47 lines
1.5 KiB
Go
47 lines
1.5 KiB
Go
package config
|
|
|
|
import (
|
|
"context"
|
|
"strconv"
|
|
|
|
"git.pcux.cn/xuans/Smail/services/access"
|
|
appcontext "git.pcux.cn/xuans/Smail/utils/context"
|
|
|
|
log "github.com/sirupsen/logrus"
|
|
)
|
|
|
|
// RuntimeConfigLogWriter 复用运行日志记录配置结果，不生成独立审计文件或数据库记录。
|
|
// 只保留定位操作需要的元数据，不输出配置值、凭据、用户名称或完整变更载荷。
|
|
type RuntimeConfigLogWriter struct{}
|
|
|
|
func (RuntimeConfigLogWriter) WriteConfigAudit(ctx context.Context, event ConfigAuditEvent) error {
|
|
event, err := normalizeAuditEvent(event)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
action := map[ConfigOperation]string{
|
|
ConfigOperationUpdate: "保存配置",
|
|
ConfigOperationRollback: "回滚配置",
|
|
ConfigOperationMigration: "迁移配置",
|
|
}[event.Operation]
|
|
// 操作者来自配置管理器已授权的事件，不从客户端载荷或任意日志字段恢复归属。
|
|
actorID, _ := strconv.Atoi(event.ActorID)
|
|
actorContext := &appcontext.Context{Context: ctx, UserID: actorID, Role: access.Role(event.ActorRole)}
|
|
entry := log.WithContext(actorContext).WithFields(log.Fields{
|
|
"action": action,
|
|
"object": event.Section,
|
|
"operation": event.Operation,
|
|
"section": event.Section,
|
|
"actorId": event.ActorID,
|
|
"fromGeneration": event.FromGeneration,
|
|
"toGeneration": event.ToGeneration,
|
|
"result": event.Result,
|
|
})
|
|
if event.Result == "failure" {
|
|
entry.Warn(action + "失败")
|
|
} else {
|
|
entry.Info(action + "成功")
|
|
}
|
|
return nil
|
|
}
|