perf: 优化腾讯云CLB插件,支持非sni情况,sni情况支持填写多个域名

v2
xiaojunnuo 2025-01-06 23:47:08 +08:00
parent 1cb4a539cc
commit 635b042690
1 changed files with 50 additions and 37 deletions

View File

@ -6,7 +6,7 @@ import { TencentAccess } from '@certd/plugin-lib';
title: '腾讯云-部署到CLB',
icon: 'svg:icon-tencentcloud',
group: pluginGroups.tencent.key,
desc: '暂时只支持单向认证证书,暂时只支持通用负载均衡必须开启sni',
desc: '暂时只支持单向认证证书,暂时只支持通用负载均衡',
default: {
strategy: {
runStrategy: RunStrategy.SkipWhenSucceed,
@ -59,16 +59,22 @@ export class DeployCertToTencentCLB extends AbstractTaskPlugin {
@TaskInput({
title: '监听器ID',
helper: '如果没有配置则根据域名或负载均衡id匹配监听器',
required: true,
})
listenerId!: string;
@TaskInput({
title: '域名',
required: true,
helper: '要更新的支持https的负载均衡的域名',
required: false,
component: {
name: 'a-select',
vModel: 'value',
open: false,
mode: 'tags',
},
helper: '如果开启了sni则此项必须填写未开启则不要填写',
})
domain!: string;
domain!: string | string[];
@TaskInput({
title: '域名证书',
@ -122,33 +128,48 @@ export class DeployCertToTencentCLB extends AbstractTaskPlugin {
async execute(): Promise<void> {
const client = this.client;
const lastCertId = await this.getCertIdFromProps(client);
if (!this.domain) {
if (!this.domain || this.domain.length === 0) {
await this.updateListener(client);
} else {
await this.updateByDomainAttr(client);
const domains = Array.isArray(this.domain) ? this.domain : [this.domain];
for (const domain of domains) {
this.logger.info(`开始更新域名证书:${domain},请确保已经开启了sni`);
const lastCertId = await this.getCertIdFromProps(client, domain);
await this.updateByDomainAttr(client, domain);
const checkDeployed = async (wait = 5) => {
await this.ctx.utils.sleep(wait * 1000);
this.logger.info(`等待${wait}`);
const newCertId = await this.getCertIdFromProps(client, domain);
this.logger.info(`oldCertId:${lastCertId} , newCertId:${newCertId}`);
if ((lastCertId && newCertId === lastCertId) || (!lastCertId && !newCertId)) {
return false;
}
this.logger.info('腾讯云证书ID:', newCertId);
return true;
};
let count = 0;
while (true) {
count++;
const res = await checkDeployed(5);
if (res) {
break;
}
if (count > 6) {
throw new Error('部署可能失败请确认是否已开启sni');
}
}
}
}
try {
await this.ctx.utils.sleep(2000);
let newCertId = await this.getCertIdFromProps(client);
if ((lastCertId && newCertId === lastCertId) || (!lastCertId && !newCertId)) {
await this.ctx.utils.sleep(2000);
newCertId = await this.getCertIdFromProps(client);
}
if (newCertId === lastCertId) {
return;
}
this.logger.info('腾讯云证书ID:', newCertId);
} catch (e) {
this.logger.warn('查询腾讯云证书失败', e);
}
return;
}
async getCertIdFromProps(client: any) {
const listenerRet = await this.getListenerList(client, this.loadBalancerId, [this.listenerId]);
return this.getCertIdFromListener(listenerRet[0], this.domain);
async getCertIdFromProps(client: any, domain: string) {
const listenerRet = await this.getListenerList(client, this.loadBalancerId, this.listenerId ? [this.listenerId] : null);
return this.getCertIdFromListener(listenerRet[0], domain);
}
getCertIdFromListener(listener: any, domain: string) {
@ -178,21 +199,13 @@ export class DeployCertToTencentCLB extends AbstractTaskPlugin {
return ret;
}
async updateByDomainAttr(client: any) {
async updateByDomainAttr(client: any, domain) {
const params: any = this.buildProps();
params.Domain = this.domain;
params.Domain = domain;
const ret = await client.ModifyDomainAttributes(params);
this.checkRet(ret);
this.logger.info(
'设置腾讯云CLB证书(sni)成功:',
ret.RequestId,
'->loadBalancerId:',
this.loadBalancerId,
'listenerId',
this.listenerId,
'domain:',
this.domain
);
this.logger.info('设置腾讯云CLB证书(sni)成功:', ret.RequestId, '->loadBalancerId:', this.loadBalancerId, 'listenerId', this.listenerId, 'domain:', domain);
return ret;
}
appendTimeSuffix(name: string) {