88fb26cfc6
* [ISSUE#5695] Add a plugin SPI for configuration encryption and decryption for Nacos 2.0 (#6655) * Defines the interface * 增加aes实现 * 客户端、服务端加解密实现 * 客户端、服务端加解密实现 * fix code quality (#6727) * [ISSUE#5695] Add a plugin SPI for configuration encryption and decryption for Nacos 2.0, EncryptedDataKey is persisted (#6740) * Defines the interface * 增加aes实现 * 客户端、服务端加解密实现 * 客户端、服务端加解密实现 * 秘钥持久化 * 秘钥持久化 * [ISSUE#5695] Summer2021 Cache encryptedDataKey (#6878) * Defines the interface * 增加aes实现 * 客户端、服务端加解密实现 * 客户端、服务端加解密实现 * 秘钥持久化 * 秘钥持久化 * 秘钥缓存到内存中 * 解决冲突 * 修改filter继承AbstractConfigFilter (#6879) * [ISSUE#5695] Summer2021 EncryptedDataKey is persisted to Derby (#6882) * [ISSUE#5695] Add a plugin SPI for configuration encryption and decryption for Nacos 2.0 (#6655) * Defines the interface * 增加aes实现 * 客户端、服务端加解密实现 * 客户端、服务端加解密实现 * fix code quality (#6727) * # This is a combination of 6 commits.tree cf7a399f99c4d81b8667c8de06f5ceb8c79fb6f0 parent 8024ecf31bf23a9edab416be8a3bfd1c0e48ce5e author 李晓双 Li Xiao Shuang <644968328@qq.com> 1630028256 +0800 committer lixiaoshuang <644968328@qq.com> 1631804378 +0800 # This is a combination of 3 commits. # This is the 1st commit message: [ISSUE#5695] Add a plugin SPI for configuration encryption and decryption for Nacos 2.0, EncryptedDataKey is persisted (#6740) * Defines the interface * 增加aes实现 * 客户端、服务端加解密实现 * 客户端、服务端加解密实现 * 秘钥持久化 * 秘钥持久化 # This is the commit message #2: [ISSUE#5695] Summer2021 Cache encryptedDataKey (#6878) * Defines the interface * 增加aes实现 * 客户端、服务端加解密实现 * 客户端、服务端加解密实现 * 秘钥持久化 * 秘钥持久化 * 秘钥缓存到内存中 * 解决冲突 # This is the commit message #3: 修改filter继承AbstractConfigFilter (#6879) # This is the commit message #6: 客户端、服务端加解密实现 * parent 8024ecf31bf23a9edab416be8a3bfd1c0e48ce5e author 李晓双 Li Xiao Shuang <644968328@qq.com> 1630028256 +0800 committer lixiaoshuang <644968328@qq.com> 1631805204 +0800 parent 8024ecf31bf23a9edab416be8a3bfd1c0e48ce5e author 李晓双 Li Xiao Shuang <644968328@qq.com> 1630028256 +0800 committer lixiaoshuang <644968328@qq.com> 1631804378 +0800 [ISSUE#5695] Add a plugin SPI for configuration encryption and decryption for Nacos 2.0, EncryptedDataKey is persisted (#6740) * 配置加解密插件 * derby支持秘钥存储 * 克隆功能兼容配置加解密 (#6913) * [ISSUE#5695] Summer2021 Import/export compatible with configuration encryption and decryption (#6956) * 克隆功能兼容配置加解密 * 导入导出兼容配置加解密 * 秘钥base64编码、更换AES加密模式 (#6974) * [ISSUE#5695] Summer2021 add unit test for ConfigCryptoFilter (#6991) * add unit test for ConfigCryptoFilter * add unit test for ConfigCryptoFilter * [ISSUE#5695] Summer2021 add unit test for CryptoExecutor (#6990) * add unit test for CryptoExecutor * add Copyright * [ISSUE#5695] Summer2021 add unit test for CryptoManager (#6989) * add unit test for CryptoManager * add unit test for CryptoManager * [ISSUE#5695] Summer2021 add unit test for AesCrypto (#6988) * add unit test for AesCrypto * update AesCryptoTest * Increased iv randomness * add default Iv * fix javadoc * fix unit test * defining plugin intergace * Replace the client encryption and decryption actuator * Replace the server encryption and decryption actuator * add unit test * add unit test * remove old code * fix NacosConfigServiceTest * Encryption and decryption to achieve migration Co-authored-by: 杨翊 SionYang <263976490@qq.com>
222 lines
11 KiB
SQL
222 lines
11 KiB
SQL
/*
|
||
* Copyright 1999-2018 Alibaba Group Holding Ltd.
|
||
*
|
||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||
* you may not use this file except in compliance with the License.
|
||
* You may obtain a copy of the License at
|
||
*
|
||
* http://www.apache.org/licenses/LICENSE-2.0
|
||
*
|
||
* Unless required by applicable law or agreed to in writing, software
|
||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||
* See the License for the specific language governing permissions and
|
||
* limitations under the License.
|
||
*/
|
||
|
||
/******************************************/
|
||
/* 数据库全名 = nacos_config */
|
||
/* 表名称 = config_info */
|
||
/******************************************/
|
||
CREATE TABLE `config_info` (
|
||
`id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT 'id',
|
||
`data_id` varchar(255) NOT NULL COMMENT 'data_id',
|
||
`group_id` varchar(255) DEFAULT NULL,
|
||
`content` longtext NOT NULL COMMENT 'content',
|
||
`md5` varchar(32) DEFAULT NULL COMMENT 'md5',
|
||
`gmt_create` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
|
||
`gmt_modified` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '修改时间',
|
||
`src_user` text COMMENT 'source user',
|
||
`src_ip` varchar(50) DEFAULT NULL COMMENT 'source ip',
|
||
`app_name` varchar(128) DEFAULT NULL,
|
||
`tenant_id` varchar(128) DEFAULT '' COMMENT '租户字段',
|
||
`c_desc` varchar(256) DEFAULT NULL,
|
||
`c_use` varchar(64) DEFAULT NULL,
|
||
`effect` varchar(64) DEFAULT NULL,
|
||
`type` varchar(64) DEFAULT NULL,
|
||
`c_schema` text,
|
||
`encrypted_data_key` text NOT NULL COMMENT '秘钥',
|
||
PRIMARY KEY (`id`),
|
||
UNIQUE KEY `uk_configinfo_datagrouptenant` (`data_id`,`group_id`,`tenant_id`)
|
||
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='config_info';
|
||
|
||
/******************************************/
|
||
/* 数据库全名 = nacos_config */
|
||
/* 表名称 = config_info_aggr */
|
||
/******************************************/
|
||
CREATE TABLE `config_info_aggr` (
|
||
`id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT 'id',
|
||
`data_id` varchar(255) NOT NULL COMMENT 'data_id',
|
||
`group_id` varchar(255) NOT NULL COMMENT 'group_id',
|
||
`datum_id` varchar(255) NOT NULL COMMENT 'datum_id',
|
||
`content` longtext NOT NULL COMMENT '内容',
|
||
`gmt_modified` datetime NOT NULL COMMENT '修改时间',
|
||
`app_name` varchar(128) DEFAULT NULL,
|
||
`tenant_id` varchar(128) DEFAULT '' COMMENT '租户字段',
|
||
PRIMARY KEY (`id`),
|
||
UNIQUE KEY `uk_configinfoaggr_datagrouptenantdatum` (`data_id`,`group_id`,`tenant_id`,`datum_id`)
|
||
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='增加租户字段';
|
||
|
||
|
||
/******************************************/
|
||
/* 数据库全名 = nacos_config */
|
||
/* 表名称 = config_info_beta */
|
||
/******************************************/
|
||
CREATE TABLE `config_info_beta` (
|
||
`id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT 'id',
|
||
`data_id` varchar(255) NOT NULL COMMENT 'data_id',
|
||
`group_id` varchar(128) NOT NULL COMMENT 'group_id',
|
||
`app_name` varchar(128) DEFAULT NULL COMMENT 'app_name',
|
||
`content` longtext NOT NULL COMMENT 'content',
|
||
`beta_ips` varchar(1024) DEFAULT NULL COMMENT 'betaIps',
|
||
`md5` varchar(32) DEFAULT NULL COMMENT 'md5',
|
||
`gmt_create` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
|
||
`gmt_modified` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '修改时间',
|
||
`src_user` text COMMENT 'source user',
|
||
`src_ip` varchar(50) DEFAULT NULL COMMENT 'source ip',
|
||
`tenant_id` varchar(128) DEFAULT '' COMMENT '租户字段',
|
||
`encrypted_data_key` text NOT NULL COMMENT '秘钥',
|
||
PRIMARY KEY (`id`),
|
||
UNIQUE KEY `uk_configinfobeta_datagrouptenant` (`data_id`,`group_id`,`tenant_id`)
|
||
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='config_info_beta';
|
||
|
||
/******************************************/
|
||
/* 数据库全名 = nacos_config */
|
||
/* 表名称 = config_info_tag */
|
||
/******************************************/
|
||
CREATE TABLE `config_info_tag` (
|
||
`id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT 'id',
|
||
`data_id` varchar(255) NOT NULL COMMENT 'data_id',
|
||
`group_id` varchar(128) NOT NULL COMMENT 'group_id',
|
||
`tenant_id` varchar(128) DEFAULT '' COMMENT 'tenant_id',
|
||
`tag_id` varchar(128) NOT NULL COMMENT 'tag_id',
|
||
`app_name` varchar(128) DEFAULT NULL COMMENT 'app_name',
|
||
`content` longtext NOT NULL COMMENT 'content',
|
||
`md5` varchar(32) DEFAULT NULL COMMENT 'md5',
|
||
`gmt_create` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
|
||
`gmt_modified` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '修改时间',
|
||
`src_user` text COMMENT 'source user',
|
||
`src_ip` varchar(50) DEFAULT NULL COMMENT 'source ip',
|
||
PRIMARY KEY (`id`),
|
||
UNIQUE KEY `uk_configinfotag_datagrouptenanttag` (`data_id`,`group_id`,`tenant_id`,`tag_id`)
|
||
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='config_info_tag';
|
||
|
||
/******************************************/
|
||
/* 数据库全名 = nacos_config */
|
||
/* 表名称 = config_tags_relation */
|
||
/******************************************/
|
||
CREATE TABLE `config_tags_relation` (
|
||
`id` bigint(20) NOT NULL COMMENT 'id',
|
||
`tag_name` varchar(128) NOT NULL COMMENT 'tag_name',
|
||
`tag_type` varchar(64) DEFAULT NULL COMMENT 'tag_type',
|
||
`data_id` varchar(255) NOT NULL COMMENT 'data_id',
|
||
`group_id` varchar(128) NOT NULL COMMENT 'group_id',
|
||
`tenant_id` varchar(128) DEFAULT '' COMMENT 'tenant_id',
|
||
`nid` bigint(20) NOT NULL AUTO_INCREMENT,
|
||
PRIMARY KEY (`nid`),
|
||
UNIQUE KEY `uk_configtagrelation_configidtag` (`id`,`tag_name`,`tag_type`),
|
||
KEY `idx_tenant_id` (`tenant_id`)
|
||
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='config_tag_relation';
|
||
|
||
/******************************************/
|
||
/* 数据库全名 = nacos_config */
|
||
/* 表名称 = group_capacity */
|
||
/******************************************/
|
||
CREATE TABLE `group_capacity` (
|
||
`id` bigint(20) unsigned NOT NULL AUTO_INCREMENT COMMENT '主键ID',
|
||
`group_id` varchar(128) NOT NULL DEFAULT '' COMMENT 'Group ID，空字符表示整个集群',
|
||
`quota` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '配额，0表示使用默认值',
|
||
`usage` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '使用量',
|
||
`max_size` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '单个配置大小上限，单位为字节，0表示使用默认值',
|
||
`max_aggr_count` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '聚合子配置最大个数，，0表示使用默认值',
|
||
`max_aggr_size` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '单个聚合数据的子配置大小上限，单位为字节，0表示使用默认值',
|
||
`max_history_count` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '最大变更历史数量',
|
||
`gmt_create` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
|
||
`gmt_modified` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '修改时间',
|
||
PRIMARY KEY (`id`),
|
||
UNIQUE KEY `uk_group_id` (`group_id`)
|
||
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='集群、各Group容量信息表';
|
||
|
||
/******************************************/
|
||
/* 数据库全名 = nacos_config */
|
||
/* 表名称 = his_config_info */
|
||
/******************************************/
|
||
CREATE TABLE `his_config_info` (
|
||
`id` bigint(64) unsigned NOT NULL,
|
||
`nid` bigint(20) unsigned NOT NULL AUTO_INCREMENT,
|
||
`data_id` varchar(255) NOT NULL,
|
||
`group_id` varchar(128) NOT NULL,
|
||
`app_name` varchar(128) DEFAULT NULL COMMENT 'app_name',
|
||
`content` longtext NOT NULL,
|
||
`md5` varchar(32) DEFAULT NULL,
|
||
`gmt_create` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||
`gmt_modified` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
||
`src_user` text,
|
||
`src_ip` varchar(50) DEFAULT NULL,
|
||
`op_type` char(10) DEFAULT NULL,
|
||
`tenant_id` varchar(128) DEFAULT '' COMMENT '租户字段',
|
||
`encrypted_data_key` text NOT NULL COMMENT '秘钥',
|
||
PRIMARY KEY (`nid`),
|
||
KEY `idx_gmt_create` (`gmt_create`),
|
||
KEY `idx_gmt_modified` (`gmt_modified`),
|
||
KEY `idx_did` (`data_id`)
|
||
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='多租户改造';
|
||
|
||
|
||
/******************************************/
|
||
/* 数据库全名 = nacos_config */
|
||
/* 表名称 = tenant_capacity */
|
||
/******************************************/
|
||
CREATE TABLE `tenant_capacity` (
|
||
`id` bigint(20) unsigned NOT NULL AUTO_INCREMENT COMMENT '主键ID',
|
||
`tenant_id` varchar(128) NOT NULL DEFAULT '' COMMENT 'Tenant ID',
|
||
`quota` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '配额，0表示使用默认值',
|
||
`usage` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '使用量',
|
||
`max_size` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '单个配置大小上限，单位为字节，0表示使用默认值',
|
||
`max_aggr_count` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '聚合子配置最大个数',
|
||
`max_aggr_size` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '单个聚合数据的子配置大小上限，单位为字节，0表示使用默认值',
|
||
`max_history_count` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '最大变更历史数量',
|
||
`gmt_create` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
|
||
`gmt_modified` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '修改时间',
|
||
PRIMARY KEY (`id`),
|
||
UNIQUE KEY `uk_tenant_id` (`tenant_id`)
|
||
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='租户容量信息表';
|
||
|
||
|
||
CREATE TABLE `tenant_info` (
|
||
`id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT 'id',
|
||
`kp` varchar(128) NOT NULL COMMENT 'kp',
|
||
`tenant_id` varchar(128) default '' COMMENT 'tenant_id',
|
||
`tenant_name` varchar(128) default '' COMMENT 'tenant_name',
|
||
`tenant_desc` varchar(256) DEFAULT NULL COMMENT 'tenant_desc',
|
||
`create_source` varchar(32) DEFAULT NULL COMMENT 'create_source',
|
||
`gmt_create` bigint(20) NOT NULL COMMENT '创建时间',
|
||
`gmt_modified` bigint(20) NOT NULL COMMENT '修改时间',
|
||
PRIMARY KEY (`id`),
|
||
UNIQUE KEY `uk_tenant_info_kptenantid` (`kp`,`tenant_id`),
|
||
KEY `idx_tenant_id` (`tenant_id`)
|
||
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='tenant_info';
|
||
|
||
CREATE TABLE `users` (
|
||
`username` varchar(50) NOT NULL PRIMARY KEY,
|
||
`password` varchar(500) NOT NULL,
|
||
`enabled` boolean NOT NULL
|
||
);
|
||
|
||
CREATE TABLE `roles` (
|
||
`username` varchar(50) NOT NULL,
|
||
`role` varchar(50) NOT NULL,
|
||
UNIQUE INDEX `idx_user_role` (`username` ASC, `role` ASC) USING BTREE
|
||
);
|
||
|
||
CREATE TABLE `permissions` (
|
||
`role` varchar(50) NOT NULL,
|
||
`resource` varchar(255) NOT NULL,
|
||
`action` varchar(8) NOT NULL,
|
||
UNIQUE INDEX `uk_role_permission` (`role`,`resource`,`action`) USING BTREE
|
||
);
|
||
|
||
INSERT INTO users (username, password, enabled) VALUES ('nacos', '$2a$10$EuWPZHzz32dJN7jexM34MOeYirDdFAZm2kuWj7VEOJhhZkDrxfvUu', TRUE);
|
||
|
||
INSERT INTO roles (username, role) VALUES ('nacos', 'ROLE_ADMIN');
|