wangjia
3d5bac66b4
IaC 面 (infra/) 与控制面 (server/internal/provision) 双产出，落地 doc/04 §4 「节点是牲口」弹性拓扑与 make-before-break 一键更换。 server/internal/provision: - CloudAdapter 适配层 + Registry（首发 vultr 消耗品池 / hetzner 精品池各一）； 厂商凭证仅从 PROVISION_<VENDOR>_* env 注入，不入库不入 git。 - ProvisionService：CreateNode(幂等键重放不重复开机)、DestroyNode(幂等)、 RotateIP(换 IP 不换机 + version bump)、ListProviders。 - Replace 一键更换：先建后拆，新机 up 先于旧机 draining（容量不下降）， replacement_uuid 幂等键 + replacements 表分步记录，崩溃可续跑不重复。 - RotatePool：池内滚动轮换，并发度 1–2。 - cmd/nodectl CLI：create/destroy/rotate-ip/replace/rotate-pool/providers。 - 单测（mock 厂商 API + 内存 Store）：幂等重放、make-before-break 时序断言、 开机失败/探活超时→destroyed+失败计数+告警钩子、崩溃续跑、RotatePool。 infra/: - terraform/：探针机 + 控制面基线模块化（probe / control-plane）+ README， 低频基线进 state，节点不进 Terraform。 - cloud-init/node.yaml.tmpl：节点引导模板（注入一次性 bootstrap token，task #5）。 - identity-isolation.md：身份隔离登记表（doc/06 §2 红线，无任何凭证）。 migrations/000008：nodes 增 provider_instance_id/elastic_ip_id、node_events 增 ip_rotated、provision_idempotency / replacements 表（附加式，不动现网）。 红线：仅面向新厂商池，绝不纳管现网生产 EC2(deploy/ marzban)。 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
81 lines
3.0 KiB
Go
81 lines
3.0 KiB
Go
package provision
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
)
|
|
|
|
// Region is a vendor region/datacenter descriptor.
|
|
type Region struct {
|
|
// ID is the vendor-native region identifier (e.g. "hkg", "nbg1").
|
|
ID string
|
|
// Country is the ISO-3166 alpha-2 country code (e.g. "HK", "JP").
|
|
Country string
|
|
// City is a human-readable city name (optional).
|
|
City string
|
|
}
|
|
|
|
// Instance is the vendor-side view of a freshly created machine.
|
|
type Instance struct {
|
|
// ID is the vendor-native instance identifier (used to destroy / rotate).
|
|
ID string
|
|
// IP is the public IPv4 address.
|
|
IP string
|
|
// Region echoes the region the instance was created in.
|
|
Region string
|
|
}
|
|
|
|
// CreateInput carries everything an adapter needs to boot one node.
|
|
type CreateInput struct {
|
|
// Region is the vendor-native region ID.
|
|
Region string
|
|
// Plan is the vendor-native instance size ID.
|
|
Plan string
|
|
// Label is a vendor-side label/hostname (we pass the node UUID).
|
|
Label string
|
|
// UserData is the rendered cloud-init document (base64-encoded by the
|
|
// adapter if the vendor requires it). It carries the one-time bootstrap
|
|
// token, so it MUST NOT be logged.
|
|
UserData string
|
|
// SSHKeyIDs are optional vendor-registered SSH key IDs.
|
|
SSHKeyIDs []string
|
|
// Tags are optional vendor-side tags.
|
|
Tags []string
|
|
}
|
|
|
|
// CloudAdapter is the unified interface every vendor adapter implements
|
|
// (doc/04 §4: "Terraform + 厂商 API 适配层"). Implementations live in
|
|
// providers/ and read their credentials only from independent secrets.
|
|
type CloudAdapter interface {
|
|
// Kind returns the adapter key matching providers.api_kind.
|
|
Kind() string
|
|
// CreateInstance boots a node and returns once the vendor has assigned an
|
|
// instance ID and IP (not necessarily once the OS is up).
|
|
CreateInstance(ctx context.Context, in CreateInput) (*Instance, error)
|
|
// DestroyInstance tears down the instance and releases its primary IP.
|
|
// It must be idempotent: destroying an already-gone instance is a no-op.
|
|
DestroyInstance(ctx context.Context, instanceID string) error
|
|
// AttachIP allocates a fresh elastic IP, binds it to the instance, and
|
|
// returns the new public IP. Only meaningful when SupportsElasticIP.
|
|
AttachIP(ctx context.Context, instanceID string) (newIP string, err error)
|
|
// ListRegions enumerates the vendor's regions.
|
|
ListRegions(ctx context.Context) ([]Region, error)
|
|
// SupportsElasticIP reports whether RotateIP (change IP, keep the box) is
|
|
// available for this vendor.
|
|
SupportsElasticIP() bool
|
|
}
|
|
|
|
// AdapterFactory resolves the CloudAdapter for a given provider row.
|
|
// providers/Registry implements it; tests inject a fake.
|
|
type AdapterFactory interface {
|
|
For(p *Provider) (CloudAdapter, error)
|
|
}
|
|
|
|
// ErrElasticIPUnsupported is returned by RotateIP when the provider's adapter
|
|
// does not support elastic IPs.
|
|
var ErrElasticIPUnsupported = errors.New("provision: provider does not support elastic IP")
|
|
|
|
// ErrNoCredentials signals an adapter could not find its credentials in the
|
|
// configured secrets (env/file).
|
|
var ErrNoCredentials = errors.New("provision: vendor credentials not configured")
|