certd/packages/ui/certd-server/src/plugins/plugin-host/plugin/upload-to-host/index.ts

import {
  AbstractTaskPlugin,
  IAccessService,
  ILogger,
  IsTaskPlugin,
  RunStrategy,
  TaskInput,
  TaskOutput,
} from '@certd/pipeline';
import { SshClient } from '../../lib/ssh';
import { CertInfo, CertReader } from '@certd/plugin-cert';
import * as fs from 'fs';

@IsTaskPlugin({
  name: 'uploadCertToHost',
  title: '上传证书到主机',
  desc: '也支持复制证书到本机',
  default: {
    strategy: {
      runStrategy: RunStrategy.SkipWhenSucceed,
    },
  },
})
export class UploadCertToHostPlugin extends AbstractTaskPlugin {
  @TaskInput({
    title: '证书保存路径',
    helper: '需要有写入权限，路径要包含证书文件名',
    component: {
      placeholder: '/root/deploy/nginx/cert.crt',
    },
  })
  crtPath!: string;
  @TaskInput({
    title: '私钥保存路径',
    helper: '需要有写入权限，路径要包含证书文件名',
    component: {
      placeholder: '/root/deploy/nginx/cert.crt',
    },
  })
  keyPath!: string;
  @TaskInput({
    title: '域名证书',
    helper: '请选择前置任务输出的域名证书',
    component: {
      name: 'pi-output-selector',
    },
    required: true,
  })
  cert!: CertInfo;
  @TaskInput({
    title: '主机登录配置',
    helper: 'access授权',
    component: {
      name: 'pi-access-selector',
      type: 'ssh',
    },
    rules: [{ required: false, message: '' }],
  })
  accessId!: string;

  @TaskInput({
    title: '复制到当前主机',
    helper:
      '开启后，将直接复制到当前主机某个目录，由于是docker启动，实际上复制到的是docker容器内的目录，你需要事先在docker-compose.yaml中配置主机目录映射： volumes: /your_target_path:/your_target_path',
    component: {
      name: 'a-switch',
      value: false,
      vModel: 'checked',
    },
  })
  copyToThisHost!: boolean;

  @TaskOutput({
    title: '证书保存路径',
  })
  hostCrtPath!: string;

  @TaskOutput({
    title: '私钥保存路径',
  })
  hostKeyPath!: string;

  accessService!: IAccessService;
  logger!: ILogger;

  async onInstance() {
    this.accessService = this.ctx.accessService;
    this.logger = this.ctx.logger;
  }

  copyFile(srcFile: string, destFile: string) {
    const dir = destFile.substring(0, destFile.lastIndexOf('/'));
    if (!fs.existsSync(dir)) {
      fs.mkdirSync(dir, { recursive: true });
    }
    fs.copyFileSync(srcFile, destFile);
  }
  async execute(): Promise<void> {
    const { crtPath, keyPath, cert, accessId } = this;
    const certReader = new CertReader(cert);

    const saveCrtPath = certReader.saveToFile('crt');
    const saveKeyPath = certReader.saveToFile('key');

    if (this.copyToThisHost) {
      this.copyFile(saveCrtPath, crtPath);
      this.copyFile(saveKeyPath, keyPath);
      this.logger.info('证书复制成功：crtPath=', crtPath, ',keyPath=', keyPath);
    } else {
      if (!accessId) {
        throw new Error('主机登录授权配置不能为空');
      }
      const connectConf = await this.accessService.getById(accessId);
      const sshClient = new SshClient(this.logger);
      await sshClient.uploadFiles({
        connectConf,
        transports: [
          {
            localPath: saveCrtPath,
            remotePath: crtPath,
          },
          {
            localPath: saveKeyPath,
            remotePath: keyPath,
          },
        ],
      });
      this.logger.info('证书上传成功：crtPath=', crtPath, ',keyPath=', keyPath);
    }

    //删除临时文件
    fs.unlinkSync(saveCrtPath);
    fs.unlinkSync(saveKeyPath);

    //输出
    this.hostCrtPath = crtPath;
    this.hostKeyPath = keyPath;
  }
}

new UploadCertToHostPlugin();