15 KiB
15 KiB
aws-ec2-panel 数据库设计
本文档描述了 aws_ec2_panel 项目的完整 MySQL 数据库结构，包含多租户、用户管理、AWS 凭证、EC2 实例、任务中心与审计日志等表结构。
1. 创建数据库
CREATE DATABASE IF NOT EXISTS aws_ec2_panel
DEFAULT CHARACTER SET utf8mb4
COLLATE utf8mb4_unicode_ci;
USE aws_ec2_panel;
2. 角色表：roles
CREATE TABLE roles (
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT '角色主键',
name VARCHAR(64) NOT NULL COMMENT '角色名，如 ADMIN / CUSTOMER_ADMIN / CUSTOMER_USER',
description VARCHAR(255) DEFAULT NULL COMMENT '角色说明',
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
UNIQUE KEY uniq_role_name (name)
) ENGINE=InnoDB
DEFAULT CHARSET=utf8mb4
COLLATE=utf8mb4_unicode_ci
COMMENT='角色表';
3. 客户 / 租户表：customers
CREATE TABLE customers (
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT '客户主键',
name VARCHAR(128) NOT NULL COMMENT '客户/租户名称，展示用',
contact_email VARCHAR(128) DEFAULT NULL COMMENT '联系邮箱',
is_active TINYINT(1) NOT NULL DEFAULT 1 COMMENT '是否启用 1=启用 0=禁用',
quota_instances INT UNSIGNED DEFAULT NULL COMMENT '实例数量配额，NULL 表示不限制',
notes VARCHAR(255) DEFAULT NULL COMMENT '备注',
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
UNIQUE KEY uniq_customer_name (name)
) ENGINE=InnoDB
DEFAULT CHARSET=utf8mb4
COLLATE=utf8mb4_unicode_ci
COMMENT='客户/租户表';
4. 用户表：users
CREATE TABLE users (
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT '用户主键',
username VARCHAR(64) NOT NULL COMMENT '登录用户名',
email VARCHAR(128) DEFAULT NULL COMMENT '邮箱',
password_hash VARCHAR(255) NOT NULL COMMENT '密码哈希',
role_id BIGINT UNSIGNED NOT NULL COMMENT '角色ID，FK到roles',
customer_id BIGINT UNSIGNED DEFAULT NULL COMMENT '归属客户ID，平台管理员可为空',
is_active TINYINT(1) NOT NULL DEFAULT 1 COMMENT '是否启用 1=启用 0=禁用',
last_login_at DATETIME DEFAULT NULL COMMENT '最近登录时间',
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
CONSTRAINT fk_users_roles FOREIGN KEY (role_id)
REFERENCES roles(id)
ON DELETE RESTRICT
ON UPDATE CASCADE,
CONSTRAINT fk_users_customers FOREIGN KEY (customer_id)
REFERENCES customers(id)
ON DELETE SET NULL
ON UPDATE CASCADE,
UNIQUE KEY uniq_username (username),
UNIQUE KEY uniq_email (email),
KEY idx_users_role (role_id),
KEY idx_users_customer (customer_id)
) ENGINE=InnoDB
DEFAULT CHARSET=utf8mb4
COLLATE=utf8mb4_unicode_ci
COMMENT='用户表';
5. AWS 凭证表：aws_credentials
CREATE TABLE aws_credentials (
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT 'AWS 凭证主键',
name VARCHAR(128) NOT NULL COMMENT '凭证名称，控制台展示用',
account_id VARCHAR(32) NOT NULL COMMENT 'AWS Account ID (12位)',
credential_type ENUM('ACCESS_KEY', 'ASSUME_ROLE') NOT NULL DEFAULT 'ACCESS_KEY' COMMENT '凭证类型',
access_key_id VARCHAR(128) DEFAULT NULL COMMENT 'ACCESS_KEY_ID，ACCESS_KEY 时必填',
secret_access_key VARCHAR(256) DEFAULT NULL COMMENT 'SECRET_ACCESS_KEY，ACCESS_KEY 时必填',
role_arn VARCHAR(256) DEFAULT NULL COMMENT 'ASSUME_ROLE 模式下的 RoleArn',
external_id VARCHAR(128) DEFAULT NULL COMMENT 'ASSUME_ROLE 模式下使用的 ExternalId',
default_region VARCHAR(32) NOT NULL DEFAULT 'ap-northeast-1' COMMENT '默认 Region',
is_active TINYINT(1) NOT NULL DEFAULT 1 COMMENT '是否启用',
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
UNIQUE KEY uniq_credential_account_name (account_id, name),
KEY idx_credential_account (account_id),
KEY idx_credential_active (is_active)
) ENGINE=InnoDB
DEFAULT CHARSET=utf8mb4
COLLATE=utf8mb4_unicode_ci
COMMENT='AWS 凭证表';
6. 客户 ↔ 凭证映射表：customer_credentials
CREATE TABLE customer_credentials (
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT '映射主键',
customer_id BIGINT UNSIGNED NOT NULL COMMENT '客户ID',
credential_id BIGINT UNSIGNED NOT NULL COMMENT 'AWS 凭证ID',
is_allowed TINYINT(1) NOT NULL DEFAULT 1 COMMENT '是否允许该客户使用此凭证',
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
CONSTRAINT fk_cc_customer FOREIGN KEY (customer_id)
REFERENCES customers(id)
ON DELETE CASCADE
ON UPDATE CASCADE,
CONSTRAINT fk_cc_credential FOREIGN KEY (credential_id)
REFERENCES aws_credentials(id)
ON DELETE CASCADE
ON UPDATE CASCADE,
UNIQUE KEY uniq_customer_credential (customer_id, credential_id),
KEY idx_cc_customer (customer_id),
KEY idx_cc_credential (credential_id)
) ENGINE=InnoDB
DEFAULT CHARSET=utf8mb4
COLLATE=utf8mb4_unicode_ci
COMMENT='客户与AWS凭证授权映射表';
7. 实例表：instances
CREATE TABLE instances (
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT '实例主键',
customer_id BIGINT UNSIGNED NOT NULL COMMENT '归属客户ID',
credential_id BIGINT UNSIGNED DEFAULT NULL COMMENT '来自哪条AWS凭证（可为空）',
account_id VARCHAR(32) NOT NULL COMMENT 'AWS Account ID',
region VARCHAR(32) NOT NULL COMMENT '区域，如 ap-northeast-1',
az VARCHAR(32) DEFAULT NULL COMMENT '可用区，如 ap-northeast-1a',
instance_id VARCHAR(32) NOT NULL COMMENT 'AWS EC2 InstanceId，如 i-xxxx',
name_tag VARCHAR(255) DEFAULT NULL COMMENT 'Name 标签',
instance_type VARCHAR(64) NOT NULL COMMENT '实例规格，如 t3.micro',
ami_id VARCHAR(64) DEFAULT NULL COMMENT 'AMI ID，如 ami-xxxx',
key_name VARCHAR(128) DEFAULT NULL COMMENT '密钥对名称',
public_ip VARCHAR(45) DEFAULT NULL COMMENT '公网IP',
private_ip VARCHAR(45) DEFAULT NULL COMMENT '私网IP',
status ENUM(
'PENDING',
'RUNNING',
'STOPPING',
'STOPPED',
'SHUTTING_DOWN',
'TERMINATED',
'UNKNOWN'
) NOT NULL DEFAULT 'UNKNOWN' COMMENT '当前观测状态',
desired_status ENUM('RUNNING','STOPPED','TERMINATED') DEFAULT NULL COMMENT '用户期望状态',
security_groups JSON DEFAULT NULL COMMENT '安全组列表，sg-xxx 数组',
subnet_id VARCHAR(64) DEFAULT NULL COMMENT '子网ID',
vpc_id VARCHAR(64) DEFAULT NULL COMMENT 'VPC ID',
launched_at DATETIME DEFAULT NULL COMMENT '实例启动时间',
terminated_at DATETIME DEFAULT NULL COMMENT '实例终止时间',
last_sync DATETIME DEFAULT NULL COMMENT '最近同步时间',
last_cloud_state JSON DEFAULT NULL COMMENT '上次同步时的云端原始信息（部分）',
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
CONSTRAINT fk_instances_customer FOREIGN KEY (customer_id)
REFERENCES customers(id)
ON DELETE CASCADE
ON UPDATE CASCADE,
CONSTRAINT fk_instances_credential FOREIGN KEY (credential_id)
REFERENCES aws_credentials(id)
ON DELETE SET NULL
ON UPDATE CASCADE,
UNIQUE KEY uniq_instance_cloud (account_id, region, instance_id),
KEY idx_instances_customer (customer_id),
KEY idx_instances_status (status),
KEY idx_instances_region (region),
KEY idx_instances_last_sync (last_sync)
) ENGINE=InnoDB
DEFAULT CHARSET=utf8mb4
COLLATE=utf8mb4_unicode_ci
COMMENT='AWS EC2 实例表';
8. 任务主表：jobs
CREATE TABLE jobs (
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT '任务主键',
job_uuid CHAR(32) NOT NULL COMMENT '任务UUID，对外查询用',
job_type ENUM(
'SYNC_INSTANCES',
'START_INSTANCES',
'STOP_INSTANCES',
'REBOOT_INSTANCES',
'TERMINATE_INSTANCES',
'CREATE_INSTANCES'
) NOT NULL COMMENT '任务类型',
status ENUM('PENDING','RUNNING','SUCCESS','FAILED') NOT NULL DEFAULT 'PENDING' COMMENT '任务状态',
progress TINYINT UNSIGNED NOT NULL DEFAULT 0 COMMENT '进度 0~100',
total_count INT UNSIGNED DEFAULT 0 COMMENT '总数量',
success_count INT UNSIGNED DEFAULT 0 COMMENT '成功数量',
fail_count INT UNSIGNED DEFAULT 0 COMMENT '失败数量',
skipped_count INT UNSIGNED DEFAULT 0 COMMENT '跳过数量',
payload JSON DEFAULT NULL COMMENT '任务参数，如实例列表、过滤条件',
error_message VARCHAR(512) DEFAULT NULL COMMENT '任务层面错误信息摘要',
created_by_user_id BIGINT UNSIGNED DEFAULT NULL COMMENT '创建该任务的用户ID',
created_for_customer BIGINT UNSIGNED DEFAULT NULL COMMENT '面向的客户ID（通常等于用户 customer_id）',
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
started_at DATETIME DEFAULT NULL COMMENT '开始时间',
finished_at DATETIME DEFAULT NULL COMMENT '结束时间',
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
CONSTRAINT fk_jobs_user FOREIGN KEY (created_by_user_id)
REFERENCES users(id)
ON DELETE SET NULL
ON UPDATE CASCADE,
CONSTRAINT fk_jobs_customer FOREIGN KEY (created_for_customer)
REFERENCES customers(id)
ON DELETE SET NULL
ON UPDATE CASCADE,
UNIQUE KEY uniq_job_uuid (job_uuid),
KEY idx_jobs_type (job_type),
KEY idx_jobs_status (status),
KEY idx_jobs_created_at (created_at)
) ENGINE=InnoDB
DEFAULT CHARSET=utf8mb4
COLLATE=utf8mb4_unicode_ci
COMMENT='批量任务主表';
9. 任务子表：job_items
CREATE TABLE job_items (
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT '任务子项主键',
job_id BIGINT UNSIGNED NOT NULL COMMENT '任务ID',
resource_type ENUM('INSTANCE','OTHER') NOT NULL DEFAULT 'INSTANCE' COMMENT '资源类型',
resource_id BIGINT UNSIGNED DEFAULT NULL COMMENT '资源主键ID，如实例ID',
account_id VARCHAR(32) DEFAULT NULL COMMENT 'AWS Account ID，冗余便于查询',
region VARCHAR(32) DEFAULT NULL COMMENT 'Region，冗余便于查询',
instance_id VARCHAR(32) DEFAULT NULL COMMENT 'InstanceId，冗余便于查询',
action ENUM('CREATE','START','STOP','REBOOT','TERMINATE','SYNC') NOT NULL COMMENT '对子资源的动作',
status ENUM('PENDING','RUNNING','SUCCESS','FAILED','SKIPPED') NOT NULL DEFAULT 'PENDING' COMMENT '子项状态',
error_message VARCHAR(512) DEFAULT NULL COMMENT '错误信息',
extra JSON DEFAULT NULL COMMENT '额外信息，如AWS原始返回',
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
CONSTRAINT fk_job_items_job FOREIGN KEY (job_id)
REFERENCES jobs(id)
ON DELETE CASCADE
ON UPDATE CASCADE,
CONSTRAINT fk_job_items_instance FOREIGN KEY (resource_id)
REFERENCES instances(id)
ON DELETE SET NULL
ON UPDATE CASCADE,
KEY idx_job_items_job (job_id),
KEY idx_job_items_instance (resource_id),
KEY idx_job_items_status (status)
) ENGINE=InnoDB
DEFAULT CHARSET=utf8mb4
COLLATE=utf8mb4_unicode_ci
COMMENT='批量任务子项表';
10. 审计日志表：audit_logs
CREATE TABLE audit_logs (
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT '审计日志主键',
user_id BIGINT UNSIGNED DEFAULT NULL COMMENT '操作用户ID',
customer_id BIGINT UNSIGNED DEFAULT NULL COMMENT '客户ID（若有）',
action ENUM(
'LOGIN',
'LOGOUT',
'INSTANCE_CREATE',
'INSTANCE_START',
'INSTANCE_STOP',
'INSTANCE_REBOOT',
'INSTANCE_TERMINATE',
'INSTANCE_SYNC',
'CREDENTIAL_CREATE',
'CREDENTIAL_UPDATE',
'CREDENTIAL_DELETE',
'CUSTOMER_CREATE',
'CUSTOMER_UPDATE',
'CUSTOMER_DELETE',
'USER_CREATE',
'USER_UPDATE',
'USER_DELETE',
'OTHER'
) NOT NULL COMMENT '动作类型',
resource_type ENUM('USER','CUSTOMER','AWS_CREDENTIAL','INSTANCE','JOB','OTHER') NOT NULL COMMENT '资源类型',
resource_id BIGINT UNSIGNED DEFAULT NULL COMMENT '资源ID（可空，如登录无具体资源）',
description VARCHAR(512) DEFAULT NULL COMMENT '简要描述，便于阅读',
payload JSON DEFAULT NULL COMMENT '附加信息，如请求参数、旧值/新值等',
ip_address VARCHAR(45) DEFAULT NULL COMMENT '操作来源 IP',
user_agent VARCHAR(255) DEFAULT NULL COMMENT 'User-Agent',
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
CONSTRAINT fk_audit_user FOREIGN KEY (user_id)
REFERENCES users(id)
ON DELETE SET NULL
ON UPDATE CASCADE,
CONSTRAINT fk_audit_customer FOREIGN KEY (customer_id)
REFERENCES customers(id)
ON DELETE SET NULL
ON UPDATE CASCADE,
KEY idx_audit_customer (customer_id),
KEY idx_audit_action (action),
KEY idx_audit_created_at (created_at),
KEY idx_audit_resource (resource_type, resource_id)
) ENGINE=InnoDB
DEFAULT CHARSET=utf8mb4
COLLATE=utf8mb4_unicode_ci
COMMENT='审计日志表';
11. 全局设置表：settings
CREATE TABLE settings (
id BIGINT UNSIGNED PRIMARY KEY AUTO_INCREMENT COMMENT '主键',
k VARCHAR(128) NOT NULL COMMENT '配置键',
v TEXT DEFAULT NULL COMMENT '配置值，建议存JSON或简单字符串',
description VARCHAR(255) DEFAULT NULL COMMENT '配置说明',
updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP COMMENT '更新时间',
UNIQUE KEY uniq_settings_key (k)
) ENGINE=InnoDB
DEFAULT CHARSET=utf8mb4
COLLATE=utf8mb4_unicode_ci
COMMENT='全局配置KV表';
ALTER TABLE instances ADD COLUMN os_name VARCHAR(128);