feat(deploy): 按具体云产品部署证书

Author: orange-juzipi

config.example.yaml

@@ -46,11 +46,15 @@ log:
   # 可选。轮转日志最长保留天数，0 表示使用默认值 30。
   maxAgeDays: 30
 
-# 可选。云服务 provider 配置。未配置则不启用云服务上传。
+# 可选。云服务 provider 配置。未配置则不启用云服务证书上传与部署。
 # 支持的 name：
-# - aliyun：阿里云。CAS 上传证书使用 accessKeyId/accessKeySecret；ESA 业务额外需要 esaSiteId。
-# - qiniu：七牛云。使用 accessKey/accessSecret。
-# - cloudTencent：腾讯云。使用 secretId/secretKey，通过腾讯云 SSL UploadCertificate 上传。
+# - aliyun：阿里云。支持 CAS 上传，以及 CDN、DCDN、ESA、OSS 自定义域名的精确证书部署。
+# - qiniu：七牛云。支持证书中心上传，以及 CDN、DCDN 域名的精确证书部署。
+# - cloudTencent：腾讯云。支持 SSL 上传，以及 CDN、EdgeOne、COS 自定义域名的精确证书部署。
+# 在 provider 下直接使用 cdn、dcdn、esa、oss、edgeOne、cos 配置对应产品资源。
+# targetRef 由客户端根据资源定位字段自动生成，不需要手工填写。
+# 配置任一自动部署资源时必须同时填写该 provider 的完整认证信息，否则客户端会拒绝启动。
+# Bucket、Region、Endpoint、SiteId、ZoneId 和认证信息只保存在本机，不会上报到服务端。
 # provider:
 #   - name: "aliyun"
 #     remark: "阿里云"
@@ -59,8 +63,22 @@ log:
 #       accessKeyId: "your-aliyun-access-key-id"
 #       # 阿里云 AccessKey Secret。
 #       accessKeySecret: "your-aliyun-access-key-secret"
-#       # 阿里云 ESA 业务专用字段，仅执行 ESA 上传证书时需要。
-#       esaSiteId: "your-esa-site-id"
+#     cdn:
+#       - label: "官网 CDN" # 可选，留空时使用 domain。
+#         domain: "www.example.com"
+#     dcdn:
+#       - label: "API DCDN"
+#         domain: "api.example.com"
+#     esa:
+#       - label: "应用 ESA"
+#         domain: "app.example.com" # 精确 ESA RecordName。
+#         siteId: "your-esa-site-id"
+#     oss:
+#       - label: "静态资源 OSS"
+#         domain: "static.example.com"
+#         region: "cn-hangzhou"
+#         bucket: "your-oss-bucket"
+#         endpoint: "https://oss-cn-hangzhou.aliyuncs.com" # 可选，只允许 HTTPS Origin。
 #
 #   - name: "qiniu"
 #     remark: "七牛云"
@@ -69,6 +87,12 @@ log:
 #       accessKey: "your-qiniu-access-key"
 #       # 七牛云 SecretKey。
 #       accessSecret: "your-qiniu-access-secret"
+#     cdn:
+#       - label: "官网 CDN"
+#         domain: "www.example.com"
+#     dcdn:
+#       - label: "API DCDN"
+#         domain: "api.example.com"
 #
 #   - name: "cloudTencent"
 #     remark: "腾讯云"
@@ -77,3 +101,15 @@ log:
 #       secretId: "your-tencent-secret-id"
 #       # 腾讯云 SecretKey。
 #       secretKey: "your-tencent-secret-key"
+#     cdn:
+#       - label: "官网 CDN"
+#         domain: "www.example.com"
+#     edgeOne:
+#       - label: "应用 EdgeOne"
+#         domain: "app.example.com" # 精确 EdgeOne Host。
+#         zoneId: "your-edgeone-zone-id"
+#     cos:
+#       - label: "静态资源 COS"
+#         domain: "static.example.com"
+#         region: "ap-guangzhou"
+#         bucket: "your-cos-bucket-1250000000" # 必须包含 APPID。

go.mod

@@ -3,16 +3,19 @@ module github.com/https-cert/deploy
 go 1.26
 
 require (
-	connectrpc.com/connect v1.18.1
-	github.com/alibabacloud-go/darabonba-openapi/v2 v2.2.3
+	connectrpc.com/connect v1.20.0
+	github.com/alibabacloud-go/darabonba-openapi/v2 v2.2.4
 	github.com/alibabacloud-go/tea-utils/v2 v2.0.9
 	github.com/coder/websocket v1.8.15
-	github.com/qiniu/go-sdk/v7 v7.26.14
+	github.com/qiniu/go-sdk/v7 v7.26.18
 	github.com/spf13/cobra v1.10.2
 	github.com/spf13/viper v1.21.0
-	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.3.129
+	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/cdn v1.3.116
+	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.3.142
 	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/ssl v1.3.105
-	golang.org/x/net v0.56.0
+	github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo v1.3.142
+	github.com/tencentyun/cos-go-sdk-v5 v0.7.75
+	golang.org/x/net v0.57.0
 	google.golang.org/protobuf v1.36.11
 )
 
@@ -22,17 +25,21 @@ require (
 	github.com/alibabacloud-go/debug v1.0.1 // indirect
 	github.com/alibabacloud-go/endpoint-util v1.1.1 // indirect
 	github.com/alibabacloud-go/openapi-util v0.1.2 // indirect
-	github.com/alibabacloud-go/tea v1.5.2 // indirect
+	github.com/alibabacloud-go/tea v1.5.3 // indirect
 	github.com/aliyun/credentials-go v1.4.12 // indirect
+	github.com/clbanning/mxj v1.8.4 // indirect
 	github.com/clbanning/mxj/v2 v2.7.0 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
 	github.com/fsnotify/fsnotify v1.10.1 // indirect
 	github.com/go-viper/mapstructure/v2 v2.5.0 // indirect
+	github.com/google/go-querystring v1.2.0 // indirect
 	github.com/gorilla/websocket v1.5.3 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/json-iterator/go v1.1.13-0.20220915233716-71ac16282d12 // indirect
+	github.com/mitchellh/mapstructure v1.5.0 // indirect
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
 	github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee // indirect
+	github.com/mozillazg/go-httpheader v0.4.0 // indirect
 	github.com/pelletier/go-toml/v2 v2.4.3 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/rogpeppe/go-internal v1.14.1 // indirect
@@ -43,8 +50,8 @@ require (
 	github.com/subosito/gotenv v1.6.0 // indirect
 	github.com/tjfoc/gmsm v1.4.1 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/sys v0.46.0 // indirect
-	golang.org/x/text v0.39.0 // indirect
+	golang.org/x/sys v0.47.0 // indirect
+	golang.org/x/text v0.40.0 // indirect
 	gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c // indirect
 	gopkg.in/ini.v1 v1.67.3 // indirect
 )