feat: Update v3.1.1

perf: 设置资产账号的默认值，方便导入

GITSHA

@@ -0,0 +1 @@
+012da07999d836ea137eb0124d7f49b935fa75e5

apps/accounts/serializers/account/account.py

@@ -81,7 +81,7 @@ class AccountAssetSerializer(serializers.ModelSerializer):
 
     def to_internal_value(self, data):
         if isinstance(data, dict):
-            i = data.get('id')
+            i = data.get('id') or data.get('pk')
         else:
             i = data
 

apps/assets/serializers/asset/common.py

@@ -71,7 +71,8 @@ class AssetAccountSerializer(
     template = serializers.BooleanField(
         default=False, label=_("Template"), write_only=True
     )
-    name = serializers.CharField(max_length=128, required=True, label=_("Name"))
+    name = serializers.CharField(max_length=128, required=False, label=_("Name"))
+    secret_type = serializers.CharField(max_length=64, default='password', label=_("Secret type"))
 
     class Meta:
         model = Account

apps/common/drf/parsers/base.py

@@ -111,7 +111,7 @@ class BaseFileParser(BaseParser):
         return {'pk': obj_id, 'name': obj_name}
 
     def parse_value(self, field, value):
-        if value is '-':
+        if value == '-' and field and field.allow_null:
             return None
         elif hasattr(field, 'to_file_internal_value'):
             value = field.to_file_internal_value(value)

apps/ops/ansible/inventory.py

@@ -139,12 +139,12 @@ class JMSInventory:
             self.make_ssh_account_vars(host, asset, account, automation, protocols, platform, gateway)
         return host
 
-    def get_asset_accounts(self, asset):
+    def get_asset_sorted_accounts(self, asset):
-        from assets.const import Connectivity
+        accounts = list(asset.accounts.filter(is_active=True))
-        accounts = asset.accounts.filter(is_active=True).order_by('-privileged', '-date_updated')
+        connectivity_score = {'ok': 2, '-': 1, 'err': 0}
-        accounts_connectivity_ok = list(accounts.filter(connectivity=Connectivity.OK))
+        sort_key = lambda x: (x.privileged, connectivity_score.get(x.connectivity, 0), x.date_updated)
-        accounts_connectivity_no = list(accounts.exclude(connectivity=Connectivity.OK))
+        accounts_sorted = sorted(accounts, key=sort_key, reverse=True)
-        return accounts_connectivity_ok + accounts_connectivity_no
+        return accounts_sorted
 
     @staticmethod
     def get_account_prefer(account_prefer):
@@ -163,28 +163,23 @@ class JMSInventory:
         return account
 
     def select_account(self, asset):
-        accounts = self.get_asset_accounts(asset)
+        accounts = self.get_asset_sorted_accounts(asset)
-        if not accounts or self.account_policy == 'skip':
+        if not accounts:
             return None
-        account_selected = None
 
-        # 首先找到特权账号
+        refer_account = self.get_refer_account(accounts)
-        privileged_accounts = list(filter(lambda account: account.privileged, accounts))
+        if refer_account:
+            return refer_account
 
-        # 不同类型的账号选择，优先使用提供的名称
+        account_selected = accounts[0]
-        refer_privileged_account = self.get_refer_account(privileged_accounts)
+        if self.account_policy == 'skip':
-        if self.account_policy in ['privileged_only', 'privileged_first']:
+            return None
-            first_privileged = privileged_accounts[0] if privileged_accounts else None
+        elif self.account_policy == 'privileged_first':
-            account_selected = refer_privileged_account or first_privileged
-
-        # 此策略不管是否匹配到账号都需强制返回
-        if self.account_policy == 'privileged_only':
             return account_selected
-
+        elif self.account_policy == 'privileged_only' and account_selected.privileged:
-        if not account_selected:
+            return account_selected
-            account_selected = self.get_refer_account(accounts)
+        else:
-
+            return None
-        return account_selected or accounts[0]
 
     def generate(self, path_dir):
         hosts = []

apps/ops/models/job.py

@@ -46,7 +46,7 @@ class JMSPermedInventory(JMSInventory):
         self.user = user
         self.assets_accounts_mapper = self.get_assets_accounts_mapper()
 
-    def get_asset_accounts(self, asset):
+    def get_asset_sorted_accounts(self, asset):
         return self.assets_accounts_mapper.get(asset.id, [])
 
     def get_assets_accounts_mapper(self):

apps/perms/serializers/permission.py

@@ -1,7 +1,6 @@
 # -*- coding: utf-8 -*-
 #
-
+from django.db.models import Q
-from django.db.models import Q, QuerySet
 from django.utils.translation import ugettext_lazy as _
 from rest_framework import serializers
 
@@ -119,7 +118,10 @@ class AssetPermissionSerializer(BulkOrgResourceModelSerializer):
             return
         assets = self.get_all_assets(nodes, assets)
         accounts = self.create_accounts(assets)
-        push_accounts_to_assets_task.delay([str(account.id) for account in accounts])
+        account_ids = [str(account.id) for account in accounts]
+        slice_count = 20
+        for i in range(0, len(account_ids), slice_count):
+            push_accounts_to_assets_task.delay(account_ids[i:i + slice_count])
 
     def validate_accounts(self, usernames: list[str]):
         template_ids = []