feat: add volcengine imagex deployer

internal/pkg/core/deployer/providers/volcengine-imagex/volcengine_imagex.go

@@ -0,0 +1,147 @@
+package volcengineimagex
+
+import (
+	"context"
+	"errors"
+
+	xerrors "github.com/pkg/errors"
+	veBase "github.com/volcengine/volc-sdk-golang/base"
+	veImageX "github.com/volcengine/volc-sdk-golang/service/imagex/v2"
+
+	"github.com/usual2970/certimate/internal/pkg/core/deployer"
+	"github.com/usual2970/certimate/internal/pkg/core/logger"
+	"github.com/usual2970/certimate/internal/pkg/core/uploader"
+	uploaderp "github.com/usual2970/certimate/internal/pkg/core/uploader/providers/volcengine-certcenter"
+)
+
+type VolcEngineImageXDeployerConfig struct {
+	// 火山引擎 AccessKeyId。
+	AccessKeyId string `json:"accessKeyId"`
+	// 火山引擎 AccessKeySecret。
+	AccessKeySecret string `json:"accessKeySecret"`
+	// 火山引擎地域。
+	Region string `json:"region"`
+	// 服务 ID。
+	ServiceId string `json:"serviceId"`
+	// 自定义域名（不支持泛域名）。
+	Domain string `json:"domain"`
+}
+
+type VolcEngineImageXDeployer struct {
+	config      *VolcEngineImageXDeployerConfig
+	logger      logger.Logger
+	sdkClient   *veImageX.Imagex
+	sslUploader uploader.Uploader
+}
+
+var _ deployer.Deployer = (*VolcEngineImageXDeployer)(nil)
+
+func New(config *VolcEngineImageXDeployerConfig) (*VolcEngineImageXDeployer, error) {
+	return NewWithLogger(config, logger.NewNilLogger())
+}
+
+func NewWithLogger(config *VolcEngineImageXDeployerConfig, logger logger.Logger) (*VolcEngineImageXDeployer, error) {
+	if config == nil {
+		return nil, errors.New("config is nil")
+	}
+
+	if logger == nil {
+		return nil, errors.New("logger is nil")
+	}
+
+	client, err := createSdkClient(config.AccessKeyId, config.AccessKeySecret, config.Region)
+	if err != nil {
+		return nil, xerrors.Wrap(err, "failed to create sdk client")
+	}
+
+	uploader, err := uploaderp.New(&uploaderp.VolcEngineCertCenterUploaderConfig{
+		AccessKeyId:     config.AccessKeyId,
+		AccessKeySecret: config.AccessKeySecret,
+		Region:          config.Region,
+	})
+	if err != nil {
+		return nil, xerrors.Wrap(err, "failed to create ssl uploader")
+	}
+
+	return &VolcEngineImageXDeployer{
+		logger:      logger,
+		config:      config,
+		sdkClient:   client,
+		sslUploader: uploader,
+	}, nil
+}
+
+func (d *VolcEngineImageXDeployer) Deploy(ctx context.Context, certPem string, privkeyPem string) (*deployer.DeployResult, error) {
+	if d.config.ServiceId == "" {
+		return nil, errors.New("config `serviceId` is required")
+	}
+	if d.config.Domain == "" {
+		return nil, errors.New("config `domain` is required")
+	}
+
+	// 上传证书到证书中心
+	upres, err := d.sslUploader.Upload(ctx, certPem, privkeyPem)
+	if err != nil {
+		return nil, xerrors.Wrap(err, "failed to upload certificate file")
+	}
+
+	d.logger.Logt("certificate file uploaded", upres)
+
+	// 获取域名配置
+	// REF: https://www.volcengine.com/docs/508/9366
+	getDomainConfigReq := &veImageX.GetDomainConfigQuery{
+		ServiceID:  d.config.ServiceId,
+		DomainName: d.config.Domain,
+	}
+	getDomainConfigResp, err := d.sdkClient.GetDomainConfig(context.TODO(), getDomainConfigReq)
+	if err != nil {
+		return nil, xerrors.Wrap(err, "failed to execute sdk request 'imagex.GetDomainConfig'")
+	} else {
+		d.logger.Logt("已获取域名配置", getDomainConfigResp)
+	}
+
+	// 更新 HTTPS 配置
+	// REF: https://www.volcengine.com/docs/508/66012
+	updateHttpsReq := &veImageX.UpdateHTTPSReq{
+		UpdateHTTPSQuery: &veImageX.UpdateHTTPSQuery{
+			ServiceID: d.config.ServiceId,
+		},
+		UpdateHTTPSBody: &veImageX.UpdateHTTPSBody{
+			Domain: getDomainConfigResp.Result.Domain,
+			HTTPS: &veImageX.UpdateHTTPSBodyHTTPS{
+				CertID:              upres.CertId,
+				EnableHTTP2:         getDomainConfigResp.Result.HTTPSConfig.EnableHTTP2,
+				EnableHTTPS:         getDomainConfigResp.Result.HTTPSConfig.EnableHTTPS,
+				EnableOcsp:          getDomainConfigResp.Result.HTTPSConfig.EnableOcsp,
+				TLSVersions:         getDomainConfigResp.Result.HTTPSConfig.TLSVersions,
+				EnableForceRedirect: getDomainConfigResp.Result.HTTPSConfig.EnableForceRedirect,
+				ForceRedirectType:   getDomainConfigResp.Result.HTTPSConfig.ForceRedirectType,
+				ForceRedirectCode:   getDomainConfigResp.Result.HTTPSConfig.ForceRedirectCode,
+			},
+		},
+	}
+	updateHttpsResp, err := d.sdkClient.UpdateHTTPS(context.TODO(), updateHttpsReq)
+	if err != nil {
+		return nil, xerrors.Wrap(err, "failed to execute sdk request 'imagex.UpdateHttps'")
+	} else {
+		d.logger.Logt("已更新 HTTPS 配置", updateHttpsResp)
+	}
+
+	return &deployer.DeployResult{}, nil
+}
+
+func createSdkClient(accessKeyId, accessKeySecret, region string) (*veImageX.Imagex, error) {
+	var instance *veImageX.Imagex
+	if region == "" {
+		instance = veImageX.NewInstance()
+	} else {
+		instance = veImageX.NewInstanceWithRegion(region)
+	}
+
+	instance.SetCredential(veBase.Credentials{
+		AccessKeyID:     accessKeyId,
+		SecretAccessKey: accessKeySecret,
+	})
+
+	return instance, nil
+}

internal/pkg/core/deployer/providers/volcengine-imagex/volcengine_imagex_test.go

@@ -0,0 +1,85 @@
+package volcengineimagex_test
+
+import (
+	"context"
+	"flag"
+	"fmt"
+	"os"
+	"strings"
+	"testing"
+
+	provider "github.com/usual2970/certimate/internal/pkg/core/deployer/providers/volcengine-imagex"
+)
+
+var (
+	fInputCertPath   string
+	fInputKeyPath    string
+	fAccessKeyId     string
+	fAccessKeySecret string
+	fRegion          string
+	fServiceId       string
+	fDomain          string
+)
+
+func init() {
+	argsPrefix := "CERTIMATE_DEPLOYER_VOLCENGINEIMAGEX_"
+
+	flag.StringVar(&fInputCertPath, argsPrefix+"INPUTCERTPATH", "", "")
+	flag.StringVar(&fInputKeyPath, argsPrefix+"INPUTKEYPATH", "", "")
+	flag.StringVar(&fAccessKeyId, argsPrefix+"ACCESSKEYID", "", "")
+	flag.StringVar(&fAccessKeySecret, argsPrefix+"ACCESSKEYSECRET", "", "")
+	flag.StringVar(&fRegion, argsPrefix+"REGION", "", "")
+	flag.StringVar(&fServiceId, argsPrefix+"SERVICEID", "", "")
+	flag.StringVar(&fDomain, argsPrefix+"DOMAIN", "", "")
+}
+
+/*
+Shell command to run this test:
+
+	go test -v ./volcengine_imagex_test.go -args \
+	--CERTIMATE_DEPLOYER_VOLCENGINEIMAGEX_INPUTCERTPATH="/path/to/your-input-cert.pem" \
+	--CERTIMATE_DEPLOYER_VOLCENGINEIMAGEX_INPUTKEYPATH="/path/to/your-input-key.pem" \
+	--CERTIMATE_DEPLOYER_VOLCENGINEIMAGEX_ACCESSKEYID="your-access-key-id" \
+	--CERTIMATE_DEPLOYER_VOLCENGINEIMAGEX_ACCESSKEYSECRET="your-access-key-secret" \
+	--CERTIMATE_DEPLOYER_VOLCENGINEIMAGEX_REGION="cn-north-1" \
+	--CERTIMATE_DEPLOYER_VOLCENGINEIMAGEX_SERVICEID="your-service-id" \
+	--CERTIMATE_DEPLOYER_VOLCENGINEIMAGEX_DOMAIN="example.com"
+*/
+func TestDeploy(t *testing.T) {
+	flag.Parse()
+
+	t.Run("Deploy", func(t *testing.T) {
+		t.Log(strings.Join([]string{
+			"args:",
+			fmt.Sprintf("INPUTCERTPATH: %v", fInputCertPath),
+			fmt.Sprintf("INPUTKEYPATH: %v", fInputKeyPath),
+			fmt.Sprintf("ACCESSKEYID: %v", fAccessKeyId),
+			fmt.Sprintf("ACCESSKEYSECRET: %v", fAccessKeySecret),
+			fmt.Sprintf("REGION: %v", fRegion),
+			fmt.Sprintf("SERVICEID: %v", fServiceId),
+			fmt.Sprintf("DOMAIN: %v", fDomain),
+		}, "\n"))
+
+		deployer, err := provider.New(&provider.VolcEngineImageXDeployerConfig{
+			AccessKeyId:     fAccessKeyId,
+			AccessKeySecret: fAccessKeySecret,
+			Region:          fRegion,
+			ServiceId:       fServiceId,
+			Domain:          fDomain,
+		})
+		if err != nil {
+			t.Errorf("err: %+v", err)
+			return
+		}
+
+		fInputCertData, _ := os.ReadFile(fInputCertPath)
+		fInputKeyData, _ := os.ReadFile(fInputKeyPath)
+		res, err := deployer.Deploy(context.Background(), string(fInputCertData), string(fInputKeyData))
+		if err != nil {
+			t.Errorf("err: %+v", err)
+			return
+		}
+
+		t.Logf("ok: %v", res)
+	})
+}

internal/pkg/core/deployer/providers/volcengine-tos/volcengine_tos_test.go

@@ -63,6 +63,8 @@ func TestDeploy(t *testing.T) {
 		deployer, err := provider.New(&provider.VolcEngineTOSDeployerConfig{
 			AccessKeyId:     fAccessKeyId,
 			AccessKeySecret: fAccessKeySecret,
+			Region:          fRegion,
+			Bucket:          fBucket,
 			Domain:          fDomain,
 		})
 		if err != nil {