certd/packages/ui/certd-server/src/plugins/plugin-tencent/plugin/upload-to-tencent/index.ts

import { AbstractTaskPlugin, IsTaskPlugin, pluginGroups, RunStrategy, TaskInput, TaskOutput } from '@certd/pipeline';
import dayjs from 'dayjs';

@IsTaskPlugin({
  name: 'UploadCertToTencent',
  title: '上传证书到腾讯云',
  icon: 'svg:icon-tencentcloud',
  desc: '上传成功后输出：tencentCertId',
  group: pluginGroups.tencent.key,
  default: {
    strategy: {
      runStrategy: RunStrategy.SkipWhenSucceed,
    },
  },
})
export class UploadToTencentPlugin extends AbstractTaskPlugin {
  @TaskInput({ title: '证书名称' })
  name!: string;

  @TaskInput({
    title: 'Access授权',
    helper: 'access授权',
    component: {
      name: 'access-selector',
      type: 'tencent',
    },
    required: true,
  })
  accessId!: string;

  @TaskInput({
    title: '域名证书',
    helper: '请选择前置任务输出的域名证书',
    component: {
      name: 'output-selector',
      from: ['CertApply', 'CertApplyLego'],
    },
    required: true,
  })
  cert!: any;

  @TaskOutput({
    title: '上传成功后的腾讯云CertId',
  })
  tencentCertId?: string;

  Client: any;
  async onInstance() {
    const sdk = await import('tencentcloud-sdk-nodejs/tencentcloud/services/ssl/v20191205/index.js');
    this.Client = sdk.v20191205.Client;
  }

  async execute(): Promise<void> {
    const { accessId, name, cert } = this;
    const accessProvider = await this.accessService.getById(accessId);
    const certName = this.appendTimeSuffix(name || cert.domain);
    const client = this.getClient(accessProvider);

    const params = {
      CertificatePublicKey: cert.crt,
      CertificatePrivateKey: cert.key,
      Alias: certName,
    };
    const ret = await client.UploadCertificate(params);
    this.checkRet(ret);
    this.logger.info('证书上传成功：tencentCertId=', ret.CertificateId);

    this.tencentCertId = ret.CertificateId;
  }

  appendTimeSuffix(name: string) {
    if (name == null) {
      name = 'certd';
    }
    return name + '-' + dayjs().format('YYYYMMDD-HHmmss');
  }

  getClient(accessProvider: any) {
    const SslClient = this.Client;

    const clientConfig = {
      credential: {
        secretId: accessProvider.secretId,
        secretKey: accessProvider.secretKey,
      },
      region: '',
      profile: {
        httpProfile: {
          endpoint: 'ssl.tencentcloudapi.com',
        },
      },
    };

    return new SslClient(clientConfig);
  }

  // async rollback({ input }) {
  //   const { accessId } = input;
  //   const accessProvider = await this.accessService.getById(accessId);
  //   const client = this.getClient(accessProvider);
  //
  //   const { tencentCertId } = context;
  //   const params = {
  //     CertificateId: tencentCertId,
  //   };
  //   const ret = await client.DeleteCertificate(params);
  //   this.checkRet(ret);
  //   this.logger.info("证书删除成功：DeleteResult=", ret.DeleteResult);
  //   delete context.tencentCertId;
  // }
  checkRet(ret: any) {
    if (!ret || ret.Error) {
      throw new Error('执行失败：' + ret.Error.Code + ',' + ret.Error.Message);
    }
  }
}