jumpserver/apps/ops/mixin.py
fit2bot 3f4141ca0b
merge: with pam (#14911)
* perf: change i18n

* perf: pam

* perf: change translate

* perf: add check account

* perf: add date field

* perf: add account filter

* perf: remove some js

* perf: add account status action

* perf: update pam

* perf: 修改 discover account

* perf: update filter

* perf: update gathered account

* perf: 修改账号同步

* perf: squash migrations

* perf: update pam

* perf: change i18n

* perf: update account risk

* perf: 更新风险发现

* perf: remove css

* perf: Admin connection token

* perf: Add a switch to check connectivity after changing the password, and add a custom ssh command for push tasks

* perf: Modify account migration files

* perf: update pam

* perf: remove to check account dir

* perf: Admin connection token

* perf: update check account

* perf: 优化发送结果

* perf: update pam

* perf: update bulk update create

* perf: prepaire using thread timer for bulk_create_decorator

* perf: update bulk create decorator

* perf: 优化 playbook manager

* perf: 优化收集账号的报表

* perf: Update poetry

* perf: Update Dockerfile with new base image tag

* fix: Account migrate 0012 file

* perf: 修改备份

* perf: update pam

* fix: Expand resource_type filter to include raw type

* feat: PAM Service (#14552)

* feat: PAM Service

* perf: import package name

---------

Co-authored-by: jiangweidong <1053570670@qq.com>

* perf: Change secret dashboard (#14551)

Co-authored-by: feng <1304903146@qq.com>

* perf: update migrations

* perf: 修改支持 pam

* perf: Change secret record table dashboard

* perf: update status

* fix: Automation send report

* perf: Change secret report

* feat: windows accounts gather

* perf: update change status

* perf: Account backup

* perf: Account backup report

* perf: Account migrate

* perf: update service to application

* perf: update migrations

* perf: update logo

* feat: oracle accounts gather (#14571)

* feat: oracle accounts gather

* feat: sqlserver accounts gather

* feat: postgresql accounts gather

* feat: mysql accounts gather

---------

Co-authored-by: wangruidong <940853815@qq.com>

* feat: mongodb accounts gather

* perf: Change secret

* perf: Migrate

* perf: Merge conflicting migration files

* perf: Change secret

* perf: Automation filter org

* perf: Account push

* perf: Random secret string

* perf: Enhance SQL query and update risk handling in accounts

* perf: Ticket filter assignee_id

* perf: 修改 account remote

* perf: 修改一些 adhoc 任务

* perf: Change secret

* perf: Remove push account extra api

* perf: update status

* perf: The entire organization can view activity log

* fix: risk field check

* perf: add account details api

* perf: add demo mode

* perf: Delete gather_account

* perf: Perfect solution to account version problem

* perf: Update status action to handle multiple accounts

* perf: Add GatherAccountDetailField and update serializers

* perf: Display account history in combination with password change records

* perf: Lina translate

* fix: Update mysql_filter to handle nested user info

* perf: Admin connection token validate_permission account

* perf: copy move account

* perf: account filter risk

* perf: account risk filter

* perf: Copy move account failed message

* fix: gather account sync account to asset

* perf: Pam dashboard

* perf: Account dashboard total accounts

* perf: Pam dashboard

* perf: Change secret filter account secret_reset

* perf: 修改 risk filter

* perf: pam translate

* feat: Check for leaked duplicate passwords. (#14711)

* feat: Check for leaked duplicate passwords.

* perf: Use SQLite instead of txt as leak password database

---------

Co-authored-by: jiangweidong <1053570670@qq.com>
Co-authored-by: 老广 <ibuler@qq.com>

* perf: merge with remote

* perf: Add risk change_password_add handle

* perf: Pam dashboard

* perf: check account manager import

* perf: 重构扫描

* perf: 修改 db

* perf: Gather account manager

* perf: update change db lib

* perf: dashboard

* perf: Account gather

* perf: 修改 asset get queryset

* perf: automation report

* perf: Pam account

* perf: Pam dashboard api

* perf: risk add account

* perf: 修改 risk check

* perf: Risk account

* perf: update risk add reopen action

* perf: add pylintrc

* Revert "perf: automation report"

This reverts commit 22aee54207.

* perf: check account engine

* perf: Perf: Optimism Gather Report Style

* Perf: Remove unuser actions

* Perf: Perf push account

* perf: perf gather account

* perf: Automation report

* perf: Push account recorder

* perf: Push account record

* perf: Pam dashboard

* perf: perf

* perf: update intergration

* perf: integrations application detail add account tab page

* feat: Custom change password supports configuration of interactive items

* perf: Go and Python demo code

* perf: Custom secret change

* perf: add user filter

* perf: translate

* perf: Add demo code docs

* perf: update some i18n

* perf: update some i18n

* perf: Add Java, Node, Go, and cURL demo code

* perf: Translate

* perf: Change secret translate

* perf: Translate

* perf: update some i18n

* perf: translate

* perf: Ansible playbook

* perf: update some choice

* perf: update some choice

* perf: update account serializer remote unused code

* perf: conflict

* perf: update import

---------

Co-authored-by: ibuler <ibuler@qq.com>
Co-authored-by: feng <1304903146@qq.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: wangruidong <940853815@qq.com>
Co-authored-by: jiangweidong <1053570670@qq.com>
Co-authored-by: feng626 <57284900+feng626@users.noreply.github.com>
Co-authored-by: zhaojisen <1301338853@qq.com>
2025-02-21 16:39:57 +08:00

216 lines
7.0 KiB
Python

# -*- coding: utf-8 -*-
#
import abc
from datetime import timedelta
from celery.schedules import crontab
from django.db import models
from django.utils import timezone
from django.utils.translation import gettext_lazy as _
from django_celery_beat.models import CrontabSchedule, IntervalSchedule, ClockedSchedule
from rest_framework import serializers
from .celery.utils import (
create_or_update_celery_periodic_tasks, disable_celery_periodic_task,
delete_celery_periodic_task,
)
__all__ = [
'PeriodTaskModelMixin', 'PeriodTaskSerializerMixin',
]
class PeriodTaskModelQuerySet(models.QuerySet):
def delete(self, *args, **kwargs):
for obj in self:
obj.delete()
return super().delete(*args, **kwargs)
class PeriodTaskModelMixin(models.Model):
name = models.CharField(
max_length=128, unique=False, verbose_name=_("Name")
)
is_periodic = models.BooleanField(default=False, verbose_name=_("Periodic run"))
interval = models.IntegerField(
default=24, null=True, blank=True, verbose_name=_("Interval"),
)
crontab = models.CharField(
blank=True, max_length=128, default='', verbose_name=_("Crontab"),
)
start_time = models.DateTimeField(
blank=True, null=True,
verbose_name=_('Start Datetime'),
help_text=_(
'Datetime when the schedule should begin '
'triggering the task to run'
),
)
date_last_run = models.DateTimeField(blank=True, null=True, verbose_name=_("Date last run"))
objects = PeriodTaskModelQuerySet.as_manager()
@abc.abstractmethod
def get_register_task(self):
period_name, task, args, kwargs = None, None, (), {}
return period_name, task, args, kwargs
@property
def interval_ratio(self):
return 3600, 'h'
@property
def interval_display(self):
unit = self.interval_ratio[1]
if not self.interval:
return ''
return '{} {}'.format(self.interval, unit)
def set_period_schedule(self):
name, task, args, kwargs = self.get_register_task()
is_active = self.is_active if hasattr(self, 'is_active') else True
if not self.is_periodic or not is_active:
disable_celery_periodic_task(name)
return
cron = interval = None
if self.crontab:
cron = self.crontab
elif self.interval:
interval = self.interval * self.interval_ratio[0]
tasks = {
name: {
'task': task,
'interval': interval,
'crontab': cron,
'args': args,
'kwargs': kwargs,
'enabled': True,
'start_time': self.start_time,
}
}
create_or_update_celery_periodic_tasks(tasks)
def execute(self, *args, **kwargs):
self.date_last_run = timezone.now()
def save(self, *args, **kwargs):
instance = super().save(**kwargs)
self.set_period_schedule()
return instance
def delete(self, using=None, keep_parents=False):
name = self.get_register_task()[0]
instance = super().delete(using=using, keep_parents=keep_parents)
delete_celery_periodic_task(name)
return instance
@property
def periodic_display(self):
if self.is_periodic and self.crontab:
return _('Crontab') + " ( {} )".format(self.crontab)
if self.is_periodic and self.interval:
return _('Interval') + " ( {} h )".format(self.interval)
return '-'
@property
def schedule(self):
from django_celery_beat.models import PeriodicTask
name = self.get_register_task()[0]
return PeriodicTask.objects.filter(name=name).first()
def get_next_run_time(self):
if not self.is_periodic:
return None
task = self.schedule
now = task.schedule.nowfun()
if self.start_time and self.start_time > now:
return self.start_time
scheduler = task.scheduler
# 根据不同的调度类型计算下次执行时间
if isinstance(scheduler, CrontabSchedule):
schedule = crontab(
minute=scheduler.minute,
hour=scheduler.hour,
day_of_week=scheduler.day_of_week,
day_of_month=scheduler.day_of_month,
month_of_year=scheduler.month_of_year,
)
next_run = schedule.remaining_estimate(now)
return now + next_run
elif isinstance(scheduler, IntervalSchedule):
interval = timedelta(
seconds=scheduler.every * {
IntervalSchedule.SECONDS: 1,
IntervalSchedule.MINUTES: 60,
IntervalSchedule.HOURS: 3600,
IntervalSchedule.DAYS: 86400,
}[scheduler.period]
)
last_run = task.last_run_at or now
return last_run + interval
elif isinstance(scheduler, ClockedSchedule):
return scheduler.clocked_time
else:
raise ValueError("不支持的任务调度类型")
class Meta:
abstract = True
class PeriodTaskSerializerMixin(serializers.Serializer):
is_periodic = serializers.BooleanField(default=True, label=_("Periodic run"))
crontab = serializers.CharField(
max_length=128, allow_blank=True,
allow_null=True, required=False, label=_('Crontab')
)
interval = serializers.IntegerField(
default=24, allow_null=True, required=False, label=_('Interval'),
max_value=65535, min_value=1,
)
start_time = serializers.DateTimeField(
allow_null=True, required=False,
label=_('Start Datetime'),
help_text=_(
'Datetime when the schedule should begin '
'triggering the task to run'
),
)
periodic_display = serializers.CharField(read_only=True, label=_('Run period'))
def validate_crontab(self, crontab):
if not crontab:
return crontab
if isinstance(crontab, str) and len(crontab.strip().split()) != 5:
msg = _('* Please enter a valid crontab expression')
raise serializers.ValidationError(msg)
return crontab
def validate_interval(self, interval):
if not interval and not isinstance(interval, int):
return interval
return interval
def validate_is_periodic(self, ok):
if not ok:
return ok
crontab = self.initial_data.get('crontab')
interval = self.initial_data.get('interval')
if ok and not any([crontab, interval]):
msg = _("Require interval or crontab setting")
raise serializers.ValidationError(msg)
return ok
def validate(self, attrs):
attrs = super().validate(attrs)
if not attrs.get('is_periodic'):
attrs['interval'] = None
attrs['crontab'] = ''
if attrs.get('crontab'):
attrs['interval'] = None
return attrs