mirror of
https://github.com/jumpserver/jumpserver.git
synced 2026-01-15 14:47:24 +00:00
* feat: 添加 RBAC 应用模块 * feat: 添加 RBAC Model、API * feat: 添加 RBAC Model、API 2 * feat: 添加 RBAC Model、API 3 * feat: 添加 RBAC Model、API 4 * feat: RBAC * feat: RBAC * feat: RBAC * feat: RBAC * feat: RBAC * feat: RBAC 整理权限位 * feat: RBAC 整理权限位2 * feat: RBAC 整理权限位2 * feat: RBAC 整理权限位 * feat: RBAC 添加默认角色 * feat: RBAC 添加迁移文件;迁移用户角色->用户角色绑定 * feat: RBAC 添加迁移文件;迁移用户角色->用户角色绑定 * feat: RBAC 修改用户模块API * feat: RBAC 添加组织模块迁移文件 & 修改组织模块API * feat: RBAC 添加组织模块迁移文件 & 修改组织模块API * feat: RBAC 修改用户角色属性的使用 * feat: RBAC No.1 * xxx * perf: 暂存 * perf: ... * perf(rbac): 添加 perms 到 profile serializer 中 * stash * perf: 使用init * perf: 修改migrations * perf: rbac * stash * stash * pref: 修改rbac * stash it * stash: 先去修复其他bug * perf: 修改 role 添加 users * pref: 修改 RBAC Model * feat: 添加权限的 tree api * stash: 暂存一下 * stash: 暂存一下 * perf: 修改 model verbose name * feat: 添加model各种 verbose name * perf: 生成 migrations * perf: 优化权限位 * perf: 添加迁移脚本 * feat: 添加组织角色迁移 * perf: 添加迁移脚本 * stash * perf: 添加migrateion * perf: 暂存一下 * perf: 修改rbac * perf: stash it * fix: 迁移冲突 * fix: 迁移冲突 * perf: 暂存一下 * perf: 修改 rbac 逻辑 * stash: 暂存一下 * perf: 修改内置角色 * perf: 解决 root 组织的问题 * perf: stash it * perf: 优化 rbac * perf: 优化 rolebinding 处理 * perf: 完成用户离开组织的问题 * perf: 暂存一下 * perf: 修改翻译 * perf: 去掉了 IsSuperUser * perf: IsAppUser 去掉完成 * perf: 修改 connection token 的权限 * perf: 去掉导入的问题 * perf: perms define 格式,修改 app 用户 的全新啊 * perf: 修改 permission * perf: 去掉一些 org admin * perf: 去掉部分 org admin * perf: 再去掉点 org admin role * perf: 再去掉部分 org admin * perf: user 角色搜索 * perf: 去掉很多 js * perf: 添加权限位 * perf: 修改权限 * perf: 去掉一个 todo * merge: with dev * fix: 修复冲突 Co-authored-by: Bai <bugatti_it@163.com> Co-authored-by: Michael Bai <baijiangjie@gmail.com> Co-authored-by: ibuler <ibuler@qq.com>
141 lines
4.7 KiB
Python
141 lines
4.7 KiB
Python
from django.utils.translation import gettext_lazy as _
|
|
from django.utils.translation import gettext
|
|
from django.template.loader import render_to_string
|
|
|
|
from notifications.notifications import SystemMessage
|
|
from notifications.models import SystemMsgSubscription
|
|
from users.models import User
|
|
from notifications.backends import BACKEND
|
|
from terminal.models import Status, Terminal
|
|
|
|
__all__ = ('ServerPerformanceMessage', 'ServerPerformanceCheckUtil')
|
|
|
|
|
|
class ServerPerformanceMessage(SystemMessage):
|
|
category = 'Operations'
|
|
category_label = _('Operations')
|
|
message_type_label = _('Server performance')
|
|
|
|
def __init__(self, terms_with_errors):
|
|
self.terms_with_errors = terms_with_errors
|
|
|
|
def get_html_msg(self) -> dict:
|
|
subject = gettext("Terminal health check warning")
|
|
context = {
|
|
'terms_with_errors': self.terms_with_errors
|
|
}
|
|
message = render_to_string('ops/_msg_terminal_performance.html', context)
|
|
return {
|
|
'subject': subject,
|
|
'message': message
|
|
}
|
|
|
|
@classmethod
|
|
def post_insert_to_db(cls, subscription: SystemMsgSubscription):
|
|
from rbac.models import Role, RoleBinding
|
|
# Todo: 需要更改这里
|
|
admin_role = Role.BuiltinRole.system_admin.get_role()
|
|
admins_ids = RoleBinding.objects.filter(role=admin_role).values_list('user_id', flat=True)
|
|
admins = User.objects.filter(id__in=admins_ids)
|
|
subscription.users.add(*admins)
|
|
subscription.receive_backends = [BACKEND.EMAIL]
|
|
subscription.save()
|
|
|
|
@classmethod
|
|
def gen_test_msg(cls):
|
|
from terminal.models import Terminal
|
|
items_mapper = ServerPerformanceCheckUtil.items_mapper
|
|
terms_with_errors = []
|
|
terms = Terminal.objects.all()[:5]
|
|
|
|
for i, term in enumerate(terms, 1):
|
|
errors = []
|
|
for item, data in items_mapper.items():
|
|
msg = data['alarm_msg_format']
|
|
max_threshold = data['max_threshold']
|
|
value = 123 // i+1
|
|
msg = msg.format(max_threshold=max_threshold, value=value, name=term.name)
|
|
errors.append(msg)
|
|
terms_with_errors.append([term, errors])
|
|
return cls(terms_with_errors)
|
|
|
|
|
|
class ServerPerformanceCheckUtil(object):
|
|
items_mapper = {
|
|
'is_alive': {
|
|
'default': False,
|
|
'max_threshold': False,
|
|
'alarm_msg_format': _('The terminal is offline: {name}')
|
|
},
|
|
'disk_used': {
|
|
'default': 0,
|
|
'max_threshold': 80,
|
|
'alarm_msg_format': _('Disk used more than {max_threshold}%: => {value}')
|
|
},
|
|
'memory_used': {
|
|
'default': 0,
|
|
'max_threshold': 85,
|
|
'alarm_msg_format': _('Memory used more than {max_threshold}%: => {value}'),
|
|
},
|
|
'cpu_load': {
|
|
'default': 0,
|
|
'max_threshold': 5,
|
|
'alarm_msg_format': _('CPU load more than {max_threshold}: => {value}'),
|
|
},
|
|
}
|
|
|
|
def __init__(self):
|
|
self.terms_with_errors = []
|
|
self._terminals = []
|
|
|
|
def check_and_publish(self):
|
|
self.check()
|
|
self.publish()
|
|
|
|
def check(self):
|
|
self.terms_with_errors = []
|
|
self.initial_terminals()
|
|
|
|
for term in self._terminals:
|
|
errors = self.check_terminal(term)
|
|
if not errors:
|
|
continue
|
|
self.terms_with_errors.append((term, errors))
|
|
|
|
def check_terminal(self, term):
|
|
errors = []
|
|
for item, data in self.items_mapper.items():
|
|
error = self.check_item(term, item, data)
|
|
if not error:
|
|
continue
|
|
errors.append(error)
|
|
return errors
|
|
|
|
@staticmethod
|
|
def check_item(term, item, data):
|
|
default = data['default']
|
|
max_threshold = data['max_threshold']
|
|
value = getattr(term.stat, item, default)
|
|
|
|
if isinstance(value, bool) and value != max_threshold:
|
|
return
|
|
elif isinstance(value, (int, float)) and value < max_threshold:
|
|
return
|
|
msg = data['alarm_msg_format']
|
|
error = msg.format(max_threshold=max_threshold, value=value, name=term.name)
|
|
return error
|
|
|
|
def publish(self):
|
|
if not self.terms_with_errors:
|
|
return
|
|
ServerPerformanceMessage(self.terms_with_errors).publish()
|
|
|
|
def initial_terminals(self):
|
|
terminals = []
|
|
for terminal in Terminal.objects.filter(is_deleted=False):
|
|
if not terminal.is_active:
|
|
continue
|
|
terminal.stat = Status.get_terminal_latest_stat(terminal)
|
|
terminals.append(terminal)
|
|
self._terminals = terminals
|