feat: complete Loki query, insights, settings and deployment workflows

Add the Loki query UI, access policies, ingress insights, alert and registry settings, and their backend APIs. Include the related Kubernetes deployment and collector updates required by the integrated application.

Validated with go test ./..., npm run build, and npm run lint.

backend/services/deployment.go

@@ -1,9 +1,9 @@
 package services
 
 import (
-	"os/exec"
 	"context"
 	"fmt"
+	"net"
 	"strconv"
 	"strings"
 	"sync"
@@ -11,6 +11,7 @@ import (
 
 	"opsxloki/models"
 	"opsxloki/repository"
+	"opsxloki/seed"
 	"opsxloki/utils"
 )
 
@@ -29,6 +30,8 @@ var LokiVersionList = []string{
 // minSupportedMajorVersion 最低支持的主版本号
 const minSupportedMajorVersion = 2
 
+const DefaultRetentionDays = 30
+
 // DeploymentService 部署业务逻辑层
 type DeploymentService struct{}
 
@@ -43,6 +46,8 @@ type CreateDeploymentRequest struct {
 	Mode            string `json:"mode" binding:"required"`
 	ClusterID       *uint  `json:"clusterID"`
 	HostID          *uint  `json:"hostID"`
+	ListenIP        string `json:"listenIP"`
+	ListenPort      int    `json:"listenPort"`
 	Namespace       string `json:"namespace"`
 	StorageConfigID uint   `json:"storageConfigID"`
 	AuthEnabled     bool   `json:"authEnabled"`
@@ -56,6 +61,41 @@ type CreateDeploymentRequest struct {
 }
 
 func (s *DeploymentService) Create(req *CreateDeploymentRequest) (*models.LokiDeployment, error) {
+	if req.Mode != "k8s-yaml" && req.Mode != "host-docker" && req.Mode != "host-binary" {
+		return nil, fmt.Errorf("不支持的部署方式: %s", req.Mode)
+	}
+	if req.GrafanaEnabled {
+		return nil, fmt.Errorf("Grafana 自动部署已移除，请使用独立 Grafana 服务")
+	}
+	if req.Mode == "host-docker" {
+		if _, err := dockerLokiImage(req.Version); err != nil {
+			return nil, err
+		}
+		if req.HostID == nil || *req.HostID == 0 {
+			return nil, fmt.Errorf("请选择目标主机")
+		}
+		if req.ListenPort == 0 {
+			req.ListenPort = 3100
+		}
+		if req.ListenPort < 1 || req.ListenPort > 65535 {
+			return nil, fmt.Errorf("监听端口须在 1 到 65535 之间")
+		}
+		if req.Replicas > 1 {
+			return nil, fmt.Errorf("主机 Docker 部署仅支持单副本")
+		}
+		if req.GrafanaEnabled {
+			return nil, fmt.Errorf("主机 Docker 模式暂不支持同时部署 Grafana")
+		}
+		if req.ListenIP != "" && net.ParseIP(req.ListenIP).To4() == nil {
+			return nil, fmt.Errorf("监听地址须为 IPv4 地址")
+		}
+	}
+	if req.RetentionDays < 0 {
+		return nil, fmt.Errorf("保留天数必须是正整数")
+	}
+	if req.RetentionDays == 0 {
+		req.RetentionDays = DefaultRetentionDays
+	}
 	// 版本兼容性预检查
 	if req.Version != "" {
 		if err := ValidateLokiVersion(req.Version); err != nil {
@@ -72,6 +112,8 @@ func (s *DeploymentService) Create(req *CreateDeploymentRequest) (*models.LokiDe
 		Mode:            req.Mode,
 		ClusterID:       req.ClusterID,
 		HostID:          req.HostID,
+		ListenIP:        req.ListenIP,
+		ListenPort:      req.ListenPort,
 		Namespace:       req.Namespace,
 		StorageConfigID: req.StorageConfigID,
 		AuthEnabled:     req.AuthEnabled,
@@ -107,6 +149,17 @@ func (s *DeploymentService) Create(req *CreateDeploymentRequest) (*models.LokiDe
 			}
 		}
 	}
+	if d.Mode == "host-docker" {
+		if d.Host == nil {
+			return nil, fmt.Errorf("目标主机不存在")
+		}
+		if d.ListenIP == "" {
+			d.ListenIP = d.Host.HostIP
+		}
+		if net.ParseIP(d.ListenIP).To4() == nil {
+			return nil, fmt.Errorf("主机 IP 格式无效，请填写监听内网 IPv4 地址")
+		}
+	}
 	if d.StorageConfigID > 0 {
 		for i := range db.Storages {
 			if db.Storages[i].ID == d.StorageConfigID {
@@ -169,6 +222,12 @@ func (s *DeploymentService) List(page, pageSize int) ([]models.LokiDeployment, i
 }
 
 func (s *DeploymentService) Update(id uint, updates map[string]interface{}) error {
+	if value, exists := updates["retentionDays"]; exists {
+		days, ok := value.(float64)
+		if !ok || days < 1 || days != float64(int(days)) {
+			return fmt.Errorf("保留天数必须是正整数")
+		}
+	}
 	db := repository.GetDB()
 	db.Lock()
 	defer db.Unlock()
@@ -243,6 +302,22 @@ func (s *DeploymentService) Update(id uint, updates map[string]interface{}) erro
 }
 
 func (s *DeploymentService) Delete(id uint) error {
+	deployment, err := s.Get(id)
+	if err != nil {
+		return err
+	}
+	if deployment.Mode == "host-docker" {
+		if deployment.Status == "deploying" {
+			return fmt.Errorf("部署正在进行中，请等待完成后删除")
+		}
+		if deployment.Status != "pending" {
+			ctx, cancel := context.WithTimeout(context.Background(), time.Minute)
+			defer cancel()
+			if err := deleteDockerLoki(ctx, deployment); err != nil {
+				return err
+			}
+		}
+	}
 	db := repository.GetDB()
 	db.Lock()
 	defer db.Unlock()
@@ -323,10 +398,11 @@ func (s *DeploymentService) StartDeploy(id uint) error {
 				"statusMessage": "Deployment completed successfully",
 				"endpoint":      s.getEndpoint(deployment),
 			})
-			// 部署成功自动注册日志查询数据源 + 记录 Grafana 访问地址
+			// 部署成功自动注册日志查询数据源 + 记录 Grafana 访问地址 + 补内置告警模板
 			if fresh, gerr := s.Get(id); gerr == nil {
 				EnsureLogSourceForDeployment(fresh)
 				go s.recordGrafanaEndpoint(fresh)
+				go seed.SeedAlertRules()
 			}
 			s.AddLog(id, "success", "Deployment completed successfully", "")
 		}
@@ -353,7 +429,13 @@ func (s *DeploymentService) StopDeployment(id uint) error {
 
 	ctx, cancel := context.WithTimeout(context.Background(), 5*time.Minute)
 	defer cancel()
-	CleanupLoki(ctx, deployment)
+	if deployment.Mode == "host-docker" {
+		if err := stopDockerLoki(ctx, deployment); err != nil {
+			return err
+		}
+	} else {
+		CleanupLoki(ctx, deployment)
+	}
 	return s.Update(id, map[string]interface{}{
 		"status":        "stopped",
 		"statusMessage": "Deployment stopped by user",
@@ -499,6 +581,8 @@ func (s *DeploymentService) getEndpoint(d *models.LokiDeployment) string {
 		if d.Host != nil {
 			return fmt.Sprintf("http://%s:3100", d.Host.HostIP)
 		}
+	case "host-docker":
+		return fmt.Sprintf("http://%s:%d", d.ListenIP, d.ListenPort)
 	}
 	return ""
 }
@@ -599,12 +683,12 @@ func (s *DeploymentService) Preflight() map[string]interface{} {
 		d := &db.Deployments[i]
 		if d.Status == "running" {
 			loki := map[string]interface{}{
-				"id":             d.ID,
-				"name":           d.Name,
-				"mode":           d.Mode,
-				"endpoint":       d.Endpoint,
-				"namespace":      d.Namespace,
-				"grafana":        d.GrafanaEnabled,
+				"id":              d.ID,
+				"name":            d.Name,
+				"mode":            d.Mode,
+				"endpoint":        d.Endpoint,
+				"namespace":       d.Namespace,
+				"grafana":         d.GrafanaEnabled,
 				"grafanaEndpoint": d.GrafanaEndpoint,
 			}
 			result["runningLoki"] = loki
@@ -638,29 +722,16 @@ func (s *DeploymentService) recordGrafanaEndpoint(d *models.LokiDeployment) {
 		}
 		ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
 		defer cancel()
-		env, cleanup, err := kubeconfigEnv(d.Cluster)
-		if err != nil {
-			return
-		}
-		defer cleanup()
 		ns := d.Namespace
 		if ns == "" {
 			ns = "log"
 		}
-		ipCmd := exec.CommandContext(ctx, "kubectl", "get", "nodes",
-			"-o", "jsonpath={.items[0].status.addresses[0].address}")
-		ipCmd.Env = env
-		ipOut, _ := ipCmd.CombinedOutput()
-		portCmd := exec.CommandContext(ctx, "kubectl", "get", "svc", "grafana", "-n", ns,
-			"-o", "jsonpath={.spec.ports[0].nodePort}")
-		portCmd.Env = env
-		portOut, _ := portCmd.CombinedOutput()
-		ip := strings.TrimSpace(string(ipOut))
-		port := strings.TrimSpace(string(portOut))
-		s.AddLog(d.ID, "info", fmt.Sprintf("Grafana 地址探测: node=%s port=%s", ip, port), "")
-		if ip != "" && port != "" {
-			endpoint = fmt.Sprintf("http://%s:%s", ip, port)
+		ip, ipErr := firstNodeIP(ctx, d.Cluster)
+		port, portErr := serviceNodePort(ctx, d.Cluster, ns, "grafana")
+		if ipErr == nil && portErr == nil && port > 0 {
+			endpoint = fmt.Sprintf("http://%s:%d", ip, port)
 		}
+
 	case "host-binary":
 		if d.Host != nil {
 			endpoint = fmt.Sprintf("http://%s:3000", d.Host.HostIP)