perf: 阿里云CDN部署支持根据证书域名自动匹配部署

This commit is contained in:
xiaojunnuo
2026-03-29 02:25:45 +08:00
parent c6a988bc92
commit a68301e4dc
4 changed files with 159 additions and 90 deletions
+2 -2
View File
@@ -377,13 +377,13 @@ export abstract class AbstractTaskPlugin implements ITaskPlugin {
async autoMatchedDeploy(req: { async autoMatchedDeploy(req: {
targetName: string; targetName: string;
getCertDomains: () => string[]; getCertDomains: () => Promise<string[]>;
uploadCert: () => Promise<any>; uploadCert: () => Promise<any>;
deployOne: (req: { target: any; cert: any }) => Promise<void>; deployOne: (req: { target: any; cert: any }) => Promise<void>;
getDeployTargetList: (req: PageSearch) => Promise<{ list: CertTargetItem[]; total: number }>; getDeployTargetList: (req: PageSearch) => Promise<{ list: CertTargetItem[]; total: number }>;
}): Promise<{ result: any; deployedList: any[] }> { }): Promise<{ result: any; deployedList: any[] }> {
this.logger.info("证书匹配模式部署"); this.logger.info("证书匹配模式部署");
const certDomains = req.getCertDomains(); const certDomains = await req.getCertDomains();
const certTargetList = await this.getAutoMatchedTargets({ const certTargetList = await this.getAutoMatchedTargets({
targetName: req.targetName, targetName: req.targetName,
pageSize: 200, pageSize: 200,
@@ -1,8 +1,8 @@
import { AbstractTaskPlugin, IsTaskPlugin, pluginGroups, RunStrategy, TaskInput } from '@certd/pipeline'; import { optionsUtils } from '@certd/basic';
import { AbstractTaskPlugin, IsTaskPlugin, Pager, PageSearch, pluginGroups, RunStrategy, TaskInput, TaskOutput } from '@certd/pipeline';
import { CertApplyPluginNames, CertReader } from "@certd/plugin-cert";
import { CertInfo, createCertDomainGetterInputDefine, createRemoteSelectInputDefine } from '@certd/plugin-lib'; import { CertInfo, createCertDomainGetterInputDefine, createRemoteSelectInputDefine } from '@certd/plugin-lib';
import { AliyunAccess } from "../../../plugin-lib/aliyun/access/index.js"; import { AliyunAccess } from "../../../plugin-lib/aliyun/access/index.js";
import { optionsUtils } from '@certd/basic';
import { CertApplyPluginNames, CertReader } from "@certd/plugin-cert";
import { AliyunClient, AliyunSslClient, CasCertId } from "../../../plugin-lib/aliyun/lib/index.js"; import { AliyunClient, AliyunSslClient, CasCertId } from "../../../plugin-lib/aliyun/lib/index.js";
@IsTaskPlugin({ @IsTaskPlugin({
name: 'DeployCertToAliyunCDN', name: 'DeployCertToAliyunCDN',
@@ -59,18 +59,6 @@ export class DeployCertToAliyunCDN extends AbstractTaskPlugin {
}) })
accessId!: string; accessId!: string;
@TaskInput(
createRemoteSelectInputDefine({
title: 'CDN加速域名',
helper: '你在阿里云上配置的CDN加速域名,比如:certd.docmirror.cn',
typeName: 'DeployCertToAliyunCDN',
action: DeployCertToAliyunCDN.prototype.onGetDomainList.name,
watches: ['certDomains', 'accessId'],
required: true,
})
)
domainName!: string | string[];
@TaskInput({ @TaskInput({
title: '证书所在地域', title: '证书所在地域',
helper: 'cn-hangzhou和ap-southeast-1,默认cn-hangzhou。国际站用户建议使用ap-southeast-1。', helper: 'cn-hangzhou和ap-southeast-1,默认cn-hangzhou。国际站用户建议使用ap-southeast-1。',
@@ -93,32 +81,107 @@ export class DeployCertToAliyunCDN extends AbstractTaskPlugin {
certName!: string; certName!: string;
@TaskInput({
title: '域名匹配模式',
helper: '根据证书匹配:根据证书域名自动匹配DCDN加速域名自动部署,新增加速域名自动感知,自动新增部署',
component: {
name: 'a-select',
options: [
{ label: '手动选择', value: 'manual' },
{ label: '根据证书匹配', value: 'auto' },
],
},
value: 'manual',
})
domainMatchMode!: 'manual' | 'auto';
@TaskInput(
createRemoteSelectInputDefine({
title: 'CDN加速域名',
helper: '你在阿里云上配置的CDN加速域名,比如:certd.docmirror.cn',
typeName: 'DeployCertToAliyunCDN',
action: DeployCertToAliyunCDN.prototype.onGetDomainList.name,
watches: ['certDomains', 'accessId'],
required: true,
mergeScript: `
return {
show: ctx.compute(({form})=>{
return form.domainMatchMode === "manual"
})
}
`,
pager:true,
})
)
domainName!: string | string[];
@TaskOutput({
title: '已部署过的DCDN加速域名',
})
deployedList!: string[];
async onInstance() { } async onInstance() { }
async execute(): Promise<void> { async execute(): Promise<any> {
this.logger.info('开始部署证书到阿里云cdn'); this.logger.info('开始部署证书到阿里云cdn');
const access = await this.getAccess<AliyunAccess>(this.accessId); const access = await this.getAccess<AliyunAccess>(this.accessId);
if (this.cert == null) {
throw new Error('域名证书参数为空,请检查前置任务')
}
const client = await this.getClient(access);
const sslClient = new AliyunSslClient({ const sslClient = new AliyunSslClient({
access, access,
logger: this.logger, logger: this.logger,
endpoint: this.endpoint || 'cas.aliyuncs.com', endpoint: this.endpoint || 'cas.aliyuncs.com',
}); });
if(this.cert == null){ if (this.domainMatchMode === 'auto') {
throw new Error('域名证书参数为空,请检查前置任务')
const { result, deployedList } = await this.autoMatchedDeploy({
targetName: 'DCDN加速域名',
uploadCert: async () => {
return await sslClient.uploadCertOrGet(this.cert);
},
deployOne: async (req: { target: any, cert: any }) => {
return await this.deployOne(client, req.target, req.cert);
},
getCertDomains:async ()=>{
return sslClient.getCertDomains(this.cert);
},
getDeployTargetList: this.onGetDomainList.bind(this)
});
this.deployedList = deployedList;
return result;
} else {
if (this.isNotChanged()) {
this.logger.info('输入参数未变更,跳过');
return "skip";
}
const certId = await this.getOrUploadCasCert(sslClient);
if (typeof this.domainName === 'string') {
this.domainName = [this.domainName];
}
for (const domain of this.domainName) {
await this.deployOne(client, domain, certId );
}
} }
this.logger.info('部署完成');
}
async getOrUploadCasCert(sslClient: AliyunSslClient) {
let certId: any = this.cert; let certId: any = this.cert;
let certName = this.appendTimeSuffix(this.certName); let certName = this.appendTimeSuffix(this.certName);
if (typeof this.cert === 'object') { if (typeof this.cert === 'object') {
const certInfo = this.cert as CertInfo; const certInfo = this.cert as CertInfo;
const casCert = this.cert as CasCertId; const casCert = this.cert as CasCertId;
if (casCert.certId) { if (casCert.certId) {
certId = casCert.certId; certId = casCert.certId;
} else if (certInfo.crt) { } else if (certInfo.crt) {
certName = this.buildCertName(CertReader.getMainDomain(certInfo.crt)) certName = CertReader.buildCertName(certInfo);
const certIdRes = await sslClient.uploadCertificate({ const certIdRes = await sslClient.uploadCertificate({
name: certName, name: certName,
cert: certInfo, cert: certInfo,
@@ -129,12 +192,14 @@ export class DeployCertToAliyunCDN extends AbstractTaskPlugin {
} }
} }
const client = await this.getClient(access); return {
certId,
if (typeof this.domainName === 'string') { certName,
this.domainName = [this.domainName];
} }
for (const domain of this.domainName) { }
async deployOne(client: any, domain: string, cert: any ) {
const { certId, certName } = cert;
await this.SetCdnDomainSSLCertificate(client, { await this.SetCdnDomainSSLCertificate(client, {
CertId: certId, CertId: certId,
DomainName: domain, DomainName: domain,
@@ -143,9 +208,6 @@ export class DeployCertToAliyunCDN extends AbstractTaskPlugin {
}); });
} }
this.logger.info('部署完成');
}
async getClient(access: AliyunAccess) { async getClient(access: AliyunAccess) {
const client = new AliyunClient({ logger: this.logger }); const client = new AliyunClient({ logger: this.logger });
await client.init({ await client.init({
@@ -183,7 +245,7 @@ export class DeployCertToAliyunCDN extends AbstractTaskPlugin {
} }
} }
async onGetDomainList(data: any) { async onGetDomainList(data: PageSearch) {
if (!this.accessId) { if (!this.accessId) {
throw new Error('请选择Access授权'); throw new Error('请选择Access授权');
} }
@@ -191,9 +253,11 @@ export class DeployCertToAliyunCDN extends AbstractTaskPlugin {
const client = await this.getClient(access); const client = await this.getClient(access);
const pager = new Pager(data)
const params = { const params = {
// 'DomainName': 'aaa', // 'DomainName': 'aaa',
PageSize: 500, PageSize: pager.pageSize || 100,
PageNumber: pager.pageNo || 1,
}; };
const requestOption = { const requestOption = {
@@ -205,8 +269,12 @@ export class DeployCertToAliyunCDN extends AbstractTaskPlugin {
this.checkRet(res); this.checkRet(res);
const pageData = res?.Domains?.PageData; const pageData = res?.Domains?.PageData;
if (!pageData || pageData.length === 0) { if (!pageData || pageData.length === 0) {
throw new Error('找不到CDN域名,您可以手动输入'); return {
list: [],
total: 0,
};
} }
const total = res?.Domains?.TotalCount || 0;
const options = pageData.map((item: any) => { const options = pageData.map((item: any) => {
return { return {
value: item.DomainName, value: item.DomainName,
@@ -214,7 +282,10 @@ export class DeployCertToAliyunCDN extends AbstractTaskPlugin {
domain: item.DomainName, domain: item.DomainName,
}; };
}); });
return optionsUtils.buildGroupOptions(options, this.certDomains); return {
list: optionsUtils.buildGroupOptions(options, this.certDomains),
total,
};
} }
} }
new DeployCertToAliyunCDN(); new DeployCertToAliyunCDN();
@@ -1,15 +1,13 @@
import { AbstractTaskPlugin, CertTargetItem, IsTaskPlugin, PageSearch, pluginGroups, RunStrategy, TaskInput, TaskOutput } from '@certd/pipeline'; import { AbstractTaskPlugin, CertTargetItem, IsTaskPlugin, PageSearch, pluginGroups, RunStrategy, TaskInput, TaskOutput } from '@certd/pipeline';
import dayjs from 'dayjs';
import { import {
CertReader,
createCertDomainGetterInputDefine, createCertDomainGetterInputDefine,
createRemoteSelectInputDefine createRemoteSelectInputDefine
} from "@certd/plugin-lib"; } from "@certd/plugin-lib";
import dayjs from 'dayjs';
import { AliyunAccess } from "../../../plugin-lib/aliyun/access/index.js"; import { AliyunAccess } from "../../../plugin-lib/aliyun/access/index.js";
import { CertInfo } from '@certd/plugin-cert';
import { CertApplyPluginNames } from '@certd/plugin-cert';
import { optionsUtils } from "@certd/basic"; import { optionsUtils } from "@certd/basic";
import { CertApplyPluginNames, CertInfo } from '@certd/plugin-cert';
import { AliyunClient, AliyunSslClient, CasCertId } from "../../../plugin-lib/aliyun/lib/index.js"; import { AliyunClient, AliyunSslClient, CasCertId } from "../../../plugin-lib/aliyun/lib/index.js";
@IsTaskPlugin({ @IsTaskPlugin({
name: 'DeployCertToAliyunDCDN', name: 'DeployCertToAliyunDCDN',
@@ -78,6 +76,7 @@ export class DeployCertToAliyunDCDN extends AbstractTaskPlugin {
action: DeployCertToAliyunDCDN.prototype.onGetDomainList.name, action: DeployCertToAliyunDCDN.prototype.onGetDomainList.name,
watches: ['certDomains', 'accessId'], watches: ['certDomains', 'accessId'],
required: true, required: true,
pager:true,
mergeScript: ` mergeScript: `
return { return {
show: ctx.compute(({form})=>{ show: ctx.compute(({form})=>{
@@ -105,19 +104,17 @@ export class DeployCertToAliyunDCDN extends AbstractTaskPlugin {
if (this.domainMatchMode === 'auto') { if (this.domainMatchMode === 'auto') {
const { result, deployedList } = await this.autoMatchedDeploy({ const { result, deployedList } = await this.autoMatchedDeploy({
targetName: 'DCDN加速域名', targetName: 'CDN加速域名',
uploadCert: async () => { uploadCert: async () => {
return await sslClient.uploadCertOrGet(this.cert); return await sslClient.uploadCertOrGet(this.cert);
}, },
deployOne: async (req: { target: any, cert: any }) => { deployOne: async (req: { target: any, cert: any }) => {
return await this.deployOne(client, req.target.value, req.cert); return await this.deployOne(client, req.target.value, req.cert);
}, },
getCertDomains: ()=>{ getCertDomains: async ()=>{
return this.getCertDomains(); return sslClient.getCertDomains(this.cert);
},
getDeployTargetList: async (req: PageSearch)=>{
return await this.onGetDomainList(req);
}, },
getDeployTargetList: this.onGetDomainList.bind(this)
}); });
this.deployedList = deployedList; this.deployedList = deployedList;
return result; return result;
@@ -127,6 +124,7 @@ export class DeployCertToAliyunDCDN extends AbstractTaskPlugin {
this.logger.info('输入参数未变更,跳过'); this.logger.info('输入参数未变更,跳过');
return "skip"; return "skip";
} }
if (!this.domainName) { if (!this.domainName) {
throw new Error('您还未选择DCDN域名'); throw new Error('您还未选择DCDN域名');
} }
@@ -142,21 +140,6 @@ export class DeployCertToAliyunDCDN extends AbstractTaskPlugin {
this.logger.info('部署完成'); this.logger.info('部署完成');
} }
getCertDomains(): string[]{
const casCert = this.cert as CasCertId;
const certInfo = this.cert as CertInfo;
if (casCert.certId) {
if (!casCert.detail){
throw new Error('未获取到证书域名列表,请尝试强制重新运行一下流水线');
}
return casCert.detail?.domains || [];
}else if (certInfo.crt){
return new CertReader(certInfo).getSimpleDetail().domains || [];
}else{
throw new Error('未获取到证书域名列表,请尝试强制重新运行一下流水线');
}
}
async deployOne(client: any, domainName: string, aliCrtId: CasCertId) { async deployOne(client: any, domainName: string, aliCrtId: CasCertId) {
this.logger.info(`[${domainName}]开始部署`) this.logger.info(`[${domainName}]开始部署`)
const params = await this.buildParams(domainName, aliCrtId); const params = await this.buildParams(domainName, aliCrtId);
@@ -236,4 +236,19 @@ export class AliyunSslClient {
} }
return region; return region;
} }
getCertDomains(cert: CertInfo | number | CasCertId): string[]{
const casCert = cert as CasCertId;
const certInfo = cert as CertInfo;
if (casCert.certId) {
if (!casCert.detail){
throw new Error('未获取到证书域名列表,请尝试强制重新运行一下流水线');
}
return casCert.detail?.domains || [];
}else if (certInfo.crt){
return new CertReader(certInfo).getSimpleDetail().domains || [];
}else{
throw new Error('未获取到证书域名列表,请尝试强制重新运行一下流水线');
}
}
} }