mirror of
https://github.com/jumpserver/jumpserver.git
synced 2025-05-10 17:15:16 +00:00
* perf: change i18n
* perf: pam
* perf: change translate
* perf: add check account
* perf: add date field
* perf: add account filter
* perf: remove some js
* perf: add account status action
* perf: update pam
* perf: 修改 discover account
* perf: update filter
* perf: update gathered account
* perf: 修改账号同步
* perf: squash migrations
* perf: update pam
* perf: change i18n
* perf: update account risk
* perf: 更新风险发现
* perf: remove css
* perf: Admin connection token
* perf: Add a switch to check connectivity after changing the password, and add a custom ssh command for push tasks
* perf: Modify account migration files
* perf: update pam
* perf: remove to check account dir
* perf: Admin connection token
* perf: update check account
* perf: 优化发送结果
* perf: update pam
* perf: update bulk update create
* perf: prepaire using thread timer for bulk_create_decorator
* perf: update bulk create decorator
* perf: 优化 playbook manager
* perf: 优化收集账号的报表
* perf: Update poetry
* perf: Update Dockerfile with new base image tag
* fix: Account migrate 0012 file
* perf: 修改备份
* perf: update pam
* fix: Expand resource_type filter to include raw type
* feat: PAM Service (#14552)
* feat: PAM Service
* perf: import package name
---------
Co-authored-by: jiangweidong <1053570670@qq.com>
* perf: Change secret dashboard (#14551)
Co-authored-by: feng <1304903146@qq.com>
* perf: update migrations
* perf: 修改支持 pam
* perf: Change secret record table dashboard
* perf: update status
* fix: Automation send report
* perf: Change secret report
* feat: windows accounts gather
* perf: update change status
* perf: Account backup
* perf: Account backup report
* perf: Account migrate
* perf: update service to application
* perf: update migrations
* perf: update logo
* feat: oracle accounts gather (#14571)
* feat: oracle accounts gather
* feat: sqlserver accounts gather
* feat: postgresql accounts gather
* feat: mysql accounts gather
---------
Co-authored-by: wangruidong <940853815@qq.com>
* feat: mongodb accounts gather
* perf: Change secret
* perf: Migrate
* perf: Merge conflicting migration files
* perf: Change secret
* perf: Automation filter org
* perf: Account push
* perf: Random secret string
* perf: Enhance SQL query and update risk handling in accounts
* perf: Ticket filter assignee_id
* perf: 修改 account remote
* perf: 修改一些 adhoc 任务
* perf: Change secret
* perf: Remove push account extra api
* perf: update status
* perf: The entire organization can view activity log
* fix: risk field check
* perf: add account details api
* perf: add demo mode
* perf: Delete gather_account
* perf: Perfect solution to account version problem
* perf: Update status action to handle multiple accounts
* perf: Add GatherAccountDetailField and update serializers
* perf: Display account history in combination with password change records
* perf: Lina translate
* fix: Update mysql_filter to handle nested user info
* perf: Admin connection token validate_permission account
* perf: copy move account
* perf: account filter risk
* perf: account risk filter
* perf: Copy move account failed message
* fix: gather account sync account to asset
* perf: Pam dashboard
* perf: Account dashboard total accounts
* perf: Pam dashboard
* perf: Change secret filter account secret_reset
* perf: 修改 risk filter
* perf: pam translate
* feat: Check for leaked duplicate passwords. (#14711)
* feat: Check for leaked duplicate passwords.
* perf: Use SQLite instead of txt as leak password database
---------
Co-authored-by: jiangweidong <1053570670@qq.com>
Co-authored-by: 老广 <ibuler@qq.com>
* perf: merge with remote
* perf: Add risk change_password_add handle
* perf: Pam dashboard
* perf: check account manager import
* perf: 重构扫描
* perf: 修改 db
* perf: Gather account manager
* perf: update change db lib
* perf: dashboard
* perf: Account gather
* perf: 修改 asset get queryset
* perf: automation report
* perf: Pam account
* perf: Pam dashboard api
* perf: risk add account
* perf: 修改 risk check
* perf: Risk account
* perf: update risk add reopen action
* perf: add pylintrc
* Revert "perf: automation report"
This reverts commit 22aee54207
.
* perf: check account engine
* perf: Perf: Optimism Gather Report Style
* Perf: Remove unuser actions
* Perf: Perf push account
* perf: perf gather account
* perf: Automation report
* perf: Push account recorder
* perf: Push account record
* perf: Pam dashboard
* perf: perf
* perf: update intergration
* perf: integrations application detail add account tab page
* feat: Custom change password supports configuration of interactive items
* perf: Go and Python demo code
* perf: Custom secret change
* perf: add user filter
* perf: translate
* perf: Add demo code docs
* perf: update some i18n
* perf: update some i18n
* perf: Add Java, Node, Go, and cURL demo code
* perf: Translate
* perf: Change secret translate
* perf: Translate
* perf: update some i18n
* perf: translate
* perf: Ansible playbook
* perf: update some choice
* perf: update some choice
* perf: update account serializer remote unused code
* perf: conflict
* perf: update import
---------
Co-authored-by: ibuler <ibuler@qq.com>
Co-authored-by: feng <1304903146@qq.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: wangruidong <940853815@qq.com>
Co-authored-by: jiangweidong <1053570670@qq.com>
Co-authored-by: feng626 <57284900+feng626@users.noreply.github.com>
Co-authored-by: zhaojisen <1301338853@qq.com>
216 lines
7.0 KiB
Python
216 lines
7.0 KiB
Python
# -*- coding: utf-8 -*-
|
|
#
|
|
import abc
|
|
from datetime import timedelta
|
|
|
|
from celery.schedules import crontab
|
|
from django.db import models
|
|
from django.utils import timezone
|
|
from django.utils.translation import gettext_lazy as _
|
|
from django_celery_beat.models import CrontabSchedule, IntervalSchedule, ClockedSchedule
|
|
from rest_framework import serializers
|
|
|
|
from .celery.utils import (
|
|
create_or_update_celery_periodic_tasks, disable_celery_periodic_task,
|
|
delete_celery_periodic_task,
|
|
)
|
|
|
|
__all__ = [
|
|
'PeriodTaskModelMixin', 'PeriodTaskSerializerMixin',
|
|
]
|
|
|
|
|
|
class PeriodTaskModelQuerySet(models.QuerySet):
|
|
def delete(self, *args, **kwargs):
|
|
for obj in self:
|
|
obj.delete()
|
|
return super().delete(*args, **kwargs)
|
|
|
|
|
|
class PeriodTaskModelMixin(models.Model):
|
|
name = models.CharField(
|
|
max_length=128, unique=False, verbose_name=_("Name")
|
|
)
|
|
is_periodic = models.BooleanField(default=False, verbose_name=_("Periodic run"))
|
|
interval = models.IntegerField(
|
|
default=24, null=True, blank=True, verbose_name=_("Interval"),
|
|
)
|
|
crontab = models.CharField(
|
|
blank=True, max_length=128, default='', verbose_name=_("Crontab"),
|
|
)
|
|
start_time = models.DateTimeField(
|
|
blank=True, null=True,
|
|
verbose_name=_('Start Datetime'),
|
|
help_text=_(
|
|
'Datetime when the schedule should begin '
|
|
'triggering the task to run'
|
|
),
|
|
)
|
|
date_last_run = models.DateTimeField(blank=True, null=True, verbose_name=_("Date last run"))
|
|
objects = PeriodTaskModelQuerySet.as_manager()
|
|
|
|
@abc.abstractmethod
|
|
def get_register_task(self):
|
|
period_name, task, args, kwargs = None, None, (), {}
|
|
return period_name, task, args, kwargs
|
|
|
|
@property
|
|
def interval_ratio(self):
|
|
return 3600, 'h'
|
|
|
|
@property
|
|
def interval_display(self):
|
|
unit = self.interval_ratio[1]
|
|
if not self.interval:
|
|
return ''
|
|
return '{} {}'.format(self.interval, unit)
|
|
|
|
def set_period_schedule(self):
|
|
name, task, args, kwargs = self.get_register_task()
|
|
is_active = self.is_active if hasattr(self, 'is_active') else True
|
|
if not self.is_periodic or not is_active:
|
|
disable_celery_periodic_task(name)
|
|
return
|
|
|
|
cron = interval = None
|
|
if self.crontab:
|
|
cron = self.crontab
|
|
elif self.interval:
|
|
interval = self.interval * self.interval_ratio[0]
|
|
|
|
tasks = {
|
|
name: {
|
|
'task': task,
|
|
'interval': interval,
|
|
'crontab': cron,
|
|
'args': args,
|
|
'kwargs': kwargs,
|
|
'enabled': True,
|
|
'start_time': self.start_time,
|
|
}
|
|
}
|
|
create_or_update_celery_periodic_tasks(tasks)
|
|
|
|
def execute(self, *args, **kwargs):
|
|
self.date_last_run = timezone.now()
|
|
|
|
def save(self, *args, **kwargs):
|
|
instance = super().save(**kwargs)
|
|
self.set_period_schedule()
|
|
return instance
|
|
|
|
def delete(self, using=None, keep_parents=False):
|
|
name = self.get_register_task()[0]
|
|
instance = super().delete(using=using, keep_parents=keep_parents)
|
|
delete_celery_periodic_task(name)
|
|
return instance
|
|
|
|
@property
|
|
def periodic_display(self):
|
|
if self.is_periodic and self.crontab:
|
|
return _('Crontab') + " ( {} )".format(self.crontab)
|
|
if self.is_periodic and self.interval:
|
|
return _('Interval') + " ( {} h )".format(self.interval)
|
|
return '-'
|
|
|
|
@property
|
|
def schedule(self):
|
|
from django_celery_beat.models import PeriodicTask
|
|
name = self.get_register_task()[0]
|
|
return PeriodicTask.objects.filter(name=name).first()
|
|
|
|
def get_next_run_time(self):
|
|
if not self.is_periodic:
|
|
return None
|
|
task = self.schedule
|
|
now = task.schedule.nowfun()
|
|
|
|
if self.start_time and self.start_time > now:
|
|
return self.start_time
|
|
|
|
scheduler = task.scheduler
|
|
# 根据不同的调度类型计算下次执行时间
|
|
if isinstance(scheduler, CrontabSchedule):
|
|
schedule = crontab(
|
|
minute=scheduler.minute,
|
|
hour=scheduler.hour,
|
|
day_of_week=scheduler.day_of_week,
|
|
day_of_month=scheduler.day_of_month,
|
|
month_of_year=scheduler.month_of_year,
|
|
)
|
|
next_run = schedule.remaining_estimate(now)
|
|
return now + next_run
|
|
elif isinstance(scheduler, IntervalSchedule):
|
|
interval = timedelta(
|
|
seconds=scheduler.every * {
|
|
IntervalSchedule.SECONDS: 1,
|
|
IntervalSchedule.MINUTES: 60,
|
|
IntervalSchedule.HOURS: 3600,
|
|
IntervalSchedule.DAYS: 86400,
|
|
}[scheduler.period]
|
|
)
|
|
last_run = task.last_run_at or now
|
|
return last_run + interval
|
|
|
|
elif isinstance(scheduler, ClockedSchedule):
|
|
return scheduler.clocked_time
|
|
|
|
else:
|
|
raise ValueError("不支持的任务调度类型")
|
|
|
|
class Meta:
|
|
abstract = True
|
|
|
|
|
|
class PeriodTaskSerializerMixin(serializers.Serializer):
|
|
is_periodic = serializers.BooleanField(default=True, label=_("Periodic run"))
|
|
crontab = serializers.CharField(
|
|
max_length=128, allow_blank=True,
|
|
allow_null=True, required=False, label=_('Crontab')
|
|
)
|
|
interval = serializers.IntegerField(
|
|
default=24, allow_null=True, required=False, label=_('Interval'),
|
|
max_value=65535, min_value=1,
|
|
)
|
|
start_time = serializers.DateTimeField(
|
|
allow_null=True, required=False,
|
|
label=_('Start Datetime'),
|
|
help_text=_(
|
|
'Datetime when the schedule should begin '
|
|
'triggering the task to run'
|
|
),
|
|
)
|
|
periodic_display = serializers.CharField(read_only=True, label=_('Run period'))
|
|
|
|
def validate_crontab(self, crontab):
|
|
if not crontab:
|
|
return crontab
|
|
if isinstance(crontab, str) and len(crontab.strip().split()) != 5:
|
|
msg = _('* Please enter a valid crontab expression')
|
|
raise serializers.ValidationError(msg)
|
|
return crontab
|
|
|
|
def validate_interval(self, interval):
|
|
if not interval and not isinstance(interval, int):
|
|
return interval
|
|
return interval
|
|
|
|
def validate_is_periodic(self, ok):
|
|
if not ok:
|
|
return ok
|
|
crontab = self.initial_data.get('crontab')
|
|
interval = self.initial_data.get('interval')
|
|
if ok and not any([crontab, interval]):
|
|
msg = _("Require interval or crontab setting")
|
|
raise serializers.ValidationError(msg)
|
|
return ok
|
|
|
|
def validate(self, attrs):
|
|
attrs = super().validate(attrs)
|
|
if not attrs.get('is_periodic'):
|
|
attrs['interval'] = None
|
|
attrs['crontab'] = ''
|
|
if attrs.get('crontab'):
|
|
attrs['interval'] = None
|
|
return attrs
|