359 lines
15 KiB
Markdown
359 lines
15 KiB
Markdown
# aws-ec2-panel 数据库设计
|
||
|
||
本文档描述了 **aws_ec2_panel** 项目的完整 MySQL 数据库结构，包含多租户、用户管理、AWS 凭证、EC2 实例、任务中心与审计日志等表结构。
|
||
|
||
---
|
||
|
||
## 1. 创建数据库
|
||
|
||
```sql
|
||
CREATE DATABASE IF NOT EXISTS aws_ec2_panel
|
||
DEFAULT CHARACTER SET utf8mb4
|
||
COLLATE utf8mb4_unicode_ci;
|
||
|
||
USE aws_ec2_panel;
|
||
|
||
2. 角色表：roles
|
||
|
||
CREATE TABLE roles (
|
||
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT '角色主键',
|
||
name VARCHAR(64) NOT NULL COMMENT '角色名，如 ADMIN / CUSTOMER_ADMIN / CUSTOMER_USER',
|
||
description VARCHAR(255) DEFAULT NULL COMMENT '角色说明',
|
||
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
|
||
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
|
||
|
||
UNIQUE KEY uniq_role_name (name)
|
||
) ENGINE=InnoDB
|
||
DEFAULT CHARSET=utf8mb4
|
||
COLLATE=utf8mb4_unicode_ci
|
||
COMMENT='角色表';
|
||
3. 客户 / 租户表：customers
|
||
|
||
CREATE TABLE customers (
|
||
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT '客户主键',
|
||
name VARCHAR(128) NOT NULL COMMENT '客户/租户名称，展示用',
|
||
contact_email VARCHAR(128) DEFAULT NULL COMMENT '联系邮箱',
|
||
is_active TINYINT(1) NOT NULL DEFAULT 1 COMMENT '是否启用 1=启用 0=禁用',
|
||
quota_instances INT UNSIGNED DEFAULT NULL COMMENT '实例数量配额，NULL 表示不限制',
|
||
notes VARCHAR(255) DEFAULT NULL COMMENT '备注',
|
||
|
||
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
|
||
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
|
||
|
||
UNIQUE KEY uniq_customer_name (name)
|
||
) ENGINE=InnoDB
|
||
DEFAULT CHARSET=utf8mb4
|
||
COLLATE=utf8mb4_unicode_ci
|
||
COMMENT='客户/租户表';
|
||
4. 用户表：users
|
||
|
||
CREATE TABLE users (
|
||
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT '用户主键',
|
||
username VARCHAR(64) NOT NULL COMMENT '登录用户名',
|
||
email VARCHAR(128) DEFAULT NULL COMMENT '邮箱',
|
||
password_hash VARCHAR(255) NOT NULL COMMENT '密码哈希',
|
||
role_id BIGINT UNSIGNED NOT NULL COMMENT '角色ID，FK到roles',
|
||
customer_id BIGINT UNSIGNED DEFAULT NULL COMMENT '归属客户ID，平台管理员可为空',
|
||
is_active TINYINT(1) NOT NULL DEFAULT 1 COMMENT '是否启用 1=启用 0=禁用',
|
||
last_login_at DATETIME DEFAULT NULL COMMENT '最近登录时间',
|
||
|
||
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
|
||
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
|
||
|
||
CONSTRAINT fk_users_roles FOREIGN KEY (role_id)
|
||
REFERENCES roles(id)
|
||
ON DELETE RESTRICT
|
||
ON UPDATE CASCADE,
|
||
|
||
CONSTRAINT fk_users_customers FOREIGN KEY (customer_id)
|
||
REFERENCES customers(id)
|
||
ON DELETE SET NULL
|
||
ON UPDATE CASCADE,
|
||
|
||
UNIQUE KEY uniq_username (username),
|
||
UNIQUE KEY uniq_email (email),
|
||
KEY idx_users_role (role_id),
|
||
KEY idx_users_customer (customer_id)
|
||
) ENGINE=InnoDB
|
||
DEFAULT CHARSET=utf8mb4
|
||
COLLATE=utf8mb4_unicode_ci
|
||
COMMENT='用户表';
|
||
5. AWS 凭证表：aws_credentials
|
||
|
||
CREATE TABLE aws_credentials (
|
||
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT 'AWS 凭证主键',
|
||
name VARCHAR(128) NOT NULL COMMENT '凭证名称，控制台展示用',
|
||
account_id VARCHAR(32) NOT NULL COMMENT 'AWS Account ID (12位)',
|
||
credential_type ENUM('ACCESS_KEY', 'ASSUME_ROLE') NOT NULL DEFAULT 'ACCESS_KEY' COMMENT '凭证类型',
|
||
access_key_id VARCHAR(128) DEFAULT NULL COMMENT 'ACCESS_KEY_ID，ACCESS_KEY 时必填',
|
||
secret_access_key VARCHAR(256) DEFAULT NULL COMMENT 'SECRET_ACCESS_KEY，ACCESS_KEY 时必填',
|
||
role_arn VARCHAR(256) DEFAULT NULL COMMENT 'ASSUME_ROLE 模式下的 RoleArn',
|
||
external_id VARCHAR(128) DEFAULT NULL COMMENT 'ASSUME_ROLE 模式下使用的 ExternalId',
|
||
default_region VARCHAR(32) NOT NULL DEFAULT 'ap-northeast-1' COMMENT '默认 Region',
|
||
is_active TINYINT(1) NOT NULL DEFAULT 1 COMMENT '是否启用',
|
||
|
||
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
|
||
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
|
||
|
||
UNIQUE KEY uniq_credential_account_name (account_id, name),
|
||
KEY idx_credential_account (account_id),
|
||
KEY idx_credential_active (is_active)
|
||
) ENGINE=InnoDB
|
||
DEFAULT CHARSET=utf8mb4
|
||
COLLATE=utf8mb4_unicode_ci
|
||
COMMENT='AWS 凭证表';
|
||
6. 客户 ↔ 凭证映射表：customer_credentials
|
||
|
||
CREATE TABLE customer_credentials (
|
||
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT '映射主键',
|
||
customer_id BIGINT UNSIGNED NOT NULL COMMENT '客户ID',
|
||
credential_id BIGINT UNSIGNED NOT NULL COMMENT 'AWS 凭证ID',
|
||
is_allowed TINYINT(1) NOT NULL DEFAULT 1 COMMENT '是否允许该客户使用此凭证',
|
||
|
||
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
|
||
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
|
||
|
||
CONSTRAINT fk_cc_customer FOREIGN KEY (customer_id)
|
||
REFERENCES customers(id)
|
||
ON DELETE CASCADE
|
||
ON UPDATE CASCADE,
|
||
|
||
CONSTRAINT fk_cc_credential FOREIGN KEY (credential_id)
|
||
REFERENCES aws_credentials(id)
|
||
ON DELETE CASCADE
|
||
ON UPDATE CASCADE,
|
||
|
||
UNIQUE KEY uniq_customer_credential (customer_id, credential_id),
|
||
KEY idx_cc_customer (customer_id),
|
||
KEY idx_cc_credential (credential_id)
|
||
) ENGINE=InnoDB
|
||
DEFAULT CHARSET=utf8mb4
|
||
COLLATE=utf8mb4_unicode_ci
|
||
COMMENT='客户与AWS凭证授权映射表';
|
||
7. 实例表：instances
|
||
|
||
CREATE TABLE instances (
|
||
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT '实例主键',
|
||
|
||
customer_id BIGINT UNSIGNED NOT NULL COMMENT '归属客户ID',
|
||
credential_id BIGINT UNSIGNED DEFAULT NULL COMMENT '来自哪条AWS凭证（可为空）',
|
||
account_id VARCHAR(32) NOT NULL COMMENT 'AWS Account ID',
|
||
region VARCHAR(32) NOT NULL COMMENT '区域，如 ap-northeast-1',
|
||
az VARCHAR(32) DEFAULT NULL COMMENT '可用区，如 ap-northeast-1a',
|
||
|
||
instance_id VARCHAR(32) NOT NULL COMMENT 'AWS EC2 InstanceId，如 i-xxxx',
|
||
name_tag VARCHAR(255) DEFAULT NULL COMMENT 'Name 标签',
|
||
instance_type VARCHAR(64) NOT NULL COMMENT '实例规格，如 t3.micro',
|
||
ami_id VARCHAR(64) DEFAULT NULL COMMENT 'AMI ID，如 ami-xxxx',
|
||
key_name VARCHAR(128) DEFAULT NULL COMMENT '密钥对名称',
|
||
|
||
public_ip VARCHAR(45) DEFAULT NULL COMMENT '公网IP',
|
||
private_ip VARCHAR(45) DEFAULT NULL COMMENT '私网IP',
|
||
|
||
status ENUM(
|
||
'PENDING',
|
||
'RUNNING',
|
||
'STOPPING',
|
||
'STOPPED',
|
||
'SHUTTING_DOWN',
|
||
'TERMINATED',
|
||
'UNKNOWN'
|
||
) NOT NULL DEFAULT 'UNKNOWN' COMMENT '当前观测状态',
|
||
|
||
desired_status ENUM('RUNNING','STOPPED','TERMINATED') DEFAULT NULL COMMENT '用户期望状态',
|
||
|
||
security_groups JSON DEFAULT NULL COMMENT '安全组列表，sg-xxx 数组',
|
||
subnet_id VARCHAR(64) DEFAULT NULL COMMENT '子网ID',
|
||
vpc_id VARCHAR(64) DEFAULT NULL COMMENT 'VPC ID',
|
||
|
||
launched_at DATETIME DEFAULT NULL COMMENT '实例启动时间',
|
||
terminated_at DATETIME DEFAULT NULL COMMENT '实例终止时间',
|
||
last_sync DATETIME DEFAULT NULL COMMENT '最近同步时间',
|
||
|
||
last_cloud_state JSON DEFAULT NULL COMMENT '上次同步时的云端原始信息（部分）',
|
||
|
||
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
|
||
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
|
||
|
||
CONSTRAINT fk_instances_customer FOREIGN KEY (customer_id)
|
||
REFERENCES customers(id)
|
||
ON DELETE CASCADE
|
||
ON UPDATE CASCADE,
|
||
|
||
CONSTRAINT fk_instances_credential FOREIGN KEY (credential_id)
|
||
REFERENCES aws_credentials(id)
|
||
ON DELETE SET NULL
|
||
ON UPDATE CASCADE,
|
||
|
||
UNIQUE KEY uniq_instance_cloud (account_id, region, instance_id),
|
||
KEY idx_instances_customer (customer_id),
|
||
KEY idx_instances_status (status),
|
||
KEY idx_instances_region (region),
|
||
KEY idx_instances_last_sync (last_sync)
|
||
) ENGINE=InnoDB
|
||
DEFAULT CHARSET=utf8mb4
|
||
COLLATE=utf8mb4_unicode_ci
|
||
COMMENT='AWS EC2 实例表';
|
||
8. 任务主表：jobs
|
||
|
||
CREATE TABLE jobs (
|
||
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT '任务主键',
|
||
job_uuid CHAR(32) NOT NULL COMMENT '任务UUID，对外查询用',
|
||
job_type ENUM(
|
||
'SYNC_INSTANCES',
|
||
'START_INSTANCES',
|
||
'STOP_INSTANCES',
|
||
'REBOOT_INSTANCES',
|
||
'TERMINATE_INSTANCES',
|
||
'CREATE_INSTANCES'
|
||
) NOT NULL COMMENT '任务类型',
|
||
status ENUM('PENDING','RUNNING','SUCCESS','FAILED') NOT NULL DEFAULT 'PENDING' COMMENT '任务状态',
|
||
progress TINYINT UNSIGNED NOT NULL DEFAULT 0 COMMENT '进度 0~100',
|
||
|
||
total_count INT UNSIGNED DEFAULT 0 COMMENT '总数量',
|
||
success_count INT UNSIGNED DEFAULT 0 COMMENT '成功数量',
|
||
fail_count INT UNSIGNED DEFAULT 0 COMMENT '失败数量',
|
||
skipped_count INT UNSIGNED DEFAULT 0 COMMENT '跳过数量',
|
||
|
||
payload JSON DEFAULT NULL COMMENT '任务参数，如实例列表、过滤条件',
|
||
error_message VARCHAR(512) DEFAULT NULL COMMENT '任务层面错误信息摘要',
|
||
|
||
created_by_user_id BIGINT UNSIGNED DEFAULT NULL COMMENT '创建该任务的用户ID',
|
||
created_for_customer BIGINT UNSIGNED DEFAULT NULL COMMENT '面向的客户ID（通常等于用户 customer_id）',
|
||
|
||
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
|
||
started_at DATETIME DEFAULT NULL COMMENT '开始时间',
|
||
finished_at DATETIME DEFAULT NULL COMMENT '结束时间',
|
||
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
|
||
|
||
CONSTRAINT fk_jobs_user FOREIGN KEY (created_by_user_id)
|
||
REFERENCES users(id)
|
||
ON DELETE SET NULL
|
||
ON UPDATE CASCADE,
|
||
|
||
CONSTRAINT fk_jobs_customer FOREIGN KEY (created_for_customer)
|
||
REFERENCES customers(id)
|
||
ON DELETE SET NULL
|
||
ON UPDATE CASCADE,
|
||
|
||
UNIQUE KEY uniq_job_uuid (job_uuid),
|
||
KEY idx_jobs_type (job_type),
|
||
KEY idx_jobs_status (status),
|
||
KEY idx_jobs_created_at (created_at)
|
||
) ENGINE=InnoDB
|
||
DEFAULT CHARSET=utf8mb4
|
||
COLLATE=utf8mb4_unicode_ci
|
||
COMMENT='批量任务主表';
|
||
9. 任务子表：job_items
|
||
|
||
CREATE TABLE job_items (
|
||
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT '任务子项主键',
|
||
job_id BIGINT UNSIGNED NOT NULL COMMENT '任务ID',
|
||
resource_type ENUM('INSTANCE','OTHER') NOT NULL DEFAULT 'INSTANCE' COMMENT '资源类型',
|
||
resource_id BIGINT UNSIGNED DEFAULT NULL COMMENT '资源主键ID，如实例ID',
|
||
account_id VARCHAR(32) DEFAULT NULL COMMENT 'AWS Account ID，冗余便于查询',
|
||
region VARCHAR(32) DEFAULT NULL COMMENT 'Region，冗余便于查询',
|
||
instance_id VARCHAR(32) DEFAULT NULL COMMENT 'InstanceId，冗余便于查询',
|
||
|
||
action ENUM('CREATE','START','STOP','REBOOT','TERMINATE','SYNC') NOT NULL COMMENT '对子资源的动作',
|
||
|
||
status ENUM('PENDING','RUNNING','SUCCESS','FAILED','SKIPPED') NOT NULL DEFAULT 'PENDING' COMMENT '子项状态',
|
||
error_message VARCHAR(512) DEFAULT NULL COMMENT '错误信息',
|
||
extra JSON DEFAULT NULL COMMENT '额外信息，如AWS原始返回',
|
||
|
||
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
|
||
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
|
||
|
||
CONSTRAINT fk_job_items_job FOREIGN KEY (job_id)
|
||
REFERENCES jobs(id)
|
||
ON DELETE CASCADE
|
||
ON UPDATE CASCADE,
|
||
|
||
CONSTRAINT fk_job_items_instance FOREIGN KEY (resource_id)
|
||
REFERENCES instances(id)
|
||
ON DELETE SET NULL
|
||
ON UPDATE CASCADE,
|
||
|
||
KEY idx_job_items_job (job_id),
|
||
KEY idx_job_items_instance (resource_id),
|
||
KEY idx_job_items_status (status)
|
||
) ENGINE=InnoDB
|
||
DEFAULT CHARSET=utf8mb4
|
||
COLLATE=utf8mb4_unicode_ci
|
||
COMMENT='批量任务子项表';
|
||
10. 审计日志表：audit_logs
|
||
|
||
CREATE TABLE audit_logs (
|
||
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT '审计日志主键',
|
||
|
||
user_id BIGINT UNSIGNED DEFAULT NULL COMMENT '操作用户ID',
|
||
customer_id BIGINT UNSIGNED DEFAULT NULL COMMENT '客户ID（若有）',
|
||
|
||
action ENUM(
|
||
'LOGIN',
|
||
'LOGOUT',
|
||
'INSTANCE_CREATE',
|
||
'INSTANCE_START',
|
||
'INSTANCE_STOP',
|
||
'INSTANCE_REBOOT',
|
||
'INSTANCE_TERMINATE',
|
||
'INSTANCE_SYNC',
|
||
'CREDENTIAL_CREATE',
|
||
'CREDENTIAL_UPDATE',
|
||
'CREDENTIAL_DELETE',
|
||
'CUSTOMER_CREATE',
|
||
'CUSTOMER_UPDATE',
|
||
'CUSTOMER_DELETE',
|
||
'USER_CREATE',
|
||
'USER_UPDATE',
|
||
'USER_DELETE',
|
||
'OTHER'
|
||
) NOT NULL COMMENT '动作类型',
|
||
|
||
resource_type ENUM('USER','CUSTOMER','AWS_CREDENTIAL','INSTANCE','JOB','OTHER') NOT NULL COMMENT '资源类型',
|
||
resource_id BIGINT UNSIGNED DEFAULT NULL COMMENT '资源ID（可空，如登录无具体资源）',
|
||
|
||
description VARCHAR(512) DEFAULT NULL COMMENT '简要描述，便于阅读',
|
||
payload JSON DEFAULT NULL COMMENT '附加信息，如请求参数、旧值/新值等',
|
||
|
||
ip_address VARCHAR(45) DEFAULT NULL COMMENT '操作来源 IP',
|
||
user_agent VARCHAR(255) DEFAULT NULL COMMENT 'User-Agent',
|
||
|
||
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
|
||
|
||
CONSTRAINT fk_audit_user FOREIGN KEY (user_id)
|
||
REFERENCES users(id)
|
||
ON DELETE SET NULL
|
||
ON UPDATE CASCADE,
|
||
|
||
CONSTRAINT fk_audit_customer FOREIGN KEY (customer_id)
|
||
REFERENCES customers(id)
|
||
ON DELETE SET NULL
|
||
ON UPDATE CASCADE,
|
||
|
||
KEY idx_audit_customer (customer_id),
|
||
KEY idx_audit_action (action),
|
||
KEY idx_audit_created_at (created_at),
|
||
KEY idx_audit_resource (resource_type, resource_id)
|
||
) ENGINE=InnoDB
|
||
DEFAULT CHARSET=utf8mb4
|
||
COLLATE=utf8mb4_unicode_ci
|
||
COMMENT='审计日志表';
|
||
|
||
11. 全局设置表：settings
|
||
|
||
CREATE TABLE settings (
|
||
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT '主键',
|
||
k VARCHAR(128) NOT NULL COMMENT '配置键',
|
||
v TEXT DEFAULT NULL COMMENT '配置值，建议存JSON或简单字符串',
|
||
description VARCHAR(255) DEFAULT NULL COMMENT '配置说明',
|
||
|
||
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
|
||
|
||
UNIQUE KEY uniq_settings_key (k)
|
||
) ENGINE=InnoDB
|
||
DEFAULT CHARSET=utf8mb4
|
||
COLLATE=utf8mb4_unicode_ci
|
||
COMMENT='全局配置KV表';
|
||
|
||
ALTER TABLE instances ADD COLUMN os_name VARCHAR(128); |