mirror of
https://github.com/usual2970/certimate.git
synced 2025-06-09 05:59:50 +00:00
117 lines
3.9 KiB
Go
117 lines
3.9 KiB
Go
package deployer
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"fmt"
|
|
"strings"
|
|
|
|
volcenginecdn "github.com/usual2970/certimate/internal/pkg/core/uploader/providers/volcengine-cdn"
|
|
|
|
xerrors "github.com/pkg/errors"
|
|
"github.com/usual2970/certimate/internal/domain"
|
|
"github.com/usual2970/certimate/internal/pkg/core/uploader"
|
|
"github.com/volcengine/volc-sdk-golang/service/cdn"
|
|
)
|
|
|
|
type VolcengineCDNDeployer struct {
|
|
option *DeployerOption
|
|
infos []string
|
|
sdkClient *cdn.CDN
|
|
sslUploader uploader.Uploader
|
|
}
|
|
|
|
func NewVolcengineCDNDeployer(option *DeployerOption) (Deployer, error) {
|
|
access := &domain.VolcengineAccess{}
|
|
if err := json.Unmarshal([]byte(option.Access), access); err != nil {
|
|
return nil, xerrors.Wrap(err, "failed to get access")
|
|
}
|
|
client := cdn.NewInstance()
|
|
client.Client.SetAccessKey(access.AccessKeyID)
|
|
client.Client.SetSecretKey(access.SecretAccessKey)
|
|
uploader, err := volcenginecdn.New(&volcenginecdn.VolcengineCDNUploaderConfig{
|
|
AccessKeyId: access.AccessKeyID,
|
|
AccessKeySecret: access.SecretAccessKey,
|
|
})
|
|
if err != nil {
|
|
return nil, xerrors.Wrap(err, "failed to create ssl uploader")
|
|
}
|
|
return &VolcengineCDNDeployer{
|
|
option: option,
|
|
infos: make([]string, 0),
|
|
sdkClient: client,
|
|
sslUploader: uploader,
|
|
}, nil
|
|
}
|
|
|
|
func (d *VolcengineCDNDeployer) GetID() string {
|
|
return fmt.Sprintf("%s-%s", d.option.AccessRecord.GetString("name"), d.option.AccessRecord.Id)
|
|
}
|
|
|
|
func (d *VolcengineCDNDeployer) GetInfos() []string {
|
|
return d.infos
|
|
}
|
|
|
|
func (d *VolcengineCDNDeployer) Deploy(ctx context.Context) error {
|
|
apiCtx := context.Background()
|
|
// 上传证书
|
|
upres, err := d.sslUploader.Upload(apiCtx, d.option.Certificate.Certificate, d.option.Certificate.PrivateKey)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
d.infos = append(d.infos, toStr("已上传证书", upres))
|
|
|
|
domains := make([]string, 0)
|
|
configDomain := d.option.DeployConfig.GetConfigAsString("domain")
|
|
if strings.HasPrefix(configDomain, "*.") {
|
|
// 获取证书可以部署的域名
|
|
// REF: https://www.volcengine.com/docs/6454/125711
|
|
describeCertConfigReq := &cdn.DescribeCertConfigRequest{
|
|
CertId: upres.CertId,
|
|
}
|
|
describeCertConfigResp, err := d.sdkClient.DescribeCertConfig(describeCertConfigReq)
|
|
if err != nil {
|
|
return xerrors.Wrap(err, "failed to execute sdk request 'cdn.DescribeCertConfig'")
|
|
}
|
|
for i := range describeCertConfigResp.Result.CertNotConfig {
|
|
// 当前未启用 HTTPS 的加速域名列表。
|
|
domains = append(domains, describeCertConfigResp.Result.CertNotConfig[i].Domain)
|
|
}
|
|
for i := range describeCertConfigResp.Result.OtherCertConfig {
|
|
// 已启用了 HTTPS 的加速域名列表。这些加速域名关联的证书不是您指定的证书。
|
|
domains = append(domains, describeCertConfigResp.Result.OtherCertConfig[i].Domain)
|
|
}
|
|
for i := range describeCertConfigResp.Result.SpecifiedCertConfig {
|
|
// 已启用了 HTTPS 的加速域名列表。这些加速域名关联了您指定的证书。
|
|
d.infos = append(d.infos, fmt.Sprintf("%s域名已配置该证书", describeCertConfigResp.Result.SpecifiedCertConfig[i].Domain))
|
|
}
|
|
if len(domains) == 0 {
|
|
if len(describeCertConfigResp.Result.SpecifiedCertConfig) > 0 {
|
|
// 所有匹配的域名都配置了该证书，跳过部署
|
|
return nil
|
|
} else {
|
|
return xerrors.Errorf("未查询到匹配的域名: %s", configDomain)
|
|
}
|
|
}
|
|
} else {
|
|
domains = append(domains, configDomain)
|
|
}
|
|
// 部署证书
|
|
// REF: https://www.volcengine.com/docs/6454/125712
|
|
for i := range domains {
|
|
batchDeployCertReq := &cdn.BatchDeployCertRequest{
|
|
CertId: upres.CertId,
|
|
Domain: domains[i],
|
|
}
|
|
batchDeployCertResp, err := d.sdkClient.BatchDeployCert(batchDeployCertReq)
|
|
if err != nil {
|
|
return xerrors.Wrap(err, "failed to execute sdk request 'cdn.BatchDeployCert'")
|
|
} else {
|
|
d.infos = append(d.infos, toStr(fmt.Sprintf("%s域名的证书已修改", domains[i]), batchDeployCertResp))
|
|
}
|
|
}
|
|
|
|
return nil
|
|
}
|