feat(k8s): M14 Namespace 管理看板（资源配额 + 命名空间 CRUD）

- 后端: ListNamespacesDetailed/CreateNamespace/DeleteNamespace/ListResourceQuotas/ListLimitRanges
- 后端: GetNamespacesDetail handler (6 API calls aggregate, not N×3)
- 后端: CreateNamespaceHandler + DeleteNamespaceHandler (system NS protection)
- 前端: NamespaceManagementPage.tsx (~280行) — 表格+概览卡片+创建/删除弹框
- 路由: GET/POST/DELETE /:clusterCode/namespaces + GET /namespace/:ns/detail
- 验证: 9/9 通过 (urllib), TS 零错误, Vite 构建成功

frontend/src/services/api.ts

@@ -444,6 +444,17 @@ export const kubernetesApi = {
   getDaemonSets: async (clusterCode: string, namespace: string) => {
     return http.get(`/kubernetes/${clusterCode}/namespace/${namespace}/daemonsets`);
   },
+
+  // === RBAC — ServiceAccount / Role / RoleBinding ===
+  getServiceAccounts: async (clusterCode: string, namespace: string) => {
+    return http.get(`/kubernetes/${clusterCode}/namespace/${namespace}/serviceaccounts`);
+  },
+  getRoles: async (clusterCode: string, namespace: string) => {
+    return http.get(`/kubernetes/${clusterCode}/namespace/${namespace}/roles`);
+  },
+  getRoleBindings: async (clusterCode: string, namespace: string) => {
+    return http.get(`/kubernetes/${clusterCode}/namespace/${namespace}/rolebindings`);
+  },
   getStatefulSetDetail: async (clusterCode: string, namespace: string, name: string) => { return http.get(`/kubernetes/${clusterCode}/namespace/${namespace}/statefulsets/${name}`); },
   getDaemonSetDetail: async (clusterCode: string, namespace: string, name: string) => { return http.get(`/kubernetes/${clusterCode}/namespace/${namespace}/daemonsets/${name}`); },
   scaleStatefulSet: async (clusterCode: string, namespace: string, name: string, replicas: number) => { return http.post(`/kubernetes/${clusterCode}/namespace/${namespace}/statefulsets/${name}/scale`, { replicas }); },
@@ -532,6 +543,19 @@ export const kubernetesApi = {
       return list.find((d: any) => d.name === name) || null;
     }
   },
+  // === 🆕 M14: Namespace 管理看板 ===
+  getNamespacesDetail: async (clusterCode: string) => {
+    return http.get(`/kubernetes/${clusterCode}/namespaces/detail`);
+  },
+  getNamespaceDetail: async (clusterCode: string, namespace: string) => {
+    return http.get(`/kubernetes/${clusterCode}/namespace/${namespace}/detail`);
+  },
+  createNamespace: async (clusterCode: string, name: string, labels?: Record<string, string>) => {
+    return http.post(`/kubernetes/${clusterCode}/namespaces`, { name, labels: labels || {} });
+  },
+  deleteNamespace: async (clusterCode: string, namespace: string) => {
+    return http.delete(`/kubernetes/${clusterCode}/namespaces/${namespace}`);
+  },
 };
 
 // ==================== 告警 API ====================
@@ -890,6 +914,9 @@ export const agentApi = {
   createHealthProbe: (data: any) => http.post('/agent/health-probes', data),
   updateHealthProbe: (id: number, data: any) => http.put(`/agent/health-probes/${id}`, data),
   deleteHealthProbe: (id: number) => http.delete(`/agent/health-probes/${id}`),
+  // 端口策略
+  getPortPolicy: (hostname: string) => http.get(`/agent/port-policies/${hostname}`),
+  savePortPolicy: (hostname: string, data: { port_filter_mode: string; port_whitelist: number[] }) => http.put(`/agent/port-policies/${hostname}`, data),
 };
 
 // ==================== 区域管理 API ====================