etcd-sync 责任分工与迁移清单

回答四件事：规则从 etcd-sync 迁出之后由谁负责、本产品具体要迁哪些条目、依据是什么、暂时归属不明的怎么处理。

三方责任划分

etcd-sync
  └─ 动态加载、排序、生成快照、回写状态
规则提供方
  └─ 定义规则内容、键名、覆盖关系、回滚方式
产品
  └─ 把本产品规则迁出，托管到自己的 ConfigMap，验证结果

角色	职责
`etcd-sync`	规则的装载与执行框架
规则提供方	规则语义和条目内容的定义者
产品	规则的落地、发布、回归验证

证据与置信度

每条规则的归属判定附带置信度标签：

置信度	判定条件
`明确`	仓内有直接代码、chart、README 或产品清单命中
`高概率`	规则名、资源组、相邻条目共同指向同一产品
`<Unknown>`	仅有名称线索，缺少直接证据

证据按以下优先级查找：

仓内直接引用
产品清单 product.yaml
git blame / git log 作者线索
规则命名模式和相邻分组

责任总览矩阵

产品	规则提供方	规则族	主要规则文件	迁移动作	置信度	证据
Platform Registry	`platform-registry`	`global-registry-ca`, `global-registry-server`	`ignore-equal.txt`	迁到产品独立 ConfigMap	`明确`	`product.yaml` 里有 `platform-registry`，`ait/platform-registry/chart/templates/{issuer,certificate}.yaml` 直接命中
Observability / AIOps	`aiops-base`	`warlock-serving-cert`, `kube-prometheus-`, `prometheus-client-tls`, `log-`, `/registry/operator.victoriametrics.com/vmrules`, `/registry/monitoring.coreos.com`, `/registry/ait.alauda.io/monitordashboards`	`ignore-equal.txt`, `ignore-prefix-file.txt`, `sync-prefix-file.txt`	与相邻规则一起整组迁移	`高概率`	`product.yaml` 里有 `aiops-base`，`chart-cpaas-monitor/chart/templates/warlock-deployment.yaml` 和 `docs/shared/crds/ait.alauda.io_monitordashboards.yaml` 直接命中
Marketplace	`marketplace`, `marketplace-central`	`metis-serving-cert`, `metis-webhook-cert`, `/registry/app.alauda.io`	`ignore-equal.txt`, `ignore-prefix-file.txt`, `sync-prefix-file.txt`	迁到产品独立 ConfigMap	`明确`	`product.yaml` 里有 `marketplace` / `marketplace-central`，`chart-alauda-cluster-base/chart/templates/webhooks/*.yaml` 与 `ait/marketplace/tests/e2e/kind-init.yaml` 直接命中
Sentry / 集群入口	`sentry`, `cluster-manager`	`sentry.tls`, `k8sadmin`, `k8sadmin-` 前缀	`ignore-equal.txt`, `ignore-prefix-file.txt`	与相邻规则一起整组迁移	`高概率`	`product.yaml` 里有 `sentry`，`ait/sentry/main.go`、`cluster-api-provider-alauda/pkg/util/apiclient/token_rotator.go`、`docs/acp-docs/.../fetch-kubeconfig.mdx` 共同指向
ASM / Service Mesh	`asm-global`	`global-asm-webhook`, `asm-istio-rootca`, `/registry/asm.alauda.io`	`ignore-equal.txt`, `sync-prefix-file.txt`	迁到产品独立 ConfigMap	`明确`	`product.yaml` 里有 `asm-global`，`chart-global-asm/chart/templates/{cert,istio-ca}.yaml` 直接命中
Cluster Lifecycle / CAPI / Infra	`cluster-manager`	`/registry/cluster.x-k8s.io/`, `/registry/bootstrap.cluster.x-k8s.io/`, `/registry/controlplane.cluster.x-k8s.io/`, `/registry/infrastructure.cluster.x-k8s.io/`, `sync-kvs-file.txt`, 删除/预同步规则	`ignore-kvs-file.txt`, `ignore-prefix-file.txt`, `sync-prefix-file.txt`, `sync-kvs-file.txt`, `sync-delete-prefix-file.txt`, `sync-delete-ignore.txt`, `pre-sync-prefix-file.txt`	与相邻规则一起整组迁移	`明确`	`product.yaml` 里有 `cluster-manager`，`ait/chart-cluster-api-provider-alauda` 与同名前缀规则直接对应
Auth / IAM	`auth-manager`, `auth-manager-central`	`/registry/auth.alauda.io`, `/registry/dex.coreos.com`, `oauth2clients`, `roletemplates`	`ignore-equal.txt`, `ignore-prefix-file.txt`, `sync-prefix-file.txt`	迁到产品独立 ConfigMap	`明确`	`product.yaml` 里有 `auth-manager` / `auth-manager-central`，`chart-auth-manager/chart/charts/{auth-manager-global,dex}/templates/crds` 直接命中
DevOps / Katanomi	`connectors-operator`, `katanomi-operator`	`devops-apiserver-cert`, `katanomi-webhook-server-cert`, `devops-project-settings`, `/registry/*.katanomi.dev`	`ignore-equal.txt`, `ignore-kvs-file.txt`, `ignore-prefix-file.txt`, `sync-prefix-file.txt`, `sync-glob-file.txt`	迁到产品独立 ConfigMap	`高概率`	`product.yaml` 里有 `connectors-operator` / `katanomi-operator`，`chart-auth-manager/.../devops-projectsettings.yaml` 和 `sync-glob-file.txt` 直接命中 `devops-project-settings`
Base Platform	`base-operator`, `cluster-transformer`	`base-operator.tls`, `callback-secret`, `cluster-transformer-cert`	`ignore-equal.txt`	保留平台基线	`明确`	`product.yaml` 里有 `base-operator`，`ait/base-operator/main.go`、`ait/base/.../cluster-transformer/*.yaml`、`ait/cluster-transformer/pkg/secret/manager.go` 直接命中
Upgrade / 版本治理	Astrolabe / 升级链路	`clusterversionshadows`	`ignore-equal.txt`, `sync-prefix-file.txt`, `pre-sync-prefix-file.txt`	迁到产品独立 ConfigMap	`明确`	`ait/astrolabe/api/config.alauda.io/...clusterversionshadows...` 与 `pkg/productmanifest/controllers/availableupdates.go` 直接命中
`<Unknown>`	`<Unknown>`	`courier-webhook-cert`, `vela-core-admission`, 当前还缺直接证据的遗漏项	`ignore-equal.txt`	归属待确认，先标记 `<Unknown>`	`<Unknown>`	仓内未发现直接引用，仅有名称线索

详细规则清单

下文按 data key 分小节列出每条规则。迁移动作统一使用以下四种：

迁到产品独立 ConfigMap
保留平台基线
与相邻规则一起整组迁移
归属待确认，先标记 <Unknown>

`ignore-equal.txt`

规则文件	条目	条目类型	建议产品	规则提供方	迁移建议	置信度	证据
`ignore-equal.txt`	`/registry/secrets/cpaas-system/global-registry-ca/registry/secrets/cpaas-system/global-registry-server`	Secret 精确匹配	Platform Registry	`platform-registry`	迁到产品独立 ConfigMap	`明确`	`ait/platform-registry/README.md` 与 `chart/templates/{issuer,certificate}.yaml` 直接命中
`ignore-equal.txt`	`/registry/secrets/cpaas-system/warlock-serving-cert`	Secret 精确匹配	Observability / AIOps	`aiops-base`	迁到产品独立 ConfigMap	`明确`	`chart-cpaas-monitor/chart/templates/warlock-deployment.yaml` 和 `docs/shared/crds/ait.alauda.io_monitordashboards.yaml` 直接命中
`ignore-equal.txt`	`/registry/secrets/cpaas-system/alertmanager-kube-prometheus/registry/secrets/cpaas-system/prometheus-kube-prometheus-/registry/secrets/cpaas-system/kube-prometheus-*-basic-auth/registry/secrets/cpaas-system/prometheus-client-tls/registry/secrets/cpaas-system/victoriametrics-exporter-node-basic-auth`	Secret 族	Observability / AIOps	Monitoring stack	与相邻规则一起整组迁移	`高概率`	`chart-cpaas-monitor/chart/templates/prometheus-feature.yaml` 直接命中 `kube-prometheus-*`，其余条目与同组命名共同指向监控链路
`ignore-equal.txt`	`/registry/secrets/cpaas-system/log-center-secret/registry/secrets/cpaas-system/log-callback-secret/registry/secrets/cpaas-system/log-collector-bearer-auth/registry/secrets/cpaas-system/log-database-bearer-auth`	Secret 族	Observability / AIOps	Log center / log agent	与相邻规则一起整组迁移	`高概率`	`ait/cluster-transformer/pkg/secret/manager.go` 直接命中 `log-center-secret` / `log-callback-secret`，其余条目由命名和相邻分组共同指向日志链路
`ignore-equal.txt`	`/registry/secrets/cpaas-system/metis-serving-cert/registry/secrets/cpaas-system/metis-webhook-cert`	Secret 精确匹配	Marketplace	`marketplace`, `marketplace-central`	迁到产品独立 ConfigMap	`明确`	`chart-alauda-cluster-base/chart/templates/webhooks/*.yaml` 与 `ait/marketplace/tests/e2e/kind-init.yaml` 直接命中
`ignore-equal.txt`	`/registry/secrets/cpaas-system/sentry.tls`	Secret 精确匹配	Sentry / 集群入口	`sentry`	迁到产品独立 ConfigMap	`明确`	`ait/sentry/main.go` 直接定义 `sentry.tls`
`ignore-equal.txt`	`/registry/secrets/cpaas-system/k8sadmin`	Secret 精确匹配	Sentry / Cluster Lifecycle 共享	`sentry`, `cluster-manager`	与相邻规则一起整组迁移	`高概率`	`ait/sentry/main.go`、`cluster-api-provider-alauda/pkg/util/apiclient/token_rotator.go`、`docs/acp-docs/.../fetch-kubeconfig.mdx` 共同命中
`ignore-equal.txt`	`/registry/secrets/cpaas-system/global-asm-webhook/registry/secrets/cpaas-system/asm-istio-rootca`	Secret 精确匹配	ASM / Service Mesh	`asm-global`	迁到产品独立 ConfigMap	`明确`	`chart-global-asm/chart/templates/{cert,istio-ca}.yaml` 直接命中
`ignore-equal.txt`	`/registry/secrets/cpaas-system/devops-apiserver-cert/registry/secrets/cpaas-system/katanomi-webhook-server-cert`	Secret 精确匹配	DevOps / Katanomi	`connectors-operator`, `katanomi-operator`	迁到产品独立 ConfigMap	`高概率`	`product.yaml` 里有 `connectors-operator` / `katanomi-operator`，规则名和相邻 `*.katanomi.dev` 前缀共同指向 DevOps
`ignore-equal.txt`	`/registry/secrets/cpaas-system/base-operator.tls/registry/secrets/cpaas-system/callback-secret/registry/secrets/cpaas-system/cluster-transformer-cert`	Secret 精确匹配	Base Platform	`base-operator`, `cluster-transformer`	保留平台基线	`明确`	`ait/base-operator/main.go`、`ait/base/.../cluster-transformer/*.yaml`、`ait/cluster-transformer/pkg/{consts,secret}/` 直接命中
`ignore-equal.txt`	`/registry/dex.coreos.com/oauth2clients/cpaas-system/.../registry/auth.alauda.io/roletemplates/.../registry/secrets/cpaas-system/auth-controller2-webhook-cert`	API / Secret 精确匹配	Auth / IAM	`auth-manager`, `auth-manager-central`	迁到产品独立 ConfigMap	`明确`	`chart-auth-manager/chart/charts/{dex,auth-manager-global}/templates/crds` 与 `chart/templates/auth-controller2/certificates.yaml` 直接命中
`ignore-equal.txt`	`/registry/config.alauda.io/clusterversionshadows/cpaas-system/global`	API 精确匹配	Upgrade / 版本治理	Astrolabe / 升级链路	与相邻规则一起整组迁移	`明确`	`ait/astrolabe/api/config.alauda.io/...clusterversionshadows...` 与 `pkg/productmanifest/controllers/availableupdates.go` 直接命中
`ignore-equal.txt`	`/registry/secrets/cpaas-system/etcd-/registry/secrets/cpaas-system/remote-etcd-/registry/secrets/cpaas-system/global-/registry/namespaces//registry/cluster.x-k8s.io/.../global/registry/infrastructure.cluster.x-k8s.io/.../global`	平台自举与全局对象	Base Platform / Cluster Lifecycle	平台基线	保留平台基线	`高概率`	全部条目服务 DR 全局控制面或运行时自举，当前迁移边界继续保留在默认来源
`ignore-equal.txt`	`/registry/secrets/cpaas-system/courier-webhook-cert/registry/secrets/cpaas-system/vela-core-admission`	Secret 精确匹配	`<Unknown>`	`<Unknown>`	归属待确认，先标记 `<Unknown>`	`<Unknown>`	仓内未发现直接引用，仅有名称线索

`ignore-kvs-file.txt`

规则文件	条目	条目类型	建议产品	规则提供方	迁移建议	置信度	证据
`ignore-kvs-file.txt`	`/registry/infrastructure.cluster.x-k8s.io/userprovisionedmachinepools	"clusterName":"global"`<br/>`/registry/infrastructure.cluster.x-k8s.io/userprovisionedmachines	"clusterName":"global"`	KV 过滤	Cluster Lifecycle / CAPI / Infra	`cluster-manager`	与相邻规则一起整组迁移
`ignore-kvs-file.txt`	`/registry/machine.alauda.io/machinepools/cpaas-system/	"phase":"Processing"`	KV 过滤	Cluster Lifecycle / CAPI / Infra	`cluster-manager`	与相邻规则一起整组迁移	`高概率`
`ignore-kvs-file.txt`	`/registry/secrets/.*/katanomi-proxy-cert`	Secret 模式过滤	DevOps / Katanomi	`katanomi-operator`	迁到产品独立 ConfigMap	`高概率`	`katanomi` 命名与 `product.yaml` 中的 `katanomi-operator` 直接对应
`ignore-kvs-file.txt`	`/registry/secrets/.*/default-token`	Secret 模式过滤	Base Platform	平台基线	保留平台基线	`明确`	通用 service account token 过滤，作用域跨所有产品

`ignore-prefix-file.txt`

规则文件	条目	条目类型	建议产品	规则提供方	迁移建议	置信度	证据
`ignore-prefix-file.txt`	`/registry/secrets/cpaas-system/k8sadmin-`	Prefix 忽略	Sentry / Cluster Lifecycle 共享	`sentry`, `cluster-manager`	与相邻规则一起整组迁移	`高概率`	`k8sadmin` 主 Secret 与 token rotator 同时存在，带时间戳后缀的轮换 Secret 需要一起处理
`ignore-prefix-file.txt`	`/registry/app.alauda.io/artifacts/cpaas-system//registry/app.alauda.io/artifactversions/cpaas-system//registry/app.alauda.io/libraries/cpaas-system//registry/app.alauda.io/charts/cpaas-system//registry/app.alauda.io/imagewhitelists/`	Prefix 忽略	Marketplace	`marketplace`, `marketplace-central`	与相邻规则一起整组迁移	`明确`	`product.yaml` 中的 `marketplace` / `marketplace-central` 直接声明管理 Marketplace 内容与库型 CRD
`ignore-prefix-file.txt`	`/registry/auth.alauda.io/projectbindings//registry/dex.coreos.com/refreshtokens/`	Prefix 忽略	Auth / IAM	`auth-manager`, `auth-manager-central`	迁到产品独立 ConfigMap	`明确`	`chart-auth-manager` 的 CRD 和 function resources 直接命中对应资源组
`ignore-prefix-file.txt`	`/registry/devops.alauda.io/devops.alauda.io/imagerepositories//registry/policies.katanomi.dev/policyruns/`	Prefix 忽略	DevOps / Katanomi	`connectors-operator`, `katanomi-operator`	迁到产品独立 ConfigMap	`高概率`	规则名前缀与 `product.yaml` 中的 DevOps 组件直接对应
`ignore-prefix-file.txt`	`/registry/aiops.alauda.io/notificationmessages/cpaas-system//registry/ait.alauda.io/monitordashboards/kube-public/`	Prefix 忽略	Observability / AIOps	`aiops-base`	与相邻规则一起整组迁移	`高概率`	`docs/shared/crds/ait.alauda.io_monitordashboards.yaml` 直接命中，`notificationmessages` 由命名和产品族共同指向 AIOps
`ignore-prefix-file.txt`	`/registry/cluster.x-k8s.io/machinedeployments/cpaas-system/global-/registry/cluster.x-k8s.io/machinepools/cpaas-system/global-/registry/cluster.x-k8s.io/machinesets/cpaas-system/global-/registry/cluster.x-k8s.io/machines/cpaas-system/global-/registry/controlplane.cluster.x-k8s.io/kubeadmcontrolplanes/cpaas-system/global-/registry/bootstrap.cluster.x-k8s.io/kubeadmconfigs/cpaas-system/global-/registry/bootstrap.cluster.x-k8s.io/kubeadmconfigtemplates/cpaas-system/global-/registry/infrastructure.cluster.x-k8s.io/*/cpaas-system/global-`	Prefix 忽略	Cluster Lifecycle / CAPI / Infra	`cluster-manager`	与相邻规则一起整组迁移	`明确`	这些前缀与 `sync-delete-ignore.txt`、`pre-sync-prefix-file.txt`、`sync-kvs-file.txt` 组成同一批 CAPI 边界规则
`ignore-prefix-file.txt`	`/registry/cluster.alauda.io/moduleinfoes/global-/registry/config.alauda.io/modulepluginconfigs//registry/config.alauda.io/productmanifests//registry/etcdkeyseedbundlestates.cluster.alauda.io//registry/etcdencryptionconfigs.cluster.alauda.io/`	Prefix 忽略	Base Platform	平台基线	保留平台基线	`高概率`	平台中心状态与产品元数据对象，当前迁移边界继续留在默认来源
`ignore-prefix-file.txt`	`/registry/secrets/default//registry/secrets/kube-public//registry/secrets/nsx-system//registry/secrets/kube-system//registry/secrets/kube-ovn//registry/secrets/cert-manager//registry/secrets/operators//registry/secrets/cpaas-solution/`	Namespace 级公共前缀	Base Platform	平台基线	保留平台基线	`明确`	命名空间级别的公共豁免前缀，跨产品共享

`sync-equal-file.txt`

规则文件	条目	条目类型	建议产品	规则提供方	迁移建议	置信度	证据
`sync-equal-file.txt`	`/registry/secrets/cpaas-system/elasticsearch-basic-auth`	Secret 精确同步	Observability / AIOps	`aiops-base`	与相邻规则一起整组迁移	`高概率`	规则名与日志 / 监控栈共同指向观测链路
`sync-equal-file.txt`	`/registry/configmaps/cpaas-system/alert-repeat-config`	ConfigMap 精确同步	Observability / AIOps	`aiops-base`	与相邻规则一起整组迁移	`高概率`	`alert` 命名与运维中心规则集共同指向告警链路
`sync-equal-file.txt`	`/registry/configmaps/cpaas-system/ovn-ic/registry/configmaps/cpaas-system/inspection-config/registry/configmaps/cpaas-system/platform-ops-mode/registry/cluster.alauda.io/moduleinfoes/global-*`	ConfigMap / API 精确同步	Base Platform	平台基线	保留平台基线	`高概率`	平台运行模式、巡检配置和全局模块信息继续服务中心控制面

`sync-prefix-file.txt`

规则文件	条目	条目类型	建议产品	规则提供方	迁移建议	置信度	证据
`sync-prefix-file.txt`	`/registry/operator.victoriametrics.com/vmrules/registry/monitoring.coreos.com`	Prefix 同步	Observability / AIOps	`aiops-base`	与相邻规则一起整组迁移	`明确`	`chart-auth-manager/chart/templates/auth-controller2/aiops_rbac.yaml` 与监控资源组直接命中
`sync-prefix-file.txt`	`/registry/ait.alauda.io`	Prefix 同步	Observability / AIOps	`aiops-base`	与相邻规则一起整组迁移	`高概率`	当前仓内有直接证据的子族是 `monitordashboards`，更宽前缀继续沿同产品治理
`sync-prefix-file.txt`	`/registry/auth.alauda.io/registry/dex.coreos.com`	Prefix 同步	Auth / IAM	`auth-manager`, `auth-manager-central`	迁到产品独立 ConfigMap	`明确`	`chart-auth-manager` 的 CRD 与 function resources 直接命中
`sync-prefix-file.txt`	`/registry/app.alauda.io`	Prefix 同步	Marketplace	`marketplace`, `marketplace-central`	迁到产品独立 ConfigMap	`明确`	`product.yaml` 直接声明 Marketplace 负责 library CRD 和内容生命周期
`sync-prefix-file.txt`	`/registry/devops.alauda.io/registry/integrations.katanomi.dev/registry/deliveries.katanomi.dev/registry/core.katanomi.dev/registry/builds.katanomi.dev/registry/sources.katanomi.dev/registry/versioning.katanomi.dev/registry/artifacts.katanomi.dev/registry/storage.katanomi.dev/registry/policies.katanomi.dev`	Prefix 同步	DevOps / Katanomi	`connectors-operator`, `katanomi-operator`	迁到产品独立 ConfigMap	`高概率`	规则名前缀与 `product.yaml` 中的 DevOps 组件直接对应
`sync-prefix-file.txt`	`/registry/asm.alauda.io`	Prefix 同步	ASM / Service Mesh	`asm-global`	迁到产品独立 ConfigMap	`明确`	`product.yaml` 中 `asm-global` 与 `chart-global-asm` 直接对应
`sync-prefix-file.txt`	`/registry/config.alauda.io/clusterversionshadows`	Prefix 同步	Upgrade / 版本治理	Astrolabe / 升级链路	与相邻规则一起整组迁移	`明确`	`ait/astrolabe` 的 CRD 与 controller 直接命中
`sync-prefix-file.txt`	`/registry/machine.alauda.io/machinepools/cpaas-system//registry/cluster.x-k8s.io/machinesets/registry/bootstrap.cluster.x-k8s.io/kubeadmconfigs/registry/bootstrap.cluster.x-k8s.io/kubeadmconfigtemplates/registry/infrastructure.cluster.x-k8s.io//registry/addons.cluster.x-k8s.io/clusterresourceset`	Prefix 同步	Cluster Lifecycle / CAPI / Infra	`cluster-manager`	与相邻规则一起整组迁移	`明确`	与 `cluster-manager` 产品包和删除 / 预同步规则完全同族
`sync-prefix-file.txt`	`/registry/secrets/registry/namespaces`	Prefix 同步	Base Platform	平台基线	保留平台基线	`明确`	平台公共对象集合，承载所有产品共享的默认同步边界
`sync-prefix-file.txt`	`/registry/security.alauda.io/registry/virtualization.alauda.io/registry/portal.alauda.io/registry/metering.alauda.io/registry/alauda.io/registry/cluster.alauda.io/registry/etcdkeyseedbundles.cluster.alauda.io/registry/clusterregistry.k8s.io/registry/crd.alauda.io/registry/namespace.alauda.io/registry/ace3.alauda.io/registry/ml.alauda.io/registry/infrastructure.alauda.io/registry/argoproj.io/registry/testing.alauda.io`	Prefix 同步	Base Platform	平台基线	保留平台基线	`高概率`	这些前缀当前缺少能支撑本轮拆分的统一产品证据，继续留在默认来源最稳妥

`sync-glob-file.txt`

规则文件	条目	条目类型	建议产品	规则提供方	迁移建议	置信度	证据
`sync-glob-file.txt`	`/registry/configmaps/**/devops-project-settings`	Glob 同步	DevOps / Katanomi	`connectors-operator`, `katanomi-operator`	迁到产品独立 ConfigMap	`明确`	`chart-auth-manager/.../devops-projectsettings.yaml` 与 `docs/shared/functionresources/functionresources.yaml` 直接命中

`sync-kvs-file.txt`

规则文件	条目	条目类型	建议产品	规则提供方	迁移建议	置信度	证据
`sync-kvs-file.txt`	`/registry/cluster.x-k8s.io/clusters	"phase":"Provisioned"`<br/>`/registry/cluster.x-k8s.io/machinepools	"phase":"Provisioned"`<br/>`/registry/cluster.x-k8s.io/machinedeployments	"phase":"Running"`<br/>`/registry/cluster.x-k8s.io/machines	"phase":"Running"`<br/>`/registry/controlplane.cluster.x-k8s.io/kubeadmcontrolplanes	"ready":true`<br/>`/registry/infrastructure.cluster.x-k8s.io/{aws,azure,cce,gcp}managed*	"ready":true`

`sync-delete-prefix-file.txt`

规则文件	条目	条目类型	建议产品	规则提供方	迁移建议	置信度	证据
`sync-delete-prefix-file.txt`	`/registry/cluster.x-k8s.io/clusters/registry/cluster.x-k8s.io/machinepools/registry/cluster.x-k8s.io/machinedeployments/registry/cluster.x-k8s.io/machinesets/registry/cluster.x-k8s.io/machines/registry/bootstrap.cluster.x-k8s.io/kubeadmconfigs/registry/bootstrap.cluster.x-k8s.io/kubeadmconfigtemplates/registry/controlplane.cluster.x-k8s.io/{kubeadm,awsmanaged}controlplanes/registry/infrastructure.cluster.x-k8s.io/{aws,azure,cce,gcp,userprovisioned,dcs}*`	Delete Prefix	Cluster Lifecycle / CAPI / Infra	`cluster-manager`	与相邻规则一起整组迁移	`明确`	与 `sync-kvs-file.txt`、`sync-delete-ignore.txt`、`pre-sync-prefix-file.txt` 共同定义集群生命周期删除语义

`sync-delete-ignore.txt`

规则文件	条目	条目类型	建议产品	规则提供方	迁移建议	置信度	证据
`sync-delete-ignore.txt`	`/registry/cluster.x-k8s.io/clusters/cpaas-system/global/registry/cluster.x-k8s.io/machinedeployments/cpaas-system/global-/registry/cluster.x-k8s.io/machinepools/cpaas-system/global-/registry/cluster.x-k8s.io/machinesets/cpaas-system/global-/registry/cluster.x-k8s.io/machines/cpaas-system/global-/registry/controlplane.cluster.x-k8s.io/kubeadmcontrolplanes/cpaas-system/global-/registry/bootstrap.cluster.x-k8s.io/kubeadmconfig* /cpaas-system/global-/registry/infrastructure.cluster.x-k8s.io/{dcs,userprovisioned,hcs,vsphere}/global`	Delete Ignore	Cluster Lifecycle / CAPI / Infra	`cluster-manager`	与相邻规则一起整组迁移	`明确`	全部条目是 global 控制面保留集合，和删除规则天然成组

`pre-sync-prefix-file.txt`

规则文件	条目	条目类型	建议产品	规则提供方	迁移建议	置信度	证据
`pre-sync-prefix-file.txt`	`/registry/cluster.x-k8s.io/clusters/registry/controlplane.cluster.x-k8s.io/kubeadmcontrolplanes/registry/cluster.x-k8s.io/machinedeployments/registry/cluster.x-k8s.io/machinesets/registry/cluster.x-k8s.io/machines/registry/infrastructure.cluster.x-k8s.io/userprovisioned{machines,clusters,machinepools}`	Pre-sync Prefix	Cluster Lifecycle / CAPI / Infra	`cluster-manager`	与相邻规则一起整组迁移	`明确`	这些前缀决定集群生命周期对象的预同步顺序
`pre-sync-prefix-file.txt`	`/registry/config.alauda.io/clusterversionshadows`	Pre-sync Prefix	Upgrade / 版本治理	Astrolabe / 升级链路	与相邻规则一起整组迁移	`明确`	`clusterversionshadows` 同时出现在精确同步、prefix 同步和预同步集合

`<Unknown>` 清单

记录当前还没有明确归属的遗漏项。后续补到直接证据之后，再把对应条目挪到归属产品下。

条目	来源	当前标记	证据	后续动作
`/registry/secrets/cpaas-system/courier-webhook-cert`	`ignore-equal.txt`	`<Unknown>`	仓内未发现直接引用，仅有名称线索	保留在默认来源，待补仓内直接引用
`/registry/secrets/cpaas-system/vela-core-admission`	`ignore-equal.txt`	`<Unknown>`	仓内未发现直接引用，仅有名称线索	保留在默认来源，待补仓内直接引用
`/registry/ait.alauda.io` 中除 `monitordashboards` 以外、当前还缺直接证据的子资源	`sync-prefix-file.txt`	`<Unknown>`	当前仓内的直接证据集中在 `monitordashboards` 子族	拆出子资源后再归档到对应产品
后续新增且暂时找不到产品证据的规则	任意规则文件	`<Unknown>`	仓内未发现直接引用，仅有名称线索	先记到 `<Unknown>`，补证据后迁出

etcd-sync 责任分工与迁移清单

On this page