feat: deploy NC01 Sub2API target

scripts/src/platform-infra/validate-script.ts

@@ -196,7 +196,7 @@ public_dns_rc=1
   done
 } >"$tmp/public-dns.out" 2>"$tmp/public-dns.err"
 if grep -Fx ${shQuote(exposure.dns.expectedA)} "$tmp/public-dns.out" >/dev/null 2>&1; then public_dns_rc=0; fi
-curl -fsS --max-time 20 ${shQuote(`${exposure.publicBaseUrl}/health`)} >"$tmp/public-probe.out" 2>"$tmp/public-probe.err"
+curl ${exposure.mode === "node-local-https" ? "--noproxy '*' -k" : ""} -fsS --max-time 20 ${shQuote(`${exposure.publicBaseUrl}/health`)} >"$tmp/public-probe.out" 2>"$tmp/public-probe.err"
 public_probe_rc=$?
 `;
   const egressProbeBlock = proxy === null ? `
@@ -257,8 +257,8 @@ fi
         "publicBaseUrl": "${exposure.publicBaseUrl}",
         "hostname": "${exposure.dns.hostname}",
         "expectedA": "${exposure.dns.expectedA}",
-        "mode": "pk01-caddy-frp-direct",
-        "dataPath": "client -> PK01 Caddy -> PK01 frps remotePort -> ${target.id} frpc -> Sub2API",
+        "mode": "${exposure.mode === "node-local-https" ? "node-local-docker-caddy" : "pk01-caddy-frp-direct"}",
+        "dataPath": "${exposure.mode === "node-local-https" ? `client -> ${target.id} local HTTPS port ${exposure.localHttps?.httpsPort} -> ${target.id} Docker Caddy -> Sub2API ClusterIP Service` : `client -> PK01 Caddy -> PK01 frps remotePort -> ${target.id} frpc -> Sub2API`}",
         "dns": {
             "exitCode": public_dns_rc,
             "resolvers": ${JSON.stringify(exposure.dns.resolvers)},