Files
attacker 77c234b060 feat(audit): F1+F2 告警静默规则标记完成 + 审计日志CSV导出实现
F1 告警静默规则 [done]:
- 后端 alert_silence.go: CRUD + Toggle (onetime/daily/weekly 三模式)
- 告警引擎 isSilenced 集成 (alert_engine.go)
- 前端 SilenceRuleTab + SilenceDialog
- 路由 /alerts/silences 已注册

F2 审计日志导出 [done]:
- 重写 ExportAuditLogs: 真正的 CSV 导出 (encoding/csv + UTF-8 BOM)
- 支持 module/action/username/startTime/endTime 筛选
- 导出限制 10000 条防溢出,自动记录审计日志
- JSON 格式向后兼容 (format=json)
- 前端 exportLogs 传递查询参数

同时包含累积的前期工作:
- 目录重构 internal/ -> controller/model/router (v0.55-v0.57)
- 后端分层架构 dto/repository/service/utils
- 审计模块全功能 (终端审计/操作审计/登录日志)
- asciicast v2 录制格式
- SFTP 文件浏览器
- StatStrip 紧凑统计条
- 在线会话自动刷新
- LiveMonitor WebSocket 诊断修复

验证: go build ✅ | npm run build ✅ | Docker 部署 ✅ | 10 回归端点 ✅ | CSV 导出 ✅ | 静默 CRUD ✅
2026-06-25 20:16:30 +08:00

332 lines
11 KiB
Go
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
package controller
import (
"encoding/json"
"fmt"
"io"
"math"
"net/http"
"net/url"
"strconv"
"strings"
"time"
"ezops/model"
"github.com/gin-gonic/gin"
)
// PrometheusProxyHandler Prometheus API 代理 — 转发 PromQL 查询到 Prometheus 服务器
type PrometheusProxyHandler struct{}
func NewPrometheusProxyHandler() *PrometheusProxyHandler {
return &PrometheusProxyHandler{}
}
// PromConnectReq 连接 Prometheus 请求
type PromConnectReq struct {
URL string `json:"url" binding:"required"`
}
// PromConnect 连接 Prometheus 并返回概览数据
// POST /api/v1/prometheus/connect
func (h *PrometheusProxyHandler) Connect(c *gin.Context) {
var req PromConnectReq
if err := c.ShouldBindJSON(&req); err != nil {
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "参数错误: " + err.Error()})
return
}
client := &http.Client{Timeout: 15 * time.Second}
// 测试连接:查询 up 指标
status, targetCount := h.testConnect(client, req.URL)
if !status {
c.JSON(http.StatusBadGateway, model.Response{Code: 502, Message: "无法连接到 Prometheus,请检查 URL"})
return
}
c.JSON(http.StatusOK, model.Response{
Code: 200,
Message: "success",
Data: gin.H{
"status": "connected",
"targets": targetCount,
},
})
}
// PromQuery 执行 PromQL 即时查询
// POST /api/v1/prometheus/query
func (h *PrometheusProxyHandler) Query(c *gin.Context) {
var req struct {
URL string `json:"url" binding:"required"`
Query string `json:"query" binding:"required"`
}
if err := c.ShouldBindJSON(&req); err != nil {
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "参数错误"})
return
}
client := &http.Client{Timeout: 15 * time.Second}
result, err := h.execPromQL(client, req.URL, req.Query)
if err != nil {
c.JSON(http.StatusBadGateway, model.Response{Code: 502, Message: "查询失败: " + err.Error()})
return
}
c.JSON(http.StatusOK, model.Response{Code: 200, Message: "success", Data: result})
}
// PromQueryRange 执行 PromQL 范围查询
// POST /api/v1/prometheus/query_range
func (h *PrometheusProxyHandler) QueryRange(c *gin.Context) {
var req struct {
URL string `json:"url" binding:"required"`
Query string `json:"query" binding:"required"`
Start string `json:"start"` // RFC3339
End string `json:"end"`
Step string `json:"step"` // e.g. "15s", "1m"
}
if err := c.ShouldBindJSON(&req); err != nil {
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "参数错误"})
return
}
if req.Step == "" {
req.Step = "1m"
}
client := &http.Client{Timeout: 30 * time.Second}
u := fmt.Sprintf("%s/api/v1/query_range?query=%s", strings.TrimRight(req.URL, "/"),
url.QueryEscape(req.Query))
if req.Start != "" {
u += "&start=" + url.QueryEscape(req.Start)
}
if req.End != "" {
u += "&end=" + url.QueryEscape(req.End)
}
u += "&step=" + url.QueryEscape(req.Step)
resp, err := client.Get(u)
if err != nil {
c.JSON(http.StatusBadGateway, model.Response{Code: 502, Message: "查询失败: " + err.Error()})
return
}
defer resp.Body.Close()
body, _ := io.ReadAll(resp.Body)
var promResult map[string]interface{}
json.Unmarshal(body, &promResult)
c.JSON(http.StatusOK, model.Response{Code: 200, Message: "success", Data: promResult})
}
// PromDashboard 获取预定义仪表盘数据(K8s / Node / Pod / JVM)
// POST /api/v1/prometheus/dashboard
func (h *PrometheusProxyHandler) Dashboard(c *gin.Context) {
var req struct {
URL string `json:"url" binding:"required"`
Type string `json:"type" binding:"required"` // k8s, node, pod, jvm
}
if err := c.ShouldBindJSON(&req); err != nil {
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "参数错误"})
return
}
client := &http.Client{Timeout: 30 * time.Second}
var result map[string]interface{}
switch req.Type {
case "node":
result = h.dashboardNode(client, req.URL)
case "pod":
result = h.dashboardPod(client, req.URL)
case "jvm":
result = h.dashboardJVM(client, req.URL)
default:
result = h.dashboardK8s(client, req.URL)
}
c.JSON(http.StatusOK, model.Response{Code: 200, Message: "success", Data: result})
}
// ============================================
// 内部方法
// ============================================
func (h *PrometheusProxyHandler) testConnect(client *http.Client, baseURL string) (bool, int) {
result, err := h.execPromQL(client, baseURL, "count(up)")
if err != nil {
return false, 0
}
targets := 0
if data, ok := result["data"].(map[string]interface{}); ok {
if res, ok := data["result"].([]interface{}); ok {
if len(res) > 0 {
if val, ok := res[0].(map[string]interface{})["value"].([]interface{}); ok && len(val) > 1 {
targets, _ = strconv.Atoi(fmt.Sprintf("%v", val[1]))
}
}
}
}
return true, targets
}
func (h *PrometheusProxyHandler) execPromQL(client *http.Client, baseURL, query string) (map[string]interface{}, error) {
u := fmt.Sprintf("%s/api/v1/query?query=%s", strings.TrimRight(baseURL, "/"), url.QueryEscape(query))
resp, err := client.Get(u)
if err != nil {
return nil, err
}
defer resp.Body.Close()
body, _ := io.ReadAll(resp.Body)
var result map[string]interface{}
if err := json.Unmarshal(body, &result); err != nil {
return nil, err
}
if status, ok := result["status"].(string); !ok || status != "success" {
return nil, fmt.Errorf("prometheus error: %v", result)
}
return result, nil
}
func parseVector(result map[string]interface{}) []map[string]interface{} {
var out []map[string]interface{}
data, _ := result["data"].(map[string]interface{})
res, _ := data["result"].([]interface{})
for _, r := range res {
rm, _ := r.(map[string]interface{})
metric, _ := rm["metric"].(map[string]interface{})
value, _ := rm["value"].([]interface{})
entry := map[string]interface{}{}
for k, v := range metric {
entry[k] = v
}
if len(value) > 1 {
if v, err := strconv.ParseFloat(fmt.Sprintf("%v", value[1]), 64); err == nil {
entry["value"] = math.Round(v*100) / 100
}
}
out = append(out, entry)
}
return out
}
// ============================================
// 预定义仪表盘查询
// ============================================
func (h *PrometheusProxyHandler) dashboardNode(client *http.Client, baseURL string) map[string]interface{} {
results := gin.H{}
// 节点概览表
results["nodes"] = parseVector(h.mustQuery(client, baseURL, `node_uname_info - 0`))
// CPU
results["cpuUsage"] = parseVector(h.mustQuery(client, baseURL,
`(1 - avg(irate(node_cpu_seconds_total{mode="idle"}[5m])) by (instance)) * 100`))
// 内存
results["memUsage"] = parseVector(h.mustQuery(client, baseURL,
`(1 - (node_memory_MemAvailable_bytes / node_memory_MemTotal_bytes)) * 100`))
// 磁盘
results["diskUsage"] = parseVector(h.mustQuery(client, baseURL,
`(1 - sum(node_filesystem_avail_bytes{fstype=~"xfs|ext.*"}) by (instance) / sum(node_filesystem_size_bytes{fstype=~"xfs|ext.*"}) by (instance)) * 100`))
// Load
results["load5"] = parseVector(h.mustQuery(client, baseURL, `node_load5`))
// 网络
results["netRx"] = parseVector(h.mustQuery(client, baseURL,
`max(irate(node_network_receive_bytes_total[5m])) by (instance)`))
results["netTx"] = parseVector(h.mustQuery(client, baseURL,
`max(irate(node_network_transmit_bytes_total[5m])) by (instance)`))
results["up"] = parseVector(h.mustQuery(client, baseURL, `up`))
return results
}
func (h *PrometheusProxyHandler) dashboardPod(client *http.Client, baseURL string) map[string]interface{} {
results := gin.H{}
results["cpuTop"] = parseVector(h.mustQuery(client, baseURL,
`topk(10, sum(rate(container_cpu_usage_seconds_total{container!="",pod!=""}[5m])) by (namespace, pod))`))
results["memTop"] = parseVector(h.mustQuery(client, baseURL,
`topk(10, sum(container_memory_working_set_bytes{container!="",pod!=""}) by (namespace, pod))`))
results["netRxTop"] = parseVector(h.mustQuery(client, baseURL,
`topk(10, sum(rate(container_network_receive_bytes_total{pod!=""}[5m])) by (namespace, pod))`))
results["netTxTop"] = parseVector(h.mustQuery(client, baseURL,
`topk(10, sum(rate(container_network_transmit_bytes_total{pod!=""}[5m])) by (namespace, pod))`))
results["restartTop"] = parseVector(h.mustQuery(client, baseURL,
`topk(10, sum(kube_pod_container_status_restarts_total) by (namespace, pod))`))
results["running"] = parseVector(h.mustQuery(client, baseURL,
`sum(kube_pod_status_phase{phase="Running"})`))
results["pending"] = parseVector(h.mustQuery(client, baseURL,
`sum(kube_pod_status_phase{phase="Pending"}) or vector(0)`))
return results
}
func (h *PrometheusProxyHandler) dashboardJVM(client *http.Client, baseURL string) map[string]interface{} {
results := gin.H{}
results["uptime"] = parseVector(h.mustQuery(client, baseURL, `process_uptime_seconds`))
results["heapUsed"] = parseVector(h.mustQuery(client, baseURL,
`sum(jvm_memory_used_bytes{area="heap"}) / sum(jvm_memory_max_bytes{area="heap"}) * 100`))
results["nonHeapUsed"] = parseVector(h.mustQuery(client, baseURL,
`sum(jvm_memory_used_bytes{area="nonheap"}) / sum(jvm_memory_max_bytes{area="nonheap"}) * 100`))
results["threadCount"] = parseVector(h.mustQuery(client, baseURL,
`jvm_threads_live_threads`))
results["gcPause"] = parseVector(h.mustQuery(client, baseURL,
`rate(jvm_gc_pause_seconds_sum[5m])`))
results["cpuLoad"] = parseVector(h.mustQuery(client, baseURL,
`process_cpu_usage`))
return results
}
func (h *PrometheusProxyHandler) dashboardK8s(client *http.Client, baseURL string) map[string]interface{} {
results := gin.H{}
// 节点数
results["nodeCount"] = parseVector(h.mustQuery(client, baseURL, `count(kube_node_info)`))
// Pod 总数
results["podCount"] = parseVector(h.mustQuery(client, baseURL,
`count(kube_pod_info{created_by_kind!~"<none>|Job"})`))
// 节点 CPU 利用率
results["nodeCPU"] = parseVector(h.mustQuery(client, baseURL,
`sum(irate(container_cpu_usage_seconds_total{container!=""}[2m])) by (node) / sum(kube_pod_container_resource_requests{resource="cpu"}) by (node) * 100`))
// 节点内存利用率
results["nodeMem"] = parseVector(h.mustQuery(client, baseURL,
`sum(container_memory_working_set_bytes{container!=""}) by (node) / sum(kube_pod_container_resource_requests{resource="memory"}) by (node) * 100`))
// Namespace 资源统计
results["nsPods"] = parseVector(h.mustQuery(client, baseURL,
`count(kube_pod_info) by (namespace)`))
// 部署统计
results["deployCount"] = parseVector(h.mustQuery(client, baseURL,
`count(kube_deployment_metadata_generation)`))
return results
}
func (h *PrometheusProxyHandler) mustQuery(client *http.Client, baseURL, query string) map[string]interface{} {
r, err := h.execPromQL(client, baseURL, query)
if err != nil {
return map[string]interface{}{"data": map[string]interface{}{"result": []interface{}{}}}
}
return r
}