mirror of
https://github.com/TeaOSLab/EdgeAdmin.git
synced 2025-11-04 13:10:26 +08:00
339 lines
8.7 KiB
Go
339 lines
8.7 KiB
Go
package node
|
||
|
||
import (
|
||
"encoding/json"
|
||
"github.com/TeaOSLab/EdgeAdmin/internal/oplogs"
|
||
"github.com/TeaOSLab/EdgeAdmin/internal/web/actions/actionutils"
|
||
"github.com/TeaOSLab/EdgeCommon/pkg/configutils"
|
||
"github.com/TeaOSLab/EdgeCommon/pkg/rpc/pb"
|
||
"github.com/TeaOSLab/EdgeCommon/pkg/serverconfigs"
|
||
"github.com/TeaOSLab/EdgeCommon/pkg/serverconfigs/sslconfigs"
|
||
"github.com/iwind/TeaGo/actions"
|
||
"github.com/iwind/TeaGo/lists"
|
||
"github.com/iwind/TeaGo/maps"
|
||
)
|
||
|
||
type UpdateAction struct {
|
||
actionutils.ParentAction
|
||
}
|
||
|
||
func (this *UpdateAction) Init() {
|
||
this.Nav("", "", "update")
|
||
}
|
||
|
||
func (this *UpdateAction) RunGet(params struct {
|
||
NodeId int64
|
||
}) {
|
||
nodeResp, err := this.RPC().APINodeRPC().FindEnabledAPINode(this.AdminContext(), &pb.FindEnabledAPINodeRequest{
|
||
ApiNodeId: params.NodeId,
|
||
})
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
var node = nodeResp.ApiNode
|
||
if node == nil {
|
||
this.WriteString("要操作的节点不存在")
|
||
return
|
||
}
|
||
|
||
var httpConfig = &serverconfigs.HTTPProtocolConfig{}
|
||
if len(node.HttpJSON) > 0 {
|
||
err = json.Unmarshal(node.HttpJSON, httpConfig)
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
}
|
||
var httpsConfig = &serverconfigs.HTTPSProtocolConfig{}
|
||
if len(node.HttpsJSON) > 0 {
|
||
err = json.Unmarshal(node.HttpsJSON, httpsConfig)
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
}
|
||
|
||
// 监听地址
|
||
var listens = []*serverconfigs.NetworkAddressConfig{}
|
||
listens = append(listens, httpConfig.Listen...)
|
||
listens = append(listens, httpsConfig.Listen...)
|
||
|
||
var restHTTPConfig = &serverconfigs.HTTPProtocolConfig{}
|
||
if len(node.RestHTTPJSON) > 0 {
|
||
err = json.Unmarshal(node.RestHTTPJSON, restHTTPConfig)
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
}
|
||
var restHTTPSConfig = &serverconfigs.HTTPSProtocolConfig{}
|
||
if len(node.RestHTTPSJSON) > 0 {
|
||
err = json.Unmarshal(node.RestHTTPSJSON, restHTTPSConfig)
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
}
|
||
|
||
// 监听地址
|
||
var restListens = []*serverconfigs.NetworkAddressConfig{}
|
||
restListens = append(restListens, restHTTPConfig.Listen...)
|
||
restListens = append(restListens, restHTTPSConfig.Listen...)
|
||
|
||
// 证书信息
|
||
var certs = []*sslconfigs.SSLCertConfig{}
|
||
var sslPolicyId = int64(0)
|
||
if httpsConfig.SSLPolicyRef != nil && httpsConfig.SSLPolicyRef.SSLPolicyId > 0 {
|
||
sslPolicyConfigResp, err := this.RPC().SSLPolicyRPC().FindEnabledSSLPolicyConfig(this.AdminContext(), &pb.FindEnabledSSLPolicyConfigRequest{SslPolicyId: httpsConfig.SSLPolicyRef.SSLPolicyId})
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
var sslPolicyConfigJSON = sslPolicyConfigResp.SslPolicyJSON
|
||
if len(sslPolicyConfigJSON) > 0 {
|
||
sslPolicyId = httpsConfig.SSLPolicyRef.SSLPolicyId
|
||
|
||
sslPolicy := &sslconfigs.SSLPolicy{}
|
||
err = json.Unmarshal(sslPolicyConfigJSON, sslPolicy)
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
certs = sslPolicy.Certs
|
||
}
|
||
}
|
||
|
||
var accessAddrs = []*serverconfigs.NetworkAddressConfig{}
|
||
if len(node.AccessAddrsJSON) > 0 {
|
||
err = json.Unmarshal(node.AccessAddrsJSON, &accessAddrs)
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
}
|
||
|
||
this.Data["node"] = maps.Map{
|
||
"id": node.Id,
|
||
"name": node.Name,
|
||
"description": node.Description,
|
||
"isOn": node.IsOn,
|
||
"listens": listens,
|
||
"restIsOn": node.RestIsOn,
|
||
"restListens": restListens,
|
||
"certs": certs,
|
||
"sslPolicyId": sslPolicyId,
|
||
"accessAddrs": accessAddrs,
|
||
"isPrimary": node.IsPrimary,
|
||
}
|
||
|
||
this.Show()
|
||
}
|
||
|
||
// RunPost 保存基础设置
|
||
func (this *UpdateAction) RunPost(params struct {
|
||
NodeId int64
|
||
Name string
|
||
SslPolicyId int64
|
||
ListensJSON []byte
|
||
RestIsOn bool
|
||
RestListensJSON []byte
|
||
CertIdsJSON []byte
|
||
AccessAddrsJSON []byte
|
||
Description string
|
||
IsOn bool
|
||
IsPrimary bool
|
||
|
||
Must *actions.Must
|
||
}) {
|
||
params.Must.
|
||
Field("name", params.Name).
|
||
Require("请输入API节点名称")
|
||
|
||
var httpConfig = &serverconfigs.HTTPProtocolConfig{}
|
||
var httpsConfig = &serverconfigs.HTTPSProtocolConfig{}
|
||
|
||
// 监听地址
|
||
var listens = []*serverconfigs.NetworkAddressConfig{}
|
||
err := json.Unmarshal(params.ListensJSON, &listens)
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
if len(listens) == 0 {
|
||
this.Fail("请添加至少一个进程监听地址")
|
||
}
|
||
for _, addr := range listens {
|
||
if addr.Protocol.IsHTTPFamily() {
|
||
httpConfig.IsOn = true
|
||
httpConfig.Listen = append(httpConfig.Listen, addr)
|
||
} else if addr.Protocol.IsHTTPSFamily() {
|
||
httpsConfig.IsOn = true
|
||
httpsConfig.Listen = append(httpsConfig.Listen, addr)
|
||
}
|
||
}
|
||
|
||
// Rest监听地址
|
||
var restHTTPConfig = &serverconfigs.HTTPProtocolConfig{}
|
||
var restHTTPSConfig = &serverconfigs.HTTPSProtocolConfig{}
|
||
if params.RestIsOn {
|
||
var restListens = []*serverconfigs.NetworkAddressConfig{}
|
||
err = json.Unmarshal(params.RestListensJSON, &restListens)
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
if len(restListens) == 0 {
|
||
this.Fail("请至少添加一个HTTP API监听端口")
|
||
return
|
||
}
|
||
for _, addr := range restListens {
|
||
if addr.Protocol.IsHTTPFamily() {
|
||
restHTTPConfig.IsOn = true
|
||
restHTTPConfig.Listen = append(restHTTPConfig.Listen, addr)
|
||
} else if addr.Protocol.IsHTTPSFamily() {
|
||
restHTTPSConfig.IsOn = true
|
||
restHTTPSConfig.Listen = append(restHTTPSConfig.Listen, addr)
|
||
}
|
||
}
|
||
|
||
// 是否有端口冲突
|
||
var rpcAddresses = []string{}
|
||
for _, listen := range listens {
|
||
err := listen.Init()
|
||
if err != nil {
|
||
this.Fail("校验配置失败：" + configutils.QuoteIP(listen.Host) + ":" + listen.PortRange + ": " + err.Error())
|
||
return
|
||
}
|
||
rpcAddresses = append(rpcAddresses, listen.Addresses()...)
|
||
}
|
||
|
||
for _, listen := range restListens {
|
||
err := listen.Init()
|
||
if err != nil {
|
||
this.Fail("校验配置失败：" + configutils.QuoteIP(listen.Host) + ":" + listen.PortRange + ": " + err.Error())
|
||
return
|
||
}
|
||
for _, address := range listen.Addresses() {
|
||
if lists.ContainsString(rpcAddresses, address) {
|
||
this.Fail("HTTP API地址 '" + address + "' 和 GRPC地址冲突，请修改后提交")
|
||
return
|
||
}
|
||
}
|
||
}
|
||
}
|
||
|
||
// 证书
|
||
var certIds = []int64{}
|
||
if len(params.CertIdsJSON) > 0 {
|
||
err = json.Unmarshal(params.CertIdsJSON, &certIds)
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
}
|
||
if ((httpsConfig.IsOn && len(httpsConfig.Listen) > 0) || (restHTTPSConfig.IsOn && len(httpsConfig.Listen) > 0)) && len(certIds) == 0 {
|
||
this.Fail("请添加至少一个证书")
|
||
}
|
||
|
||
var certRefs = []*sslconfigs.SSLCertRef{}
|
||
for _, certId := range certIds {
|
||
certRefs = append(certRefs, &sslconfigs.SSLCertRef{
|
||
IsOn: true,
|
||
CertId: certId,
|
||
})
|
||
}
|
||
certRefsJSON, err := json.Marshal(certRefs)
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
|
||
// 创建策略
|
||
var sslPolicyId = params.SslPolicyId
|
||
if sslPolicyId == 0 {
|
||
if len(certIds) > 0 {
|
||
sslPolicyCreateResp, err := this.RPC().SSLPolicyRPC().CreateSSLPolicy(this.AdminContext(), &pb.CreateSSLPolicyRequest{
|
||
SslCertsJSON: certRefsJSON,
|
||
})
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
sslPolicyId = sslPolicyCreateResp.SslPolicyId
|
||
}
|
||
} else {
|
||
_, err = this.RPC().SSLPolicyRPC().UpdateSSLPolicy(this.AdminContext(), &pb.UpdateSSLPolicyRequest{
|
||
SslPolicyId: sslPolicyId,
|
||
SslCertsJSON: certRefsJSON,
|
||
})
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
}
|
||
httpsConfig.SSLPolicyRef = &sslconfigs.SSLPolicyRef{
|
||
IsOn: true,
|
||
SSLPolicyId: sslPolicyId,
|
||
}
|
||
restHTTPSConfig.SSLPolicyRef = &sslconfigs.SSLPolicyRef{
|
||
IsOn: true,
|
||
SSLPolicyId: sslPolicyId,
|
||
}
|
||
|
||
// 访问地址
|
||
var accessAddrs = []*serverconfigs.NetworkAddressConfig{}
|
||
err = json.Unmarshal(params.AccessAddrsJSON, &accessAddrs)
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
if len(accessAddrs) == 0 {
|
||
this.Fail("请添加至少一个外部访问地址")
|
||
}
|
||
|
||
httpJSON, err := json.Marshal(httpConfig)
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
httpsJSON, err := json.Marshal(httpsConfig)
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
restHTTPJSON, err := json.Marshal(restHTTPConfig)
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
restHTTPSJSON, err := json.Marshal(restHTTPSConfig)
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
|
||
_, err = this.RPC().APINodeRPC().UpdateAPINode(this.AdminContext(), &pb.UpdateAPINodeRequest{
|
||
ApiNodeId: params.NodeId,
|
||
Name: params.Name,
|
||
Description: params.Description,
|
||
HttpJSON: httpJSON,
|
||
HttpsJSON: httpsJSON,
|
||
RestIsOn: params.RestIsOn,
|
||
RestHTTPJSON: restHTTPJSON,
|
||
RestHTTPSJSON: restHTTPSJSON,
|
||
AccessAddrsJSON: params.AccessAddrsJSON,
|
||
IsOn: params.IsOn,
|
||
IsPrimary: params.IsPrimary,
|
||
})
|
||
if err != nil {
|
||
this.ErrorPage(err)
|
||
return
|
||
}
|
||
|
||
// 创建日志
|
||
defer this.CreateLog(oplogs.LevelInfo, "修改API节点 %d", params.NodeId)
|
||
|
||
this.Success()
|
||
}
|