初始提交：DSH 多租户平台（dshs）

poc/03-networkpolicy/pods.yaml

@@ -0,0 +1,47 @@
+# 目标 DSH Pod（app=dsh）+ 控制面源（app=dsh-orchestrator）+ 攻击源（app=attacker）。
+apiVersion: v1
+kind: Pod
+metadata:
+  name: dsh-target
+  namespace: dsh-poc
+  labels: { app: dsh, user: u1 }
+spec:
+  automountServiceAccountToken: false
+  containers:
+    - name: dsh
+      image: node:22-alpine
+      command: ["node", "/app/target.mjs"]
+      ports: [{ containerPort: 8081 }]
+      volumeMounts:
+        - name: script
+          mountPath: /app
+  volumes:
+    - name: script
+      configMap:
+        name: dsh-target-script
+
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  name: controlplane
+  namespace: dsh-poc
+  labels: { app: dsh-orchestrator }
+spec:
+  containers:
+    - name: src
+      image: busybox:1.36
+      command: ["sleep", "3600"]
+
+---
+apiVersion: v1
+kind: Pod
+metadata:
+  name: attacker
+  namespace: dsh-poc
+  labels: { app: attacker }
+spec:
+  containers:
+    - name: src
+      image: busybox:1.36
+      command: ["sleep", "3600"]