feat(k8s): add k8s controllers

kubernetes/Dockerfile

@@ -0,0 +1,49 @@
+# Copyright 2025 Alibaba Group Holding Ltd.
+# 
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+# 
+#     http://www.apache.org/licenses/LICENSE-2.0
+# 
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Build the manager binary
+FROM golang:1.25 AS builder
+ARG TARGETOS
+ARG TARGETARCH
+
+WORKDIR /workspace
+# Copy the Go Modules manifests
+COPY go.mod go.mod
+COPY go.sum go.sum
+# cache deps before building and copying source so that we don't need to re-download as much
+# and so that source changes don't invalidate our downloaded layer
+RUN GOPROXY=https://goproxy.cn,direct go mod download
+
+# Copy the go source
+COPY cmd/ cmd/
+COPY api/ api/
+COPY pkg/ pkg/
+COPY internal/ internal/
+
+# Build
+# the GOARCH has not a default value to allow the binary be built according to the host where the command
+# was called. For example, if we call make docker-build in a local env which has the Apple Silicon M1 SO
+# the docker BUILDPLATFORM arg will be linux/arm64 when for Apple x86 it will be linux/amd64. Therefore,
+# by leaving it empty we can ensure that the container and binary shipped on it will have the same platform.
+ARG PACKAGE=cmd/controller/main.go
+RUN CGO_ENABLED=0 GOOS=${TARGETOS:-linux} GOARCH=${TARGETARCH} go build -a -o server ${PACKAGE}
+
+# Use golang image as base to ensure nsenter (util-linux) is available
+# distroless does not contain shell or nsenter
+FROM golang:1.25
+ARG USERID=65532
+WORKDIR /workspace
+COPY --from=builder /workspace/server .
+USER $USERID
+ENTRYPOINT ["/workspace/server"]

kubernetes/Dockerfile.debug

@@ -0,0 +1,16 @@
+FROM golang:1.25
+
+# Install Delve (debugger) and Reflex (file watcher)
+RUN go install github.com/go-delve/delve/cmd/dlv@latest && \
+    go install github.com/cespare/reflex@latest
+
+WORKDIR /workspace
+
+# Set cache env vars to ensuring they are targeted by our volume mounts
+ENV GOCACHE=/go/.cache/go-build
+ENV GOMODCACHE=/go/pkg/mod
+# Expose ports
+EXPOSE 5758 2345
+
+# The default command will be overridden by the script, but we can set a safe default
+CMD ["bash"]