F1 告警静默规则 [done]: - 后端 alert_silence.go: CRUD + Toggle (onetime/daily/weekly 三模式) - 告警引擎 isSilenced 集成 (alert_engine.go) - 前端 SilenceRuleTab + SilenceDialog - 路由 /alerts/silences 已注册 F2 审计日志导出 [done]: - 重写 ExportAuditLogs: 真正的 CSV 导出 (encoding/csv + UTF-8 BOM) - 支持 module/action/username/startTime/endTime 筛选 - 导出限制 10000 条防溢出,自动记录审计日志 - JSON 格式向后兼容 (format=json) - 前端 exportLogs 传递查询参数 同时包含累积的前期工作: - 目录重构 internal/ -> controller/model/router (v0.55-v0.57) - 后端分层架构 dto/repository/service/utils - 审计模块全功能 (终端审计/操作审计/登录日志) - asciicast v2 录制格式 - SFTP 文件浏览器 - StatStrip 紧凑统计条 - 在线会话自动刷新 - LiveMonitor WebSocket 诊断修复 验证: go build ✅ | npm run build ✅ | Docker 部署 ✅ | 10 回归端点 ✅ | CSV 导出 ✅ | 静默 CRUD ✅
278 lines
7.1 KiB
Go
278 lines
7.1 KiB
Go
package controller
|
||
|
||
import (
|
||
"net/http"
|
||
"strconv"
|
||
"time"
|
||
|
||
"ezops/cloud"
|
||
"ezops/model"
|
||
|
||
"github.com/gin-gonic/gin"
|
||
"gorm.io/gorm"
|
||
)
|
||
|
||
// CloudSyncHandler 云平台同步处理器
|
||
type CloudSyncHandler struct {
|
||
db *gorm.DB
|
||
}
|
||
|
||
func NewCloudSyncHandler(db *gorm.DB) *CloudSyncHandler {
|
||
return &CloudSyncHandler{db: db}
|
||
}
|
||
|
||
// SyncRegions 同步云账号的区域列表到本地 regions 表
|
||
// POST /cloud-accounts/:id/sync-regions
|
||
func (h *CloudSyncHandler) SyncRegions(c *gin.Context) {
|
||
id, _ := strconv.Atoi(c.Param("id"))
|
||
|
||
var account model.CloudAccount
|
||
if err := h.db.First(&account, id).Error; err != nil {
|
||
c.JSON(http.StatusNotFound, model.Response{Code: 404, Message: "云账号不存在"})
|
||
return
|
||
}
|
||
if account.Status != "active" {
|
||
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "云账号未激活,无法同步"})
|
||
return
|
||
}
|
||
|
||
provider := cloud.NewProvider(account.Provider, account.AccessKey, account.SecretKey)
|
||
if provider == nil {
|
||
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "暂不支持的云平台: " + account.Provider})
|
||
return
|
||
}
|
||
|
||
cloudRegions, err := provider.ListRegions()
|
||
if err != nil {
|
||
c.JSON(http.StatusInternalServerError, model.Response{Code: 500, Message: "同步区域失败: " + err.Error()})
|
||
return
|
||
}
|
||
|
||
// Upsert: 不存在则创建,存在则更新
|
||
synced := 0
|
||
for _, cr := range cloudRegions {
|
||
var region model.Region
|
||
result := h.db.Where("code = ? AND provider = ?", cr.RegionID, account.Provider).First(®ion)
|
||
if result.Error == gorm.ErrRecordNotFound {
|
||
// 新区域 → 创建
|
||
h.db.Create(&model.Region{
|
||
Name: cr.LocalName,
|
||
Code: cr.RegionID,
|
||
Provider: account.Provider,
|
||
Endpoint: cr.Endpoint,
|
||
Status: "active",
|
||
})
|
||
synced++
|
||
} else if result.Error == nil {
|
||
// 已存在 → 更新 endpoint 和名称
|
||
region.Name = cr.LocalName
|
||
region.Endpoint = cr.Endpoint
|
||
h.db.Save(®ion)
|
||
}
|
||
}
|
||
|
||
// 更新账号的 region_count 和 last_sync_at
|
||
h.db.Model(&account).Updates(map[string]interface{}{
|
||
"region_count": len(cloudRegions),
|
||
"last_sync_at": time.Now(),
|
||
})
|
||
|
||
c.JSON(http.StatusOK, model.Response{
|
||
Code: 200,
|
||
Message: "同步成功",
|
||
Data: gin.H{
|
||
"synced": synced,
|
||
"total": len(cloudRegions),
|
||
},
|
||
})
|
||
}
|
||
|
||
// GetAccountRegions 获取指定云账号的区域列表(按 provider 过滤)
|
||
// GET /cloud-accounts/:id/regions
|
||
func (h *CloudSyncHandler) GetAccountRegions(c *gin.Context) {
|
||
id, _ := strconv.Atoi(c.Param("id"))
|
||
|
||
var account model.CloudAccount
|
||
if err := h.db.First(&account, id).Error; err != nil {
|
||
c.JSON(http.StatusNotFound, model.Response{Code: 404, Message: "云账号不存在"})
|
||
return
|
||
}
|
||
|
||
var regions []model.Region
|
||
h.db.Where("provider = ?", account.Provider).Order("name ASC").Find(®ions)
|
||
|
||
c.JSON(http.StatusOK, model.Response{
|
||
Code: 200,
|
||
Message: "success",
|
||
Data: model.ListResponse{
|
||
List: regions,
|
||
Total: int64(len(regions)),
|
||
},
|
||
})
|
||
}
|
||
|
||
// discoverRequest 发现主机请求
|
||
type discoverRequest struct {
|
||
Regions []string `json:"regions"`
|
||
}
|
||
|
||
// DiscoverInstances 发现指定区域的云主机实例
|
||
// POST /cloud-accounts/:id/discover-instances
|
||
func (h *CloudSyncHandler) DiscoverInstances(c *gin.Context) {
|
||
id, _ := strconv.Atoi(c.Param("id"))
|
||
|
||
var account model.CloudAccount
|
||
if err := h.db.First(&account, id).Error; err != nil {
|
||
c.JSON(http.StatusNotFound, model.Response{Code: 404, Message: "云账号不存在"})
|
||
return
|
||
}
|
||
|
||
var req discoverRequest
|
||
if err := c.ShouldBindJSON(&req); err != nil {
|
||
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "请求参数错误"})
|
||
return
|
||
}
|
||
if len(req.Regions) == 0 {
|
||
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "请至少选择一个区域"})
|
||
return
|
||
}
|
||
|
||
provider := cloud.NewProvider(account.Provider, account.AccessKey, account.SecretKey)
|
||
if provider == nil {
|
||
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "暂不支持的云平台"})
|
||
return
|
||
}
|
||
|
||
var allInstances []cloud.CloudInstance
|
||
var errors []string
|
||
|
||
for _, regionID := range req.Regions {
|
||
instances, err := provider.ListInstances(regionID)
|
||
if err != nil {
|
||
errors = append(errors, regionID+": "+err.Error())
|
||
continue
|
||
}
|
||
allInstances = append(allInstances, instances...)
|
||
}
|
||
|
||
c.JSON(http.StatusOK, model.Response{
|
||
Code: 200,
|
||
Message: "success",
|
||
Data: gin.H{
|
||
"list": allInstances,
|
||
"total": len(allInstances),
|
||
"errors": errors,
|
||
},
|
||
})
|
||
}
|
||
|
||
// importRequest 导入主机请求
|
||
type importRequest struct {
|
||
Instances []cloud.CloudInstance `json:"instances"`
|
||
}
|
||
|
||
// ImportInstances 将发现的云主机实例导入为本地服务器资产
|
||
// POST /cloud-accounts/:id/import-instances
|
||
func (h *CloudSyncHandler) ImportInstances(c *gin.Context) {
|
||
id, _ := strconv.Atoi(c.Param("id"))
|
||
|
||
var account model.CloudAccount
|
||
if err := h.db.First(&account, id).Error; err != nil {
|
||
c.JSON(http.StatusNotFound, model.Response{Code: 404, Message: "云账号不存在"})
|
||
return
|
||
}
|
||
|
||
var req importRequest
|
||
if err := c.ShouldBindJSON(&req); err != nil {
|
||
c.JSON(http.StatusBadRequest, model.Response{Code: 400, Message: "请求参数错误"})
|
||
return
|
||
}
|
||
|
||
imported := 0
|
||
skipped := 0
|
||
|
||
for _, inst := range req.Instances {
|
||
// 以 IP 去重(没有 IP 则用 InstanceID)
|
||
ip := inst.PrivateIP
|
||
if ip == "" {
|
||
ip = inst.PublicIP
|
||
}
|
||
if ip == "" {
|
||
ip = inst.InstanceID
|
||
}
|
||
|
||
// 检查是否已存在(按 IP 或 hostname)
|
||
var count int64
|
||
h.db.Model(&model.Server{}).Where("ip = ? OR hostname = ?", ip, inst.Hostname).Count(&count)
|
||
if count > 0 {
|
||
skipped++
|
||
continue
|
||
}
|
||
|
||
// 查找 Region 关联
|
||
var region model.Region
|
||
var regionID *uint
|
||
if h.db.Where("code = ? AND provider = ?", inst.RegionID, account.Provider).First(®ion).Error == nil {
|
||
regionID = ®ion.ID
|
||
}
|
||
|
||
osName := "linux"
|
||
if inst.OSType != "" {
|
||
osName = inst.OSType
|
||
}
|
||
status := "stopped"
|
||
if inst.Status == "Running" {
|
||
status = "running"
|
||
}
|
||
ipAddr := inst.PrivateIP
|
||
if ipAddr == "" {
|
||
ipAddr = inst.PublicIP
|
||
}
|
||
if ipAddr == "" {
|
||
ipAddr = inst.InstanceID
|
||
}
|
||
hostname := inst.Hostname
|
||
if hostname == "" {
|
||
hostname = inst.InstanceName
|
||
}
|
||
if hostname == "" {
|
||
hostname = inst.InstanceID
|
||
}
|
||
|
||
// 注意:servers 表的 cloud_id 外键引用的是 clouds 表(非 cloud_accounts),
|
||
// region_id 外键引用 regions 表。未找到关联时设为 NULL 避免外键约束失败。
|
||
server := model.Server{
|
||
Hostname: hostname,
|
||
IP: ipAddr,
|
||
PublicIP: inst.PublicIP,
|
||
Port: 22,
|
||
Username: "root",
|
||
OS: osName,
|
||
CPU: inst.CPU,
|
||
Memory: int64(inst.Memory),
|
||
Status: status,
|
||
RegionID: regionID, // nil = NULL
|
||
Description: "从 " + account.Provider + " 导入 (" + inst.InstanceID + ")",
|
||
AgentStatus: "offline",
|
||
}
|
||
|
||
if err := h.db.Create(&server).Error; err == nil {
|
||
imported++
|
||
} else {
|
||
skipped++
|
||
}
|
||
}
|
||
|
||
// 更新账号的 server_count
|
||
h.db.Model(&account).UpdateColumn("server_count", imported)
|
||
|
||
c.JSON(http.StatusOK, model.Response{
|
||
Code: 200,
|
||
Message: "导入完成",
|
||
Data: gin.H{
|
||
"imported": imported,
|
||
"skipped": skipped,
|
||
},
|
||
})
|
||
}
|