attacker
bdc7a507c0
1. 菜单路由修复: /roles /users /logs-audit /terminal-audit 等系统管理子菜单 通过 useLocation 同步 URL 路径到 Tab 选中状态 2. WebSSH错误提示优化: Go error → 友好中文提示 i/o timeout → 连接超时（防火墙或网络不通） connection refused → 端口未开放/SSH服务未启动 cannot find session key → 密码或密钥认证失败 连接提示增加端口号显示 3. 角色权限展示: 31项权限种子数据 (资产管理/云资源/K8s/发布/监控/AIOps/系统管理) 4个角色权限分配: admin(31) ops(27) developer(16) viewer(3) 前端角色卡片显示权限名称而非原始code 4. 操作审计修复: 删除/创建/更新服务器均记录审计日志 批量删除逐条记录审计 5. WebSSH终端审计 (JumpServer模式): - 新增 TerminalSession 模型记录会话(用户/服务器/时间/状态) - webshell.go 录制终端输出(1MB上限) - 终端审计页面: 会话列表+状态筛选+批量删除 - 操作回放: xterm.js 重放录制的终端输出 - WS连接增加JWT鉴权+token传递
107 lines
2.5 KiB
Go
107 lines
2.5 KiB
Go
package database
|
|
|
|
import (
|
|
"fmt"
|
|
"time"
|
|
|
|
"ezops/internal/config"
|
|
"ezops/internal/models"
|
|
|
|
"gorm.io/driver/mysql"
|
|
"gorm.io/driver/postgres"
|
|
"gorm.io/driver/sqlite"
|
|
"gorm.io/gorm"
|
|
"gorm.io/gorm/logger"
|
|
)
|
|
|
|
// New 创建数据库连接
|
|
func New(cfg config.DatabaseConfig) (*gorm.DB, error) {
|
|
var dialector gorm.Dialector
|
|
|
|
switch cfg.Driver {
|
|
case "mysql":
|
|
dsn := fmt.Sprintf("%s:%s@tcp(%s:%d)/%s?charset=%s&parseTime=True&loc=Local",
|
|
cfg.User, cfg.Password, cfg.Host, cfg.Port, cfg.DBName, cfg.Charset)
|
|
dialector = mysql.Open(dsn)
|
|
case "postgres":
|
|
dsn := fmt.Sprintf("host=%s port=%d user=%s password=%s dbname=%s sslmode=disable",
|
|
cfg.Host, cfg.Port, cfg.User, cfg.Password, cfg.DBName)
|
|
dialector = postgres.Open(dsn)
|
|
case "sqlite":
|
|
dialector = sqlite.Open(cfg.DBName)
|
|
default:
|
|
return nil, fmt.Errorf("unsupported database driver: %s", cfg.Driver)
|
|
}
|
|
|
|
db, err := gorm.Open(dialector, &gorm.Config{
|
|
Logger: logger.Default.LogMode(logger.Silent),
|
|
})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
// 设置连接池
|
|
sqlDB, err := db.DB()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
sqlDB.SetMaxOpenConns(cfg.MaxConn)
|
|
sqlDB.SetMaxIdleConns(cfg.MaxIdle)
|
|
sqlDB.SetConnMaxLifetime(time.Hour)
|
|
|
|
return db, nil
|
|
}
|
|
|
|
// AutoMigrate 自动迁移数据库表
|
|
func AutoMigrate(db *gorm.DB) error {
|
|
return db.AutoMigrate(
|
|
&models.User{},
|
|
&models.Role{},
|
|
&models.Permission{},
|
|
&models.Server{},
|
|
&models.Cloud{},
|
|
&models.CloudAccount{},
|
|
&models.Region{},
|
|
&models.Domain{},
|
|
&models.K8sCluster{},
|
|
&models.K8sNode{},
|
|
&models.K8sPod{},
|
|
&models.K8sDeployment{},
|
|
&models.K8sService{},
|
|
&models.K8sIngress{},
|
|
&models.AlertRule{},
|
|
&models.AlertEvent{},
|
|
&models.NotifyChannel{},
|
|
&models.MetricData{},
|
|
&models.Pipeline{},
|
|
&models.PipelineRun{},
|
|
&models.AppRelease{},
|
|
&models.CronJob{},
|
|
&models.Script{},
|
|
&models.TaskExecution{},
|
|
&models.Playbook{},
|
|
&models.ApprovalTemplate{},
|
|
&models.ApprovalProcess{},
|
|
&models.ApprovalStep{},
|
|
&models.NavigationGroup{},
|
|
&models.NavigationLink{},
|
|
&models.AuditLog{},
|
|
&models.LDAPConfig{},
|
|
&models.ResourceModel{},
|
|
&models.CloudBilling{},
|
|
&models.BillingAlertRule{},
|
|
&models.AgentReport{},
|
|
&models.AgentTask{},
|
|
&models.AgentRule{},
|
|
&models.AgentAlert{},
|
|
&models.AnsiblePlaybook{},
|
|
&models.AnsibleJob{},
|
|
&models.AnsibleInventory{},
|
|
&models.LogSource{},
|
|
&models.LogEntry{},
|
|
&models.TopologyLayout{}, // 拓扑布局保存 // Logan.Li
|
|
&models.TerminalSession{}, // 终端会话录制（终端审计） // Logan.Li
|
|
)
|
|
}
|