role.yaml: 增加 node.tke.cloud.tencent.com/machines 的 get/list/watch 权限，
  用于通过 Machine CR 确认 CVM 加成的原生节点身份

镜像仓库保持 ccr.ccs.tencentyun.com/tke-market 不变（由流水线同步镜像）。
---
 .../tke-extend-network-controller/Chart.yaml  |  4 +--
 .../templates/deployment.yaml                 |  1 +
 ...orking.cloud.tencent.com_clbportpools.yaml | 31 +++++++++++++++++++
 .../templates/role.yaml                       |  8 +++++
 4 files changed, 42 insertions(+), 2 deletions(-)

diff --git a/incubator/tke-extend-network-controller/Chart.yaml b/incubator/tke-extend-network-controller/Chart.yaml
index d00f7c41..ad508c69 100644
--- a/incubator/tke-extend-network-controller/Chart.yaml
+++ b/incubator/tke-extend-network-controller/Chart.yaml
@@ -23,11 +23,11 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 2.4.1
+version: 2.4.2
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: 2.4.1
+appVersion: 2.4.2
 kubeVersion: '>= 1.26.0-0'
diff --git a/incubator/tke-extend-network-controller/templates/deployment.yaml b/incubator/tke-extend-network-controller/templates/deployment.yaml
index 2080ef32..233c1f36 100644
--- a/incubator/tke-extend-network-controller/templates/deployment.yaml
+++ b/incubator/tke-extend-network-controller/templates/deployment.yaml
@@ -21,6 +21,7 @@ spec:
       - hostnames:
         - clb.tencentcloudapi.com
         - vpc.tencentcloudapi.com
+        - cam.tencentcloudapi.com
         ip: 169.254.0.95
       {{- with .Values.imagePullSecrets }}
       imagePullSecrets:
diff --git a/incubator/tke-extend-network-controller/templates/networking.cloud.tencent.com_clbportpools.yaml b/incubator/tke-extend-network-controller/templates/networking.cloud.tencent.com_clbportpools.yaml
index 717f1dcb..b0dd3208 100644
--- a/incubator/tke-extend-network-controller/templates/networking.cloud.tencent.com_clbportpools.yaml
+++ b/incubator/tke-extend-network-controller/templates/networking.cloud.tencent.com_clbportpools.yaml
@@ -232,6 +232,37 @@ spec:
                 - InOrder
                 - Random
                 type: string
+              listenerPrecreate:
+                description: |-
+                  监听器预创建，预先为 lb 创建一些固定的监听器，不销毁，用于加快扩缩容时 CLB 的绑定和解绑速度。
+
+
+                  注意：预创建监听器的端口池只支持 TCP 和 UDP 协议（不支持 TCP_SSL 和 QUIC）。
+                properties:
+                  enabled:
+                    description: 是否启用监听器预创建
+                    type: boolean
+                    x-kubernetes-validations:
+                    - message: Value is immutable
+                      rule: self == oldSelf
+                  tcp:
+                    description: TCP 监听器预创建数量
+                    type: integer
+                    x-kubernetes-validations:
+                    - message: Value is immutable
+                      rule: self == oldSelf
+                  udp:
+                    description: UDP 监听器预创建数量
+                    type: integer
+                    x-kubernetes-validations:
+                    - message: Value is immutable
+                      rule: self == oldSelf
+                required:
+                - enabled
+                type: object
+                x-kubernetes-validations:
+                - message: Value is immutable
+                  rule: self == oldSelf
               listenerQuota:
                 description: |-
                   监听器数量配额。仅用在单独调整了指定 CLB 实例监听器数量配额的场景（TOTAL_LISTENER_QUOTA），
diff --git a/incubator/tke-extend-network-controller/templates/role.yaml b/incubator/tke-extend-network-controller/templates/role.yaml
index fbc04951..592e821b 100644
--- a/incubator/tke-extend-network-controller/templates/role.yaml
+++ b/incubator/tke-extend-network-controller/templates/role.yaml
@@ -242,3 +242,11 @@ rules:
   - get
   - patch
   - update
+- apiGroups:
+  - node.tke.cloud.tencent.com
+  resources:
+  - machines
+  verbs:
+  - get
+  - list
+  - watch