feat: 部署函数支持添加云梯默认标签(运营部门,运营产品,负责人)

Author: wangpand0508

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "tencent-component-toolkit",
-  "version": "2.24.2",
+  "version": "2.24.3",
   "description": "Tencent component toolkit",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
@@ -66,12 +66,12 @@
     "@semantic-release/git": "^9.0.0",
     "@semantic-release/npm": "^7.0.4",
     "@semantic-release/release-notes-generator": "^9.0.1",
+    "@types/axios": "^0.14.0",
     "@types/react-grid-layout": "^1.1.2",
     "@types/uuid": "^8.3.1",
     "@typescript-eslint/eslint-plugin": "^4.14.0",
     "@typescript-eslint/parser": "^4.14.0",
     "@ygkit/secure": "^0.0.3",
-    "axios": "^0.21.0",
     "dotenv": "^8.2.0",
     "eslint": "^7.18.0",
     "eslint-config-prettier": "^6.10.0",
@@ -90,6 +90,7 @@
     "@types/jest": "^26.0.20",
     "@types/node": "^14.14.31",
     "@ygkit/request": "^0.1.8",
+    "axios": "^0.21.0",
     "camelcase": "^6.2.0",
     "cos-nodejs-sdk-v5": "^2.9.20",
     "dayjs": "^1.10.4",

package.json

@@ -151,23 +151,6 @@ export default class Apigw {
       outputs.usagePlan = usagePlan;
     }
 
-    try {
-      const { tags } = inputs;
-      if (tags) {
-        await this.tagClient.deployResourceTags({
-          tags: tags.map(({ key, value }) => ({ TagKey: key, TagValue: value })),
-          resourceId: serviceId,
-          serviceType: ApiServiceType.apigw,
-          resourcePrefix: 'service',
-        });
-        if (tags.length > 0) {
-          outputs.tags = tags;
-        }
-      }
-    } catch (e) {
-      console.log(`[TAG] ${e.message}`);
-    }
-
     // return this.formatApigwOutputs(outputs);
     return outputs;
   }

src/modules/apigw/index.ts

@@ -8,6 +8,7 @@ const ACTIONS = [
   'CreateRole',
   'GetRole',
   'DeleteRole',
+  'GetUserAppId',
 ] as const;
 
 export type ActionType = typeof ACTIONS[number];

src/modules/cam/apis.ts

@@ -112,4 +112,19 @@ export default class Cam {
   async CheckSCFExcuteRole() {
     return this.isRoleExist('QCS_SCFExcuteRole');
   }
+
+  /** 查询用户AppId */
+  async GetUserAppId(): Promise<{ OwnerUin: string; AppId: string; Uin: string }> {
+    try {
+      return this.request({
+        Action: 'GetUserAppId',
+      });
+    } catch (error) {
+      return {
+        OwnerUin: '',
+        AppId: '',
+        Uin: '',
+      };
+    }
+  }
 }

src/modules/cam/index.ts

@@ -0,0 +1,3 @@
+export const WebServerImageDefaultPort = 9000;
+
+export const YunTiTagDocHref = 'https://doc.weixin.qq.com/doc/w3_AQ8AWgYkAOEEeD1cr34R7S66r8ONY?scode=AJEAIQdfAAoiSWrYcZAOMAswb5AFM';

src/modules/scf/constants.ts

@@ -2,8 +2,8 @@ import { ApigwRemoveInputs } from './../apigw/interface';
 import { ActionType } from './apis';
 import { RegionType, ApiServiceType, CapiCredentials } from './../interface';
 import { Capi } from '@tencent-sdk/capi';
-import { ApiTypeError } from '../../utils/error';
-import { deepClone, strip } from '../../utils';
+import { ApiError, ApiTypeError } from '../../utils/error';
+import { deepClone, getQcsResourceId, isAddedYunTiTags, strip } from '../../utils';
 import TagsUtils from '../tag/index';
 import ApigwUtils from '../apigw';
 import CONFIGS from './config';
@@ -25,6 +25,9 @@ import ScfEntity from './entities/scf';
 import AliasEntity from './entities/alias';
 import VersionEntity from './entities/version';
 import { ConcurrencyEntity } from './entities/concurrency';
+import { default as Cam } from '../cam';
+import { YunTiTagDocHref } from './constants';
+import { checkYunTi } from '../../utils/api';
 
 /** 云函数组件 */
 export default class Scf {
@@ -262,6 +265,29 @@ export default class Scf {
           },
         });
 
+        // 如果触发器类型为 API 网关触发器 且当前账号是自研账号，则需要为 API 网关触发器添加函数标签
+        if (trigger.Type === ApiServiceType.apigw) {
+          try {
+            const cam = new Cam(this.credentials, this.region);
+            const userInfo = await cam.GetUserAppId();
+            const isYunTi = await checkYunTi(userInfo?.OwnerUin);
+            if (isYunTi) {
+              await this.tagClient.deployResourceTags({
+                tags: funcInfo.Tags.map(({ Key, Value }) => ({ TagKey: Key, TagValue: Value })),
+                resourceId: getQcsResourceId(
+                  ApiServiceType.apigw,
+                  this.region,
+                  userInfo.OwnerUin,
+                  `service/${triggerOutput?.serviceId}`,
+                ),
+                serviceType: ApiServiceType.apigw,
+                resourcePrefix: 'service',
+              });
+            }
+          } catch (error) {
+            console.log('adding tags for trigger resource error:', error?.message)
+          }
+        }
         deployList[i] = {
           NeedCreate: trigger?.NeedCreate,
           ...triggerOutput,
@@ -278,6 +304,23 @@ export default class Scf {
     const functionName = inputs.name;
     const { ignoreTriggers = false } = inputs;
 
+    // 自研账号,需要检查函数标签是否配置云梯标签(运营部门、运营产品、负责人); 非自研账号，不需要检查
+    const cam = new Cam(this.credentials, this.region);
+    const userInfo = await cam.GetUserAppId();
+    const isYunTi = await checkYunTi(userInfo?.OwnerUin);
+    if (isYunTi) {
+      if (
+        !isAddedYunTiTags(
+          Object.entries(inputs.tags || {}).map(([TagKey, TagValue]) => ({ TagKey, TagValue })),
+        )
+      ) {
+        throw new ApiError({
+          type: 'API_SCF_DeployFunction',
+          message: `部署失败：自研用户请按照运营部门、运营产品、负责人正确配置函数标签,标签配置指南请参考：${YunTiTagDocHref}`,
+        });
+      }
+    }
+
     // 在部署前，检查函数初始状态，如果初始为 CreateFailed，尝试先删除，再重新创建
     let funcInfo = await this.scf.getInitialStatus({ namespace, functionName });
 

src/modules/scf/index.ts

@@ -1,5 +1,6 @@
 import { Capi } from '@tencent-sdk/capi';
-import { deepClone } from '.';
+import axios from 'axios';
+import { deepClone, getYunTiApiUrl } from '.';
 import { ApiServiceType } from '../modules/interface';
 import { ApiError } from './error';
 
@@ -94,3 +95,39 @@ export function ApiFactory<ACTIONS_T extends readonly string[]>({
 
   return APIS;
 }
+
+/**
+ * checkYunTi 查询账号是否是自研账号
+ * @param uin 客户主账号
+ * @returns true: 是自研账号; false: 不是自研账号
+ */
+export const checkYunTi = async (uin: string) => {
+  let isYunTi = false;
+  try {
+    const params = JSON.stringify({
+      id: '1',
+      jsonrpc: '2.0',
+      method: 'checkOwnUin',
+      params: { ownUin: [uin] },
+    });
+    const apiUrl = getYunTiApiUrl();
+    const res = await axios.post(apiUrl, params, {
+      headers: { 'content-type': 'application/json' },
+    });
+    if (res?.data?.error?.message) {
+      throw new Error(res.data.error.message);
+    } else {
+      isYunTi =
+        res?.data?.result?.data &&
+        res.data.result.data?.some(
+          (item: { ownUin: string; appId: string }) => item?.ownUin === uin,
+        );
+      console.log('check yunTi ownUin:', isYunTi);
+    }
+  } catch (error) {
+    isYunTi = false;
+    console.log('checkYunTiOwnUin error:', error);
+    throw error;
+  }
+  return isYunTi;
+};

src/utils/api.ts

@@ -3,6 +3,7 @@ import path from 'path';
 import camelCase from 'camelcase';
 import { PascalCase } from 'type-fest';
 import { CamelCasedProps, PascalCasedProps } from '../modules/interface';
+import crypto from 'crypto';
 
 // TODO: 将一些库换成 lodash
 
@@ -273,3 +274,45 @@ export const getQcsResourceId = (service: string, region: string, uin: string, s
   // 云资源六段式
   return `qcs::${service}:${region}:uin/${uin}:${suffix}`;
 };
+
+/**
+ * hmacSha1 加密HmacSHA1
+ * @param text 加密文本
+ * @param key  加密密钥
+ * @returns
+ */
+export const hmacSha1 = (text: string, key: string) => {
+  return crypto.createHmac('sha1', key).update(text).digest('hex');
+};
+
+/**
+ * getYunTiApiUrl 查询云梯API地址
+ * @returns 云梯API地址
+ */
+export const getYunTiApiUrl = (): string => {
+  const apiKey = process.env.SLS_YUNTI_API_KEY || '';
+  const apiSecret = process.env.SLS_YUNTI_API_SECRET || '';
+  const apiUrl = process.env.SLS_YUNTI_API_URL;
+  const timeStamp = Math.floor(Date.now() / 1000);
+  const apiSign = hmacSha1(`${timeStamp}${apiKey}`, apiSecret);
+  const url = `${apiUrl}?api_key=${apiKey}&api_ts=${timeStamp}&api_sign=${apiSign}`;
+  return url;
+};
+
+/**
+ * 是否配置云梯标签
+ * @param tags 标签列表
+ * @returns true: 已配置云梯标签; false: 未配置云梯标签
+ */
+export const isAddedYunTiTags = (tags: { TagKey: string; TagValue?: string }[]): boolean => {
+  let result = false;
+  if (
+    tags?.length > 0 &&
+    ['运营部门', '运营产品', '负责人'].every((key) =>
+      tags.some((item) => item.TagKey === key && !!item.TagValue),
+    )
+  ) {
+    result = true;
+  }
+  return result;
+};