mirror of
https://github.com/tiennm99/coolify.git
synced 2026-08-23 20:25:39 +00:00
Andras Bacsai
6ae45684f9
Split V5 dashboard behavior into domain controllers and policies, add agent token rotation/revocation, status reconciliation jobs, ingress firewall syncing, and canvas connection APIs. Add migrations for V5 status tracking, server capabilities, resource connection aliases, and revoked agent tokens.
66 lines
2.2 KiB
PHP
66 lines
2.2 KiB
PHP
<?php
|
|
|
|
namespace App\Jobs;
|
|
|
|
use App\Enums\V5\ServerStatus;
|
|
use App\Models\V5\Server as V5Server;
|
|
use Illuminate\Bus\Queueable;
|
|
use Illuminate\Contracts\Queue\ShouldQueue;
|
|
use Illuminate\Foundation\Bus\Dispatchable;
|
|
use Illuminate\Queue\InteractsWithQueue;
|
|
use Illuminate\Queue\SerializesModels;
|
|
use Illuminate\Support\Facades\Log;
|
|
|
|
/**
|
|
* Scheduled fan-out for host JWT rotation: dispatches one V5RotateAgentTokenJob
|
|
* per managed server whose on-disk token is missing or within the configured
|
|
* refresh threshold of expiry, so a fresh token is always on disk before the
|
|
* current one lapses.
|
|
*/
|
|
class V5RotateAgentTokensJob implements ShouldQueue
|
|
{
|
|
use Dispatchable, InteractsWithQueue, Queueable, SerializesModels;
|
|
|
|
public int $tries = 1;
|
|
|
|
public int $timeout = 60;
|
|
|
|
/**
|
|
* Rotation shares the reconcile queue so the hourly fleet fan-out can never
|
|
* starve user-triggered deploys and bootstraps on the default queue. Set via
|
|
* onQueue() rather than a `$queue` property redeclaration, which the
|
|
* Queueable trait already defines (redeclaring with a default is an
|
|
* incompatible property composition and fatals on PHP 8.5).
|
|
*/
|
|
public function __construct()
|
|
{
|
|
$this->onQueue('v5-reconcile');
|
|
}
|
|
|
|
public function handle(): void
|
|
{
|
|
$threshold = now()->addSeconds((int) config('flux.host_token_refresh_threshold'));
|
|
|
|
V5Server::query()
|
|
->where('status', ServerStatus::Installed->value)
|
|
->where('has_coold', true)
|
|
->whereNotNull('last_bootstrapped_at')
|
|
->where(function ($query) use ($threshold): void {
|
|
$query
|
|
->whereNull('agent_token_expires_at')
|
|
->orWhere('agent_token_expires_at', '<', $threshold);
|
|
})
|
|
->get()
|
|
->each(function (V5Server $server): void {
|
|
try {
|
|
V5RotateAgentTokenJob::dispatch($server->id);
|
|
} catch (\Throwable $exception) {
|
|
Log::warning('V5 token rotation dispatch failed for a server.', [
|
|
'server_id' => $server->id,
|
|
'error' => $exception->getMessage(),
|
|
]);
|
|
}
|
|
});
|
|
}
|
|
}
|