attacker
77c234b060
F1 告警静默规则 [done]: - 后端 alert_silence.go: CRUD + Toggle (onetime/daily/weekly 三模式) - 告警引擎 isSilenced 集成 (alert_engine.go) - 前端 SilenceRuleTab + SilenceDialog - 路由 /alerts/silences 已注册 F2 审计日志导出 [done]: - 重写 ExportAuditLogs: 真正的 CSV 导出 (encoding/csv + UTF-8 BOM) - 支持 module/action/username/startTime/endTime 筛选 - 导出限制 10000 条防溢出，自动记录审计日志 - JSON 格式向后兼容 (format=json) - 前端 exportLogs 传递查询参数 同时包含累积的前期工作: - 目录重构 internal/ -> controller/model/router (v0.55-v0.57) - 后端分层架构 dto/repository/service/utils - 审计模块全功能 (终端审计/操作审计/登录日志) - asciicast v2 录制格式 - SFTP 文件浏览器 - StatStrip 紧凑统计条 - 在线会话自动刷新 - LiveMonitor WebSocket 诊断修复 验证: go build ✅ | npm run build ✅ | Docker 部署 ✅ | 10 回归端点 ✅ | CSV 导出 ✅ | 静默 CRUD ✅
107 lines
3.0 KiB
Go
107 lines
3.0 KiB
Go
package controller
|
|
|
|
import (
|
|
"fmt"
|
|
"gorm.io/gorm"
|
|
"strconv"
|
|
"time"
|
|
|
|
"ezops/model"
|
|
k8sclient "ezops/pkg/kubernetesclient"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
// KubernetesHandler K8s处理器
|
|
type KubernetesHandler struct {
|
|
db *gorm.DB
|
|
}
|
|
|
|
// NewKubernetesHandler 创建K8s处理器
|
|
func NewKubernetesHandler(db *gorm.DB) *KubernetesHandler {
|
|
return &KubernetesHandler{db: db}
|
|
}
|
|
|
|
// ============================================================================
|
|
// Shared helpers (used by all k8s_*.go files in this package)
|
|
// ============================================================================
|
|
|
|
func (h *KubernetesHandler) resolveClusterCode(code string) int {
|
|
if code == "" {
|
|
return 0
|
|
}
|
|
var cluster model.KubernetesCluster
|
|
if err := h.db.Where("code = ?", code).First(&cluster).Error; err != nil {
|
|
return 0
|
|
}
|
|
return int(cluster.ID)
|
|
}
|
|
|
|
// formatAge converts a K8s creationTimestamp (RFC3339) to a human-readable relative age
|
|
func formatAge(creationTimestamp string) string {
|
|
if creationTimestamp == "" {
|
|
return "-"
|
|
}
|
|
t, err := time.Parse(time.RFC3339, creationTimestamp)
|
|
if err != nil {
|
|
return creationTimestamp
|
|
}
|
|
d := time.Since(t)
|
|
switch {
|
|
case d < time.Minute:
|
|
return fmt.Sprintf("%ds", int(d.Seconds()))
|
|
case d < time.Hour:
|
|
return fmt.Sprintf("%dm", int(d.Minutes()))
|
|
case d < 24*time.Hour:
|
|
return fmt.Sprintf("%dh", int(d.Hours()))
|
|
case d < 30*24*time.Hour:
|
|
return fmt.Sprintf("%dd", int(d.Hours()/24))
|
|
case d < 365*24*time.Hour:
|
|
return fmt.Sprintf("%dM", int(d.Hours()/(24*30)))
|
|
default:
|
|
return fmt.Sprintf("%dy", int(d.Hours()/(24*365)))
|
|
}
|
|
}
|
|
|
|
// getK8sClientByCode resolves cluster by code, falls back to ID
|
|
func (h *KubernetesHandler) getK8sClientByCode(c *gin.Context) (*k8sclient.Client, *model.KubernetesCluster, error) {
|
|
clusterID, _ := strconv.Atoi(c.Param("id"))
|
|
if clusterID == 0 {
|
|
// 支持 :clusterCode 或 :id 参数
|
|
code := c.Param("clusterCode")
|
|
if code == "" {
|
|
code = c.Param("id")
|
|
}
|
|
clusterID = h.resolveClusterCode(code)
|
|
}
|
|
if clusterID == 0 {
|
|
return nil, nil, fmt.Errorf("cluster not found")
|
|
}
|
|
return h.getK8sClient(clusterID)
|
|
}
|
|
|
|
// ============================================================================
|
|
// NS wrappers — read namespace from path (Kuboard-style routes)
|
|
// ============================================================================
|
|
|
|
func (h *KubernetesHandler) getK8sClient(clusterID int) (*k8sclient.Client, *model.KubernetesCluster, error) {
|
|
var cluster model.KubernetesCluster
|
|
if err := h.db.First(&cluster, clusterID).Error; err != nil {
|
|
return nil, nil, fmt.Errorf("cluster not found")
|
|
}
|
|
if cluster.KubeConfig == "" {
|
|
return nil, nil, fmt.Errorf("no kubeconfig")
|
|
}
|
|
client, err := k8sclient.NewClient(cluster.KubeConfig)
|
|
if err != nil {
|
|
return nil, nil, err
|
|
}
|
|
return client, &cluster, nil
|
|
}
|
|
|
|
// ============================================================================
|
|
// PVC (存储) handlers
|
|
// ============================================================================
|
|
|
|
// ListPVCsNS lists PersistentVolumeClaims in a namespace (code-based)
|