mirror of
https://github.com/certd/certd.git
synced 2026-04-15 13:32:37 +08:00
117 lines
3.0 KiB
TypeScript
117 lines
3.0 KiB
TypeScript
import { AbstractTaskPlugin, IAccessService, ILogger, IsTaskPlugin, RunStrategy, TaskInput, TaskOutput } from "@certd/pipeline";
|
||
import tencentcloud from "tencentcloud-sdk-nodejs/index";
|
||
import dayjs from "dayjs";
|
||
|
||
@IsTaskPlugin({
|
||
name: "UploadCertToTencent",
|
||
title: "上传证书到腾讯云",
|
||
desc: "上传成功后输出：tencentCertId",
|
||
default: {
|
||
strategy: {
|
||
runStrategy: RunStrategy.SkipWhenSucceed,
|
||
},
|
||
},
|
||
})
|
||
export class UploadToTencentPlugin extends AbstractTaskPlugin {
|
||
@TaskInput({ title: "证书名称" })
|
||
name!: string;
|
||
|
||
@TaskInput({
|
||
title: "Access授权",
|
||
helper: "access授权",
|
||
component: {
|
||
name: "pi-access-selector",
|
||
type: "tencent",
|
||
},
|
||
required: true,
|
||
})
|
||
accessId!: string;
|
||
|
||
@TaskInput({
|
||
title: "域名证书",
|
||
helper: "请选择前置任务输出的域名证书",
|
||
component: {
|
||
name: "pi-output-selector",
|
||
},
|
||
required: true,
|
||
})
|
||
cert!: any;
|
||
|
||
@TaskOutput({
|
||
title: "上传成功后的腾讯云CertId",
|
||
})
|
||
tencentCertId?: string;
|
||
|
||
accessService!: IAccessService;
|
||
logger!: ILogger;
|
||
|
||
async onInstance() {
|
||
this.accessService = this.ctx.accessService;
|
||
this.logger = this.ctx.logger;
|
||
}
|
||
|
||
async execute(): Promise<void> {
|
||
const { accessId, name, cert } = this;
|
||
const accessProvider = this.accessService.getById(accessId);
|
||
const certName = this.appendTimeSuffix(name || cert.domain);
|
||
const client = this.getClient(accessProvider);
|
||
|
||
const params = {
|
||
CertificatePublicKey: cert.crt,
|
||
CertificatePrivateKey: cert.key,
|
||
Alias: certName,
|
||
};
|
||
const ret = await client.UploadCertificate(params);
|
||
this.checkRet(ret);
|
||
this.logger.info("证书上传成功：tencentCertId=", ret.CertificateId);
|
||
|
||
this.tencentCertId = ret.CertificateId;
|
||
}
|
||
|
||
appendTimeSuffix(name: string) {
|
||
if (name == null) {
|
||
name = "certd";
|
||
}
|
||
return name + "-" + dayjs().format("YYYYMMDD-HHmmss");
|
||
}
|
||
|
||
getClient(accessProvider: any) {
|
||
const SslClient = tencentcloud.ssl.v20191205.Client;
|
||
|
||
const clientConfig = {
|
||
credential: {
|
||
secretId: accessProvider.secretId,
|
||
secretKey: accessProvider.secretKey,
|
||
},
|
||
region: "",
|
||
profile: {
|
||
httpProfile: {
|
||
endpoint: "ssl.tencentcloudapi.com",
|
||
},
|
||
},
|
||
};
|
||
|
||
return new SslClient(clientConfig);
|
||
}
|
||
|
||
// async rollback({ input }) {
|
||
// const { accessId } = input;
|
||
// const accessProvider = this.accessService.getById(accessId);
|
||
// const client = this.getClient(accessProvider);
|
||
//
|
||
// const { tencentCertId } = context;
|
||
// const params = {
|
||
// CertificateId: tencentCertId,
|
||
// };
|
||
// const ret = await client.DeleteCertificate(params);
|
||
// this.checkRet(ret);
|
||
// this.logger.info("证书删除成功：DeleteResult=", ret.DeleteResult);
|
||
// delete context.tencentCertId;
|
||
// }
|
||
checkRet(ret: any) {
|
||
if (!ret || ret.Error) {
|
||
throw new Error("执行失败：" + ret.Error.Code + "," + ret.Error.Message);
|
||
}
|
||
}
|
||
}
|