From 749ea2e4c6868873120c342ee7555fc83c0960aa Mon Sep 17 00:00:00 2001 From: yumaojun03 <719118794@qq.com> Date: Sun, 9 Mar 2025 12:06:14 +0800 Subject: [PATCH] =?UTF-8?q?=E8=A1=A5=E5=85=85secret=E6=A8=A1=E5=9D=97?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- devcloud-mini/cmdb/apps/secret/impl/impl.go | 29 +++++ devcloud-mini/cmdb/apps/secret/impl/secret.go | 31 ++++++ devcloud-mini/cmdb/apps/secret/interface.go | 78 ++++++++++++++ devcloud-mini/cmdb/apps/secret/model.go | 101 ++++++++++++++++++ devcloud-mini/cmdb/apps/secret/model_test.go | 12 +++ devcloud-mini/cmdb/docs/design.drawio | 41 +++++-- 6 files changed, 282 insertions(+), 10 deletions(-) create mode 100644 devcloud-mini/cmdb/apps/secret/impl/impl.go create mode 100644 devcloud-mini/cmdb/apps/secret/impl/secret.go create mode 100644 devcloud-mini/cmdb/apps/secret/interface.go create mode 100644 devcloud-mini/cmdb/apps/secret/model.go create mode 100644 devcloud-mini/cmdb/apps/secret/model_test.go diff --git a/devcloud-mini/cmdb/apps/secret/impl/impl.go b/devcloud-mini/cmdb/apps/secret/impl/impl.go new file mode 100644 index 0000000..fbc1b91 --- /dev/null +++ b/devcloud-mini/cmdb/apps/secret/impl/impl.go @@ -0,0 +1,29 @@ +package impl + +import ( + "github.com/infraboard/mcube/v2/ioc" + ioc_mongo "github.com/infraboard/mcube/v2/ioc/config/mongo" + "gitlab.com/go-course-project/go17/devcloud-mini/cmdb/apps/secret" + "go.mongodb.org/mongo-driver/mongo" +) + +func init() { + ioc.Controller().Registry(&SecretServiceImpl{}) +} + +var _ secret.Service = (*SecretServiceImpl)(nil) + +type SecretServiceImpl struct { + ioc.ObjectImpl + col *mongo.Collection +} + +func (s *SecretServiceImpl) Name() string { + return secret.AppName +} + +func (s *SecretServiceImpl) Init() error { + // 定义使用的集合 + s.col = ioc_mongo.DB().Collection("secrets") + return nil +} diff --git a/devcloud-mini/cmdb/apps/secret/impl/secret.go b/devcloud-mini/cmdb/apps/secret/impl/secret.go new file mode 100644 index 0000000..471d824 --- /dev/null +++ b/devcloud-mini/cmdb/apps/secret/impl/secret.go @@ -0,0 +1,31 @@ +package impl + +import ( + "context" + "fmt" + + "github.com/infraboard/mcube/v2/types" + "gitlab.com/go-course-project/go17/devcloud-mini/cmdb/apps/secret" +) + +// CreateSecret implements secret.Service. +func (s *SecretServiceImpl) CreateSecret(context.Context, *secret.CreateSecretRequest) (*secret.Secret, error) { + panic("unimplemented") +} + +// DescribeSecret implements secret.Service. +func (s *SecretServiceImpl) DescribeSecret(context.Context, *secret.DescribeSecretRequeset) (*secret.Secret, error) { + panic("unimplemented") +} + +// QuerySecret implements secret.Service. +func (s *SecretServiceImpl) QuerySecret(context.Context, *secret.QuerySecretRequest) (*types.Set[*secret.Secret], error) { + set := types.New[*secret.Secret]() + fmt.Println(set) + panic("unimplemented") +} + +// SyncResource implements secret.Service. +func (s *SecretServiceImpl) SyncResource(context.Context, *secret.SyncResourceRequest, secret.SyncResourceHandleFunc) error { + panic("unimplemented") +} diff --git a/devcloud-mini/cmdb/apps/secret/interface.go b/devcloud-mini/cmdb/apps/secret/interface.go new file mode 100644 index 0000000..8238a9b --- /dev/null +++ b/devcloud-mini/cmdb/apps/secret/interface.go @@ -0,0 +1,78 @@ +package secret + +import ( + "context" + + "github.com/infraboard/mcube/v2/http/request" + "github.com/infraboard/mcube/v2/ioc" + "github.com/infraboard/mcube/v2/tools/pretty" + "github.com/infraboard/mcube/v2/types" +) + +const ( + AppName = "secret" + SECRET_KEY = "23gs6gxHrz1kNEvshRmunkXbwIiaEcYfh+EMu+e9ewA=" +) + +func GetService() Service { + return ioc.Controller().Get(AppName).(Service) +} + +type Service interface { + // 用于Secret的管理(后台管理员配置) + // 创建secret + CreateSecret(context.Context, *CreateSecretRequest) (*Secret, error) + // 查询secret + QuerySecret(context.Context, *QuerySecretRequest) (*types.Set[*Secret], error) + // 查询详情, 已解密，API层需要脱敏 + DescribeSecret(context.Context, *DescribeSecretRequeset) (*Secret, error) + + // 怎么API怎么设计 + // 同步阿里云所有资源, 10分钟，30分钟 ... + // 这个接口调用持续30分钟... + // Req ---> <---- Resp: 能快速响应的同步调用 + + // Stream API + SyncResource(context.Context, *SyncResourceRequest, SyncResourceHandleFunc) error +} + +type SyncResourceHandleFunc func(ResourceResponse) + +type ResourceResponse struct { + Success bool + InstanceId string `json:"instance_id"` + Message string `json:"message"` +} + +func (t ResourceResponse) String() string { + return pretty.ToJSON(t) +} + +func NewQuerySecretRequest() *QuerySecretRequest { + return &QuerySecretRequest{ + PageRequest: request.NewDefaultPageRequest(), + } +} + +type QuerySecretRequest struct { + // 分页请求 + *request.PageRequest +} + +func NewDescribeSecretRequeset(id string) *DescribeSecretRequeset { + return &DescribeSecretRequeset{ + Id: id, + } +} + +type DescribeSecretRequeset struct { + Id string `json:"id"` +} + +func NewSyncResourceRequest() *SyncResourceRequest { + return &SyncResourceRequest{} +} + +type SyncResourceRequest struct { + Id string `json:"id"` +} diff --git a/devcloud-mini/cmdb/apps/secret/model.go b/devcloud-mini/cmdb/apps/secret/model.go new file mode 100644 index 0000000..e47a20a --- /dev/null +++ b/devcloud-mini/cmdb/apps/secret/model.go @@ -0,0 +1,101 @@ +package secret + +import ( + "encoding/base64" + "fmt" + "time" + + "github.com/google/uuid" + "github.com/infraboard/mcube/v2/crypto/cbc" + "github.com/infraboard/mcube/v2/tools/pretty" + "github.com/infraboard/mcube/v2/types" + "gitlab.com/go-course-project/go17/devcloud-mini/cmdb/apps/resource" +) + +func NewSecretSet() *types.Set[*Secret] { + return types.New[*Secret]() +} + +func NewSecret(in *CreateSecretRequest) *Secret { + // hash版本的UUID + // Vendor Address ApiKey + uid := uuid.NewMD5(uuid.Nil, fmt.Appendf(nil, "%d.%s.%s", in.Vendor, in.Address, in.ApiKey)).String() + return &Secret{ + Id: uid, + UpdateAt: time.Now().Unix(), + CreateSecretRequest: in, + } +} + +type Secret struct { + Id string `json:"id" bson:"_id"` + UpdateAt int64 `json:"update_at" bson:"update_at"` + *CreateSecretRequest `bson:"inline"` +} + +func (s *Secret) String() string { + return pretty.ToJSON(s) +} + +func NewCreateSecretRequest() *CreateSecretRequest { + return &CreateSecretRequest{ + Regions: []string{}, + } +} + +type CreateSecretRequest struct { + // 名称 + Name string `json:"name"` + // + Vendor resource.VENDOR `json:"vendor"` + // Vmware + Address string `json:"address"` + // + ApiKey string `json:"api_key"` + // + ApiSecret string `json:"api_secret"` + // + isEncrypted bool + + // 资源所在区域 + Regions []string `json:"regions"` +} + +func (r *CreateSecretRequest) SetIsEncrypted(v bool) { + r.isEncrypted = v +} + +func (r *CreateSecretRequest) EncryptedApiSecret() error { + if r.isEncrypted { + return nil + } + // Hash, 对称，非对称 + // 对称加密 AES(cbc) + // @v1,xxxx@xxxxx + + cipherText, err := cbc.MustNewAESCBCCihper([]byte(SECRET_KEY)).Encrypt([]byte(r.ApiSecret)) + if err != nil { + return err + } + r.ApiSecret = base64.StdEncoding.EncodeToString(cipherText) + r.SetIsEncrypted(true) + return nil + +} + +func (r *CreateSecretRequest) DecryptedApiSecret() error { + if r.isEncrypted { + cipherdText, err := base64.StdEncoding.DecodeString(r.ApiSecret) + if err != nil { + return err + } + + plainText, err := cbc.MustNewAESCBCCihper([]byte(SECRET_KEY)).Decrypt([]byte(cipherdText)) + if err != nil { + return err + } + r.ApiSecret = string(plainText) + r.SetIsEncrypted(false) + } + return nil +} diff --git a/devcloud-mini/cmdb/apps/secret/model_test.go b/devcloud-mini/cmdb/apps/secret/model_test.go new file mode 100644 index 0000000..5220119 --- /dev/null +++ b/devcloud-mini/cmdb/apps/secret/model_test.go @@ -0,0 +1,12 @@ +package secret + +import ( + "encoding/base64" + "testing" + + "github.com/infraboard/mcube/v2/crypto/cbc" +) + +func TestMustGenRandomKey(t *testing.T) { + t.Logf("%s", base64.StdEncoding.EncodeToString(cbc.MustGenRandomKey(cbc.AES_KEY_LEN_32))) +} diff --git a/devcloud-mini/cmdb/docs/design.drawio b/devcloud-mini/cmdb/docs/design.drawio index 8468845..f28718d 100644 --- a/devcloud-mini/cmdb/docs/design.drawio +++ b/devcloud-mini/cmdb/docs/design.drawio @@ -1,36 +1,57 @@ - + - + - + - + - + - + - + - + - + - + + + + + + + + + + + + + + + + + + + + + +