func (r *RedisClusterReconciler) Reconcile(ctx context.Context, req ctrl.Request) (ctrl.Result, error) {
    // 1. 获取 RedisCluster 资源
    redis := &dbv1.RedisCluster{}
    r.Get(ctx, req.NamespacedName, redis)

    // 2. 检查删除标记
    if !redis.DeletionTimestamp.IsZero() {
        return r.handleDeletion(ctx, redis)
    }

    // 3. 添加 Finalizer
    if !containsString(redis.Finalizers, redisClusterFinalizer) {
        redis.Finalizers = append(redis.Finalizers, redisClusterFinalizer)
        r.Update(ctx, redis)
    }

    // 4. 管理 Service 和 StatefulSet
    r.constructService(redis)
    r.constructStatefulSet(redis)

    // 5. 调和 Sentinel
    if redis.Spec.EnableSentinel {
        r.reconcileSentinel(ctx, redis)
    }

    // 6. 配置主从复制
    r.reconcileClusterTopology(ctx, redis)

    // 7. 更新 Status
    redis.Status.ReadyReplicas = sts.Status.ReadyReplicas
    r.Status().Update(ctx, redis)

    return ctrl.Result{}, nil
}

const redisClusterFinalizer = "rediscluster.db.redis.io/finalizer"

func (r *RedisClusterReconciler) handleDeletion(ctx context.Context, redis *dbv1.RedisCluster) {
    // 1. 连接所有 Redis Pod
    podList := &corev1.PodList{}
    r.List(ctx, podList, client.InNamespace(redis.Namespace))

    // 2. 执行 BGSAVE
    for _, pod := range podList.Items {
        rdb := goRedis.NewClient(&goRedis.Options{
            Addr: podDNS + ":6379",
            Password: redis.Spec.Password,
        })
        rdb.BgSave(ctx)  // 后台保存，不阻塞
    }

    // 3. 移除 Finalizer，允许删除
    redis.Finalizers = removeString(redis.Finalizers, redisClusterFinalizer)
    r.Update(ctx, redis)
}

func (r *RedisClusterReconciler) reconcileSentinel(ctx context.Context, redis *dbv1.RedisCluster) {
    // 1. 生成 sentinel.conf
    masterDNS := fmt.Sprintf("%s-0.%s.%s.svc.cluster.local", redis.Name, redis.Name, redis.Namespace)
    sentinelConf := fmt.Sprintf(`
port 26379
monitor mymaster %s 6379 2
down-after-milliseconds mymaster 5000
failover-timeout mymaster 10000
auth-pass mymaster %s
`, masterDNS, redis.Spec.Password)

    // 2. 创建 ConfigMap
    cm := &corev1.ConfigMap{
        Data: map[string]string{"sentinel.conf": sentinelConf},
    }
    r.Create(ctx, cm)

    // 3. 创建 Sentinel StatefulSet
    sts := &appsv1.StatefulSet{
        Spec: appsv1.StatefulSetSpec{
            Template: corev1.PodTemplateSpec{
                Spec: corev1.PodSpec{
                    Containers: []corev1.Container{
                        {
                            Command: []string{"redis-sentinel", "/etc/sentinel/sentinel.conf"},
                        },
                    },
                },
            },
        },
    }
    r.Create(ctx, sts)
}

func (r *RedisClusterReconciler) reconcileClusterTopology(ctx context.Context, redis *dbv1.RedisCluster) {
    masterDNS := fmt.Sprintf("%s-0.%s.%s.svc.cluster.local", redis.Name, redis.Name, redis.Namespace)

    for i := 0; i < int(redis.Spec.Replicas); i++ {
        podDNS := fmt.Sprintf("%s-%d.%s.%s.svc.cluster.local", redis.Name, i, redis.Name, redis.Namespace)

        rdb := goRedis.NewClient(&goRedis.Options{
            Addr: podDNS + ":6379",
            Password: redis.Spec.Password,
        })

        if i == 0 {
            rdb.SlaveOf(ctx, "NO", "ONE")  // Master
        } else {
            rdb.SlaveOf(ctx, masterDNS, "6379")  // Slave
        }
    }
}

// +kubebuilder:rbac:groups=db.redis.io,resources=redisclusters,verbs=get;list;watch;create;update;patch;delete
// +kubebuilder:rbac:groups=apps,resources=statefulsets,verbs=get;list;watch;create;update;patch;delete
// +kubebuilder:rbac:groups=core,resources=services;configmaps;pods,verbs=get;list;watch;create;update;patch;delete