feat: add edgio applications v7 deployer

internal/applicant/applicant.go

@@ -20,9 +20,9 @@ import (
 )
 
 type ApplyCertResult struct {
-	Certificate       string
-	PrivateKey        string
+	CertificateChain  string
 	IssuerCertificate string
+	PrivateKey        string
 	ACMECertUrl       string
 	ACMECertStableUrl string
 	CSR               string
@@ -150,9 +150,9 @@ func apply(challengeProvider challenge.Provider, options *applicantOptions) (*Ap
 	}
 
 	return &ApplyCertResult{
-		PrivateKey:        string(certResource.PrivateKey),
-		Certificate:       string(certResource.Certificate),
-		IssuerCertificate: string(certResource.IssuerCertificate),
+		CertificateChain:  strings.TrimSpace(string(certResource.Certificate)),
+		IssuerCertificate: strings.TrimSpace(string(certResource.IssuerCertificate)),
+		PrivateKey:        strings.TrimSpace(string(certResource.PrivateKey)),
 		ACMECertUrl:       certResource.CertURL,
 		ACMECertStableUrl: certResource.CertStableURL,
 		CSR:               string(certResource.CSR),

internal/deployer/providers.go

@@ -15,6 +15,7 @@ import (
 	providerBaiduCloudCDN "github.com/usual2970/certimate/internal/pkg/core/deployer/providers/baiducloud-cdn"
 	providerBytePlusCDN "github.com/usual2970/certimate/internal/pkg/core/deployer/providers/byteplus-cdn"
 	providerDogeCDN "github.com/usual2970/certimate/internal/pkg/core/deployer/providers/dogecloud-cdn"
+	providerEdgioApplications "github.com/usual2970/certimate/internal/pkg/core/deployer/providers/edgio-applications"
 	providerHuaweiCloudCDN "github.com/usual2970/certimate/internal/pkg/core/deployer/providers/huaweicloud-cdn"
 	providerHuaweiCloudELB "github.com/usual2970/certimate/internal/pkg/core/deployer/providers/huaweicloud-elb"
 	providerK8sSecret "github.com/usual2970/certimate/internal/pkg/core/deployer/providers/k8s-secret"
@@ -175,6 +176,21 @@ func createDeployer(options *deployerOptions) (deployer.Deployer, logger.Logger,
 			return deployer, logger, err
 		}
 
+	case domain.DeployProviderTypeEdgioApplications:
+		{
+			access := domain.AccessConfigForEdgio{}
+			if err := maps.Decode(options.ProviderAccessConfig, &access); err != nil {
+				return nil, nil, fmt.Errorf("failed to decode provider access config: %w", err)
+			}
+
+			deployer, err := providerEdgioApplications.NewWithLogger(&providerEdgioApplications.EdgioApplicationsDeployerConfig{
+				ClientId:      access.ClientId,
+				ClientSecret:  access.ClientSecret,
+				EnvironmentId: maps.GetValueAsString(options.ProviderDeployConfig, "environmentId"),
+			}, logger)
+			return deployer, logger, err
+		}
+
 	case domain.DeployProviderTypeHuaweiCloudCDN, domain.DeployProviderTypeHuaweiCloudELB:
 		{
 			access := domain.AccessConfigForHuaweiCloud{}

internal/domain/access.go

@@ -66,6 +66,11 @@ type AccessConfigForDogeCloud struct {
 	SecretKey string `json:"secretKey"`
 }
 
+type AccessConfigForEdgio struct {
+	ClientId     string `json:"clientId"`
+	ClientSecret string `json:"clientSecret"`
+}
+
 type AccessConfigForGoDaddy struct {
 	ApiKey    string `json:"apiKey"`
 	ApiSecret string `json:"apiSecret"`

internal/domain/provider.go

@@ -17,6 +17,7 @@ const (
 	AccessProviderTypeBytePlus     = AccessProviderType("byteplus")
 	AccessProviderTypeCloudflare   = AccessProviderType("cloudflare")
 	AccessProviderTypeDogeCloud    = AccessProviderType("dogecloud")
+	AccessProviderTypeEdgio        = AccessProviderType("edgio")
 	AccessProviderTypeGoDaddy      = AccessProviderType("godaddy")
 	AccessProviderTypeHuaweiCloud  = AccessProviderType("huaweicloud")
 	AccessProviderTypeKubernetes   = AccessProviderType("k8s")
@@ -73,34 +74,35 @@ type DeployProviderType string
 	NOTICE: If you add new constant, please keep ASCII order.
 */
 const (
-	DeployProviderTypeAliyunALB        = DeployProviderType("aliyun-alb")
-	DeployProviderTypeAliyunCDN        = DeployProviderType("aliyun-cdn")
-	DeployProviderTypeAliyunCLB        = DeployProviderType("aliyun-clb")
-	DeployProviderTypeAliyunDCDN       = DeployProviderType("aliyun-dcdn")
-	DeployProviderTypeAliyunLive       = DeployProviderType("aliyun-live")
-	DeployProviderTypeAliyunNLB        = DeployProviderType("aliyun-nlb")
-	DeployProviderTypeAliyunOSS        = DeployProviderType("aliyun-oss")
-	DeployProviderTypeBaiduCloudCDN    = DeployProviderType("baiducloud-cdn")
-	DeployProviderTypeBytePlusCDN      = DeployProviderType("byteplus-cdn")
-	DeployProviderTypeDogeCloudCDN     = DeployProviderType("dogecloud-cdn")
-	DeployProviderTypeHuaweiCloudCDN   = DeployProviderType("huaweicloud-cdn")
-	DeployProviderTypeHuaweiCloudELB   = DeployProviderType("huaweicloud-elb")
-	DeployProviderTypeKubernetesSecret = DeployProviderType("k8s-secret")
-	DeployProviderTypeLocal            = DeployProviderType("local")
-	DeployProviderTypeQiniuCDN         = DeployProviderType("qiniu-cdn")
-	DeployProviderTypeSSH              = DeployProviderType("ssh")
-	DeployProviderTypeTencentCloudCDN  = DeployProviderType("tencentcloud-cdn")
-	DeployProviderTypeTencentCloudCLB  = DeployProviderType("tencentcloud-clb")
-	DeployProviderTypeTencentCloudCOS  = DeployProviderType("tencentcloud-cos")
-	DeployProviderTypeTencentCloudCSS  = DeployProviderType("tencentcloud-css")
-	DeployProviderTypeTencentCloudECDN = DeployProviderType("tencentcloud-ecdn")
-	DeployProviderTypeTencentCloudEO   = DeployProviderType("tencentcloud-eo")
-	DeployProviderTypeUCloudUCDN       = DeployProviderType("ucloud-ucdn")
-	DeployProviderTypeUCloudUS3        = DeployProviderType("ucloud-us3")
-	DeployProviderTypeVolcEngineCDN    = DeployProviderType("volcengine-cdn")
-	DeployProviderTypeVolcEngineCLB    = DeployProviderType("volcengine-clb")
-	DeployProviderTypeVolcEngineDCDN   = DeployProviderType("volcengine-dcdn")
-	DeployProviderTypeVolcEngineLive   = DeployProviderType("volcengine-live")
-	DeployProviderTypeVolcEngineTOS    = DeployProviderType("volcengine-tos")
-	DeployProviderTypeWebhook          = DeployProviderType("webhook")
+	DeployProviderTypeAliyunALB         = DeployProviderType("aliyun-alb")
+	DeployProviderTypeAliyunCDN         = DeployProviderType("aliyun-cdn")
+	DeployProviderTypeAliyunCLB         = DeployProviderType("aliyun-clb")
+	DeployProviderTypeAliyunDCDN        = DeployProviderType("aliyun-dcdn")
+	DeployProviderTypeAliyunLive        = DeployProviderType("aliyun-live")
+	DeployProviderTypeAliyunNLB         = DeployProviderType("aliyun-nlb")
+	DeployProviderTypeAliyunOSS         = DeployProviderType("aliyun-oss")
+	DeployProviderTypeBaiduCloudCDN     = DeployProviderType("baiducloud-cdn")
+	DeployProviderTypeBytePlusCDN       = DeployProviderType("byteplus-cdn")
+	DeployProviderTypeDogeCloudCDN      = DeployProviderType("dogecloud-cdn")
+	DeployProviderTypeEdgioApplications = DeployProviderType("edgio-applications")
+	DeployProviderTypeHuaweiCloudCDN    = DeployProviderType("huaweicloud-cdn")
+	DeployProviderTypeHuaweiCloudELB    = DeployProviderType("huaweicloud-elb")
+	DeployProviderTypeKubernetesSecret  = DeployProviderType("k8s-secret")
+	DeployProviderTypeLocal             = DeployProviderType("local")
+	DeployProviderTypeQiniuCDN          = DeployProviderType("qiniu-cdn")
+	DeployProviderTypeSSH               = DeployProviderType("ssh")
+	DeployProviderTypeTencentCloudCDN   = DeployProviderType("tencentcloud-cdn")
+	DeployProviderTypeTencentCloudCLB   = DeployProviderType("tencentcloud-clb")
+	DeployProviderTypeTencentCloudCOS   = DeployProviderType("tencentcloud-cos")
+	DeployProviderTypeTencentCloudCSS   = DeployProviderType("tencentcloud-css")
+	DeployProviderTypeTencentCloudECDN  = DeployProviderType("tencentcloud-ecdn")
+	DeployProviderTypeTencentCloudEO    = DeployProviderType("tencentcloud-eo")
+	DeployProviderTypeUCloudUCDN        = DeployProviderType("ucloud-ucdn")
+	DeployProviderTypeUCloudUS3         = DeployProviderType("ucloud-us3")
+	DeployProviderTypeVolcEngineCDN     = DeployProviderType("volcengine-cdn")
+	DeployProviderTypeVolcEngineCLB     = DeployProviderType("volcengine-clb")
+	DeployProviderTypeVolcEngineDCDN    = DeployProviderType("volcengine-dcdn")
+	DeployProviderTypeVolcEngineLive    = DeployProviderType("volcengine-live")
+	DeployProviderTypeVolcEngineTOS     = DeployProviderType("volcengine-tos")
+	DeployProviderTypeWebhook           = DeployProviderType("webhook")
 )

internal/pkg/core/deployer/providers/edgio-applications/edgio_applications.go

@@ -0,0 +1,112 @@
+package edgioapplications
+
+import (
+	"context"
+	"encoding/pem"
+	"errors"
+
+	xerrors "github.com/pkg/errors"
+
+	"github.com/usual2970/certimate/internal/pkg/core/deployer"
+	"github.com/usual2970/certimate/internal/pkg/core/logger"
+	edgsdk "github.com/usual2970/certimate/internal/pkg/vendors/edgio-sdk/applications/v7"
+	edgsdkDtos "github.com/usual2970/certimate/internal/pkg/vendors/edgio-sdk/applications/v7/dtos"
+)
+
+type EdgioApplicationsDeployerConfig struct {
+	// Edgio ClientId。
+	ClientId string `json:"clientId"`
+	// Edgio ClientSecret。
+	ClientSecret string `json:"clientSecret"`
+	// Edgio 环境 ID。
+	EnvironmentId string `json:"environmentId"`
+}
+
+type EdgioApplicationsDeployer struct {
+	config    *EdgioApplicationsDeployerConfig
+	logger    logger.Logger
+	sdkClient *edgsdk.EdgioClient
+}
+
+var _ deployer.Deployer = (*EdgioApplicationsDeployer)(nil)
+
+func New(config *EdgioApplicationsDeployerConfig) (*EdgioApplicationsDeployer, error) {
+	return NewWithLogger(config, logger.NewNilLogger())
+}
+
+func NewWithLogger(config *EdgioApplicationsDeployerConfig, logger logger.Logger) (*EdgioApplicationsDeployer, error) {
+	if config == nil {
+		return nil, errors.New("config is nil")
+	}
+
+	if logger == nil {
+		return nil, errors.New("logger is nil")
+	}
+
+	client, err := createSdkClient(config.ClientId, config.ClientSecret)
+	if err != nil {
+		return nil, xerrors.Wrap(err, "failed to create sdk client")
+	}
+
+	return &EdgioApplicationsDeployer{
+		logger:    logger,
+		config:    config,
+		sdkClient: client,
+	}, nil
+}
+
+func (d *EdgioApplicationsDeployer) Deploy(ctx context.Context, certPem string, privkeyPem string) (*deployer.DeployResult, error) {
+	// 提取 Edgio 所需的服务端证书和中间证书内容
+	privateCertPem, intermediateCertPem := extractCertChains(certPem)
+
+	// 上传 TLS 证书
+	// REF: https://docs.edg.io/rest_api/#tag/tls-certs/operation/postConfigV01TlsCerts
+	uploadTlsCertReq := edgsdkDtos.UploadTlsCertRequest{
+		EnvironmentID:    d.config.EnvironmentId,
+		PrimaryCert:      privateCertPem,
+		IntermediateCert: intermediateCertPem,
+		PrivateKey:       privkeyPem,
+	}
+	uploadTlsCertResp, err := d.sdkClient.UploadTlsCert(uploadTlsCertReq)
+	if err != nil {
+		return nil, xerrors.Wrap(err, "failed to execute sdk request 'edgio.UploadTlsCert'")
+	}
+
+	d.logger.Logt("已上传 TLS 证书", uploadTlsCertResp)
+
+	return &deployer.DeployResult{}, nil
+}
+
+func createSdkClient(clientId, clientSecret string) (*edgsdk.EdgioClient, error) {
+	client := edgsdk.NewEdgioClient(clientId, clientSecret, "", "")
+	return client, nil
+}
+
+func extractCertChains(certPem string) (primaryCertPem string, intermediateCertPem string) {
+	pemBlocks := make([]*pem.Block, 0)
+	pemData := []byte(certPem)
+	for {
+		block, rest := pem.Decode(pemData)
+		if block == nil {
+			break
+		}
+
+		pemBlocks = append(pemBlocks, block)
+		pemData = rest
+	}
+
+	primaryCertPem = ""
+	intermediateCertPem = ""
+
+	if len(pemBlocks) > 0 {
+		primaryCertPem = string(pem.EncodeToMemory(pemBlocks[0]))
+	}
+
+	if len(pemBlocks) > 1 {
+		for i := 1; i < len(pemBlocks); i++ {
+			intermediateCertPem += string(pem.EncodeToMemory(pemBlocks[i]))
+		}
+	}
+
+	return primaryCertPem, intermediateCertPem
+}

internal/pkg/core/deployer/providers/edgio-applications/edgio_applications_test.go

@@ -0,0 +1,75 @@
+package edgioapplications_test
+
+import (
+	"context"
+	"flag"
+	"fmt"
+	"os"
+	"strings"
+	"testing"
+
+	provider "github.com/usual2970/certimate/internal/pkg/core/deployer/providers/edgio-applications"
+)
+
+var (
+	fInputCertPath string
+	fInputKeyPath  string
+	fClientId      string
+	fClientSecret  string
+	fEnvironmentId string
+)
+
+func init() {
+	argsPrefix := "CERTIMATE_DEPLOYER_EDGIOAPPLICATIONS_"
+
+	flag.StringVar(&fInputCertPath, argsPrefix+"INPUTCERTPATH", "", "")
+	flag.StringVar(&fInputKeyPath, argsPrefix+"INPUTKEYPATH", "", "")
+	flag.StringVar(&fClientId, argsPrefix+"CLIENTID", "", "")
+	flag.StringVar(&fClientSecret, argsPrefix+"CLIENTSECRET", "", "")
+	flag.StringVar(&fEnvironmentId, argsPrefix+"ENVIRONMENTID", "", "")
+}
+
+/*
+Shell command to run this test:
+
+	go test -v ./edgio_applications_test.go -args \
+	--CERTIMATE_DEPLOYER_EDGIOAPPLICATIONS_INPUTCERTPATH="/path/to/your-input-cert.pem" \
+	--CERTIMATE_DEPLOYER_EDGIOAPPLICATIONS_INPUTKEYPATH="/path/to/your-input-key.pem" \
+	--CERTIMATE_DEPLOYER_EDGIOAPPLICATIONS_CLIENTID="your-client-id" \
+	--CERTIMATE_DEPLOYER_EDGIOAPPLICATIONS_CLIENTSECRET="your-client-secret" \
+	--CERTIMATE_DEPLOYER_EDGIOAPPLICATIONS_ENVIRONMENTID="your-enviroment-id"
+*/
+func TestDeploy(t *testing.T) {
+	flag.Parse()
+
+	t.Run("Deploy", func(t *testing.T) {
+		t.Log(strings.Join([]string{
+			"args:",
+			fmt.Sprintf("INPUTCERTPATH: %v", fInputCertPath),
+			fmt.Sprintf("INPUTKEYPATH: %v", fInputKeyPath),
+			fmt.Sprintf("CLIENTID: %v", fClientId),
+			fmt.Sprintf("CLIENTSECRET: %v", fClientSecret),
+			fmt.Sprintf("ENVIRONMENTID: %v", fEnvironmentId),
+		}, "\n"))
+
+		deployer, err := provider.New(&provider.EdgioApplicationsDeployerConfig{
+			ClientId:      fClientId,
+			ClientSecret:  fClientSecret,
+			EnvironmentId: fEnvironmentId,
+		})
+		if err != nil {
+			t.Errorf("err: %+v", err)
+			return
+		}
+
+		fInputCertData, _ := os.ReadFile(fInputCertPath)
+		fInputKeyData, _ := os.ReadFile(fInputKeyPath)
+		res, err := deployer.Deploy(context.Background(), string(fInputCertData), string(fInputKeyData))
+		if err != nil {
+			t.Errorf("err: %+v", err)
+			return
+		}
+
+		t.Logf("ok: %v", res)
+	})
+}

internal/pkg/vendors/edgio-sdk/applications/v7/README.md

@@ -0,0 +1,3 @@
+```shell
+git clone https://github.com/Edgio/terraform-provider-edgio.git
+```

internal/pkg/vendors/edgio-sdk/applications/v7/dtos/cdn_configuration.go

@@ -0,0 +1,93 @@
+package dtos
+
+import "encoding/json"
+
+type CDNConfiguration struct {
+	ConfigurationID        string             `json:"id"`
+	EnvironmentID          string             `json:"environment_id"`
+	Rules                  json.RawMessage    `json:"rules"`
+	Origins                []Origin           `json:"origins"`
+	Hostnames              []Hostname         `json:"hostnames"`
+	Experiments            *[]string          `json:"experiments,omitempty"`
+	EdgeFunctionsSources   *map[string]string `json:"edge_functions_sources,omitempty"`
+	EdgeFunctionInitScript *string            `json:"edge_function_init_script,omitempty"`
+}
+
+type Origin struct {
+	Name                string     `json:"name"`
+	Type                *string    `json:"type,omitempty"`
+	Hosts               []Host     `json:"hosts"`
+	Balancer            *string    `json:"balancer,omitempty"`
+	OverrideHostHeader  *string    `json:"override_host_header,omitempty"`
+	Shields             *Shields   `json:"shields,omitempty"`
+	PciCertifiedShields *bool      `json:"pci_certified_shields,omitempty"`
+	TLSVerify           *TLSVerify `json:"tls_verify,omitempty"`
+	Retry               *Retry     `json:"retry,omitempty"`
+}
+
+type Host struct {
+	Weight                   *int64      `json:"weight,omitempty"`
+	DNSMaxTTL                *int64      `json:"dns_max_ttl,omitempty"`
+	DNSPreference            *string     `json:"dns_preference,omitempty"`
+	MaxHardPool              *int64      `json:"max_hard_pool,omitempty"`
+	DNSMinTTL                *int64      `json:"dns_min_ttl,omitempty"`
+	Location                 *[]Location `json:"location,omitempty"`
+	MaxPool                  *int64      `json:"max_pool,omitempty"`
+	Balancer                 *string     `json:"balancer,omitempty"`
+	Scheme                   *string     `json:"scheme,omitempty"`
+	OverrideHostHeader       *string     `json:"override_host_header,omitempty"`
+	SNIHintAndStrictSanCheck *string     `json:"sni_hint_and_strict_san_check,omitempty"`
+	UseSNI                   *bool       `json:"use_sni,omitempty"`
+}
+
+type Location struct {
+	Port     *int64  `json:"port,omitempty"`
+	Hostname *string `json:"hostname,omitempty"`
+}
+
+type Shields struct {
+	Apac   *string `json:"apac,omitempty"`
+	Emea   *string `json:"emea,omitempty"`
+	USWest *string `json:"us_west,omitempty"`
+	USEast *string `json:"us_east,omitempty"`
+}
+
+type TLSVerify struct {
+	UseSNI                   *bool     `json:"use_sni,omitempty"`
+	SNIHintAndStrictSanCheck *string   `json:"sni_hint_and_strict_san_check,omitempty"`
+	AllowSelfSignedCerts     *bool     `json:"allow_self_signed_certs,omitempty"`
+	PinnedCerts              *[]string `json:"pinned_certs,omitempty"`
+}
+
+type Retry struct {
+	StatusCodes            *[]int64 `json:"status_codes,omitempty"`
+	IgnoreRetryAfterHeader *bool    `json:"ignore_retry_after_header,omitempty"`
+	AfterSeconds           *int64   `json:"after_seconds,omitempty"`
+	MaxRequests            *int64   `json:"max_requests,omitempty"`
+	MaxWaitSeconds         *int64   `json:"max_wait_seconds,omitempty"`
+}
+
+type Hostname struct {
+	Hostname          *string `json:"hostname,omitempty"`
+	DefaultOriginName *string `json:"default_origin_name,omitempty"`
+	ReportCode        *int64  `json:"report_code,omitempty"`
+	TLS               *TLS    `json:"tls,omitempty"`
+	Directory         *string `json:"directory,omitempty"`
+}
+
+type TLS struct {
+	NPN                 *bool   `json:"npn,omitempty"`
+	ALPN                *bool   `json:"alpn,omitempty"`
+	Protocols           *string `json:"protocols,omitempty"`
+	UseSigAlgs          *bool   `json:"use_sigalgs,omitempty"`
+	SNI                 *bool   `json:"sni,omitempty"`
+	SniStrict           *bool   `json:"sni_strict,omitempty"`
+	SniHostMatch        *bool   `json:"sni_host_match,omitempty"`
+	ClientRenegotiation *bool   `json:"client_renegotiation,omitempty"`
+	Options             *string `json:"options,omitempty"`
+	CipherList          *string `json:"cipher_list,omitempty"`
+	NamedCurve          *string `json:"named_curve,omitempty"`
+	OCSP                *bool   `json:"oscp,omitempty"`
+	PEM                 *string `json:"pem,omitempty"`
+	CA                  *string `json:"ca,omitempty"`
+}

internal/pkg/vendors/edgio-sdk/applications/v7/dtos/environment.go

@@ -0,0 +1,29 @@
+package dtos
+
+import (
+	"time"
+)
+
+type Environment struct {
+	Type                     string    `json:"@type"`
+	IdLink                   string    `json:"@id"`
+	Id                       string    `json:"id"`
+	PropertyID               string    `json:"property_id"`
+	LegacyAccountNumber      string    `json:"legacy_account_number"`
+	Name                     string    `json:"name"`
+	CanMembersDeploy         bool      `json:"can_members_deploy"`
+	OnlyMaintainersCanDeploy bool      `json:"only_maintainers_can_deploy"`
+	HttpRequestLogging       bool      `json:"http_request_logging"`
+	DefaultDomainName        string    `json:"default_domain_name"`
+	PciCompliance            bool      `json:"pci_compliance"`
+	DnsDomainName            string    `json:"dns_domain_name"`
+	CreatedAt                time.Time `json:"created_at"`
+	UpdatedAt                time.Time `json:"updated_at"`
+}
+
+type EnvironmentsResponse struct {
+	Type       string        `json:"@type"`
+	Id         string        `json:"@id"`
+	TotalItems int           `json:"total_items"`
+	Items      []Environment `json:"items"`
+}

internal/pkg/vendors/edgio-sdk/applications/v7/dtos/property.go

@@ -0,0 +1,18 @@
+package dtos
+
+import "time"
+
+type Property struct {
+	IdLink         string    `json:"@id"`
+	Id             string    `json:"id"`
+	OrganizationID string    `json:"organization_id"`
+	Slug           string    `json:"slug"`
+	CreatedAt      time.Time `json:"created_at"`
+	UpdatedAt      time.Time `json:"updated_at"`
+}
+
+type Properties struct {
+	ID         string     `json:"@id"`
+	TotalItems int        `json:"total_items"`
+	Items      []Property `json:"items"`
+}

internal/pkg/vendors/edgio-sdk/applications/v7/dtos/purge.go

@@ -0,0 +1,18 @@
+package dtos
+
+import "time"
+
+type PurgeResponse struct {
+	ID                 string    `json:"id"`
+	Status             string    `json:"status"`
+	CreatedAt          time.Time `json:"created_at"`
+	CompletedAt        time.Time `json:"completed_at"`
+	ProgressPercentage float32   `json:"progress_percentage"`
+}
+
+type PurgeRequest struct {
+	EnvironmentID string   `json:"environment_id"`
+	PurgeType     string   `json:"purge_type"`
+	Values        []string `json:"values"`
+	Hostname      *string  `json:"hostname"`
+}

internal/pkg/vendors/edgio-sdk/applications/v7/dtos/tls_cert.go

@@ -0,0 +1,30 @@
+package dtos
+
+type TLSCertResponse struct {
+	ID               string   `json:"id"`
+	EnvironmentID    string   `json:"environment_id"`
+	PrimaryCert      string   `json:"primary_cert"`
+	IntermediateCert string   `json:"intermediate_cert"`
+	Expiration       string   `json:"expiration"`
+	Status           string   `json:"status"`
+	Generated        bool     `json:"generated"`
+	Serial           string   `json:"serial"`
+	CommonName       string   `json:"common_name"`
+	AlternativeNames []string `json:"alternative_names"`
+	ActivationError  string   `json:"activation_error"`
+	CreatedAt        string   `json:"created_at"`
+	UpdatedAt        string   `json:"updated_at"`
+}
+
+type UploadTlsCertRequest struct {
+	EnvironmentID    string `json:"environment_id"`
+	PrimaryCert      string `json:"primary_cert"`
+	IntermediateCert string `json:"intermediate_cert"`
+	PrivateKey       string `json:"private_key"`
+}
+
+type TLSCertSResponse struct {
+	EnvironmentID string            `json:"environment_id"`
+	TotalItems    int32             `json:"total_items"`
+	Certificates  []TLSCertResponse `json:"items"`
+}

internal/pkg/vendors/edgio-sdk/applications/v7/edgio_client.go

@@ -0,0 +1,546 @@
+package edgio_api
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"time"
+
+	"github.com/go-resty/resty/v2"
+
+	"github.com/usual2970/certimate/internal/pkg/vendors/edgio-sdk/applications/v7/dtos"
+)
+
+// AccessTokenResponse represents the response from the token endpoint.
+type AccessTokenResponse struct {
+	AccessToken string `json:"access_token"`
+	ExpiresIn   int    `json:"expires_in"`
+	TokenType   string `json:"token_type"`
+	Scope       string `json:"scope"`
+}
+
+// TokenCache represents a cached token. The token is stored along
+// with its expiry time. Because different endpoints require different
+// scopes, we store the token with the scope as the key, so that we
+// can fetch the token from the cache based on the scope.
+type TokenCache struct {
+	AccessToken string
+	Expiry      time.Time
+}
+
+type EdgioClient struct {
+	client       *resty.Client
+	clientID     string
+	clientSecret string
+	tokenURL     string
+	apiURL       string
+	tokenCache   map[string]TokenCache
+}
+
+func NewEdgioClient(clientID, clientSecret, tokenURL, apiURL string) *EdgioClient {
+	client := resty.New().
+		SetTimeout(30 * time.Second).
+		SetRetryCount(3).
+		SetRetryWaitTime(5 * time.Second).
+		SetRetryMaxWaitTime(20 * time.Second)
+
+	if tokenURL == "" {
+		tokenURL = "https://id.edgio.app/connect/token"
+	}
+
+	if apiURL == "" {
+		apiURL = "https://edgioapis.com"
+	}
+
+	return &EdgioClient{
+		client:       client,
+		clientID:     clientID,
+		clientSecret: clientSecret,
+		tokenURL:     tokenURL,
+		apiURL:       apiURL,
+		tokenCache:   make(map[string]TokenCache),
+	}
+}
+
+func (c *EdgioClient) getToken(scope string) (string, error) {
+	if cachedToken, exists := c.tokenCache[scope]; exists && time.Now().Before(cachedToken.Expiry) {
+		return cachedToken.AccessToken, nil
+	}
+
+	var tokenResp AccessTokenResponse
+	resp, err := c.client.R().
+		SetFormData(map[string]string{
+			"client_id":     c.clientID,
+			"client_secret": c.clientSecret,
+			"grant_type":    "client_credentials",
+			"scope":         scope,
+		}).
+		SetResult(&tokenResp).
+		Post(c.tokenURL)
+	if err != nil {
+		return "", fmt.Errorf("failed to request token: %w", err)
+	}
+
+	if resp.IsError() {
+		return "", fmt.Errorf("unexpected status code for getToken: %d", resp.StatusCode())
+	}
+
+	c.tokenCache[scope] = TokenCache{
+		AccessToken: tokenResp.AccessToken,
+		Expiry:      time.Now().Add(time.Duration(tokenResp.ExpiresIn) * time.Second),
+	}
+
+	return tokenResp.AccessToken, nil
+}
+
+func (c *EdgioClient) GetProperty(ctx context.Context, propertyID string) (*dtos.Property, error) {
+	token, err := c.getToken("app.accounts")
+	if err != nil {
+		return nil, fmt.Errorf("failed to get token: %w", err)
+	}
+
+	url := fmt.Sprintf("%s/accounts/v0.1/properties/%s", c.apiURL, propertyID)
+
+	var property dtos.Property
+	resp, err := c.client.R().
+		SetContext(ctx).
+		SetAuthToken(token).
+		SetResult(&property).
+		Get(url)
+	if err != nil {
+		return nil, fmt.Errorf("failed to send request: %w", err)
+	}
+
+	if resp.IsError() {
+		return nil, fmt.Errorf("unexpected status code for getSpecificProperty: %d, %s", resp.StatusCode(), resp.Request.URL)
+	}
+
+	return &property, nil
+}
+
+func (c *EdgioClient) GetProperties(page int, pageSize int, organizationID string) (*dtos.Properties, error) {
+	token, err := c.getToken("app.accounts")
+	if err != nil {
+		return nil, fmt.Errorf("failed to get token: %w", err)
+	}
+
+	url := fmt.Sprintf("%s/accounts/v0.1/properties", c.apiURL)
+
+	var propertiesResp dtos.Properties
+	resp, err := c.client.R().
+		SetAuthToken(token).
+		SetQueryParams(map[string]string{
+			"page":            fmt.Sprintf("%d", page),
+			"page_size":       fmt.Sprintf("%d", pageSize),
+			"organization_id": organizationID,
+		}).
+		SetResult(&propertiesResp).
+		Get(url)
+	if err != nil {
+		return nil, fmt.Errorf("failed to send request: %w", err)
+	}
+
+	if resp.IsError() {
+		return nil, fmt.Errorf("unexpected status code for getProperties: %d, %s", resp.StatusCode(), resp.Body())
+	}
+
+	return &propertiesResp, nil
+}
+
+func (c *EdgioClient) CreateProperty(ctx context.Context, organizationID, slug string) (*dtos.Property, error) {
+	token, err := c.getToken("app.accounts")
+	if err != nil {
+		return nil, fmt.Errorf("failed to get token: %w", err)
+	}
+
+	url := fmt.Sprintf("%s/accounts/v0.1/properties", c.apiURL)
+
+	var createdProperty dtos.Property
+	resp, err := c.client.R().
+		SetContext(ctx).
+		SetAuthToken(token).
+		SetHeader("Content-Type", "application/json").
+		SetBody(map[string]string{
+			"organization_id": organizationID,
+			"slug":            slug,
+		}).
+		SetResult(&createdProperty).
+		Post(url)
+	if err != nil {
+		return nil, fmt.Errorf("failed to send request: %w", err)
+	}
+
+	if resp.IsError() {
+		return nil, fmt.Errorf("unexpected status code for createProperty: %d, response: %s", resp.StatusCode(), resp.String())
+	}
+
+	return &createdProperty, nil
+}
+
+func (c *EdgioClient) DeleteProperty(propertyID string) error {
+	token, err := c.getToken("app.accounts")
+	if err != nil {
+		return fmt.Errorf("failed to get token: %w", err)
+	}
+
+	url := fmt.Sprintf("%s/accounts/v0.1/properties/%s", c.apiURL, propertyID)
+
+	resp, err := c.client.R().
+		SetAuthToken(token).
+		Delete(url)
+	if err != nil {
+		return fmt.Errorf("error sending DELETE request: %w", err)
+	}
+
+	if resp.IsError() {
+		return fmt.Errorf("error deleting property: status code %d", resp.StatusCode())
+	}
+
+	return nil
+}
+
+func (c *EdgioClient) UpdateProperty(ctx context.Context, propertyID string, slug string) (*dtos.Property, error) {
+	token, err := c.getToken("app.accounts")
+	if err != nil {
+		return nil, fmt.Errorf("failed to get token: %w", err)
+	}
+
+	url := fmt.Sprintf("%s/accounts/v0.1/properties/%s", c.apiURL, propertyID)
+
+	requestBody := map[string]interface{}{
+		"slug": slug,
+	}
+
+	var updatedProperty dtos.Property
+	resp, err := c.client.R().
+		SetContext(ctx).
+		SetAuthToken(token).
+		SetBody(requestBody).
+		SetResult(&updatedProperty).
+		Patch(url)
+	if err != nil {
+		return nil, fmt.Errorf("failed to send request: %w", err)
+	}
+
+	if resp.IsError() {
+		return nil, fmt.Errorf("unexpected status code for updateProperty: %d", resp.StatusCode())
+	}
+
+	return &updatedProperty, nil
+}
+
+func (c *EdgioClient) GetEnvironments(page, pageSize int, propertyID string) (*dtos.EnvironmentsResponse, error) {
+	token, err := c.getToken("app.accounts")
+	if err != nil {
+		return nil, fmt.Errorf("failed to get token: %w", err)
+	}
+
+	url := fmt.Sprintf("%s/accounts/v0.1/environments", c.apiURL)
+
+	resp, err := c.client.R().
+		SetAuthToken(token).
+		SetQueryParams(map[string]string{
+			"page":        fmt.Sprintf("%d", page),
+			"page_size":   fmt.Sprintf("%d", pageSize),
+			"property_id": propertyID,
+		}).
+		SetResult(&dtos.EnvironmentsResponse{}).
+		Get(url)
+	if err != nil {
+		return nil, err
+	}
+
+	if resp.IsError() {
+		return nil, fmt.Errorf("error response: %s", resp.String())
+	}
+
+	return resp.Result().(*dtos.EnvironmentsResponse), nil
+}
+
+func (c *EdgioClient) GetEnvironment(environmentID string) (*dtos.Environment, error) {
+	token, err := c.getToken("app.accounts")
+	if err != nil {
+		return nil, fmt.Errorf("failed to get token: %w", err)
+	}
+
+	url := fmt.Sprintf("%s/accounts/v0.1/environments/%s", c.apiURL, environmentID)
+
+	resp, err := c.client.R().
+		SetPathParams(map[string]string{
+			"environment_id": environmentID,
+		}).
+		SetAuthToken(token).
+		SetResult(&dtos.Environment{}).
+		Get(url)
+	if err != nil {
+		return nil, err
+	}
+
+	if resp.IsError() {
+		return nil, fmt.Errorf("error response: %s", resp.String())
+	}
+
+	return resp.Result().(*dtos.Environment), nil
+}
+
+func (c *EdgioClient) CreateEnvironment(propertyID, name string, onlyMaintainersCanDeploy, httpRequestLogging bool) (*dtos.Environment, error) {
+	token, err := c.getToken("app.accounts")
+	if err != nil {
+		return nil, fmt.Errorf("failed to get token: %w", err)
+	}
+
+	url := fmt.Sprintf("%s/accounts/v0.1/environments", c.apiURL)
+
+	body := map[string]interface{}{
+		"property_id":                 propertyID,
+		"name":                        name,
+		"only_maintainers_can_deploy": onlyMaintainersCanDeploy,
+		"http_request_logging":        httpRequestLogging,
+	}
+
+	resp, err := c.client.R().
+		SetBody(body).
+		SetAuthToken(token).
+		SetResult(&dtos.Environment{}).
+		Post(url)
+	if err != nil {
+		return nil, err
+	}
+
+	if resp.IsError() {
+		return nil, fmt.Errorf("error response: %s", resp.String())
+	}
+
+	return resp.Result().(*dtos.Environment), nil
+}
+
+func (c *EdgioClient) UpdateEnvironment(environmentID, name string, onlyMaintainersCanDeploy, httpRequestLogging, preserveCache bool) (*dtos.Environment, error) {
+	token, err := c.getToken("app.accounts")
+	if err != nil {
+		return nil, fmt.Errorf("failed to get token: %w", err)
+	}
+
+	url := fmt.Sprintf("%s/accounts/v0.1/environments/%s", c.apiURL, environmentID)
+
+	body := map[string]interface{}{
+		"name": name,
+		// as can_members_deploy is depricated, but update api is not
+		// we need to use it to map onlyMaintainersCanDeploy
+		"only_maintainers_can_deploy": onlyMaintainersCanDeploy,
+		"http_request_logging":        httpRequestLogging,
+		"preserve_cache":              preserveCache,
+	}
+
+	resp, err := c.client.R().
+		SetPathParams(map[string]string{
+			"environment_id": environmentID,
+		}).
+		SetBody(body).
+		SetAuthToken(token).
+		SetResult(&dtos.Environment{}).
+		Patch(url)
+	if err != nil {
+		return nil, err
+	}
+
+	if resp.IsError() {
+		return nil, fmt.Errorf("error response: %s", resp.String())
+	}
+
+	return resp.Result().(*dtos.Environment), nil
+}
+
+func (c *EdgioClient) DeleteEnvironment(environmentID string) error {
+	token, err := c.getToken("app.accounts")
+	if err != nil {
+		return fmt.Errorf("failed to get token: %w", err)
+	}
+
+	url := fmt.Sprintf("%s/accounts/v0.1/environments/%s", c.apiURL, environmentID)
+
+	resp, err := c.client.R().
+		SetPathParams(map[string]string{
+			"environment_id": environmentID,
+		}).
+		SetAuthToken(token).
+		SetResult(&dtos.Environment{}).
+		Delete(url)
+	if err != nil {
+		return err
+	}
+
+	if resp.IsError() {
+		return fmt.Errorf("error response: %s", resp.String())
+	}
+
+	return nil
+}
+
+func (c *EdgioClient) GetTlsCert(tlsCertId string) (*dtos.TLSCertResponse, error) {
+	token, err := c.getToken("app.config")
+	if err != nil {
+		return nil, fmt.Errorf("failed to get token: %w", err)
+	}
+
+	url := fmt.Sprintf("%s/config/v0.1/tls-certs/%s", c.apiURL, tlsCertId)
+
+	var tlsCertResponse dtos.TLSCertResponse
+	resp, err := c.client.R().
+		SetAuthToken(token).
+		SetResult(&tlsCertResponse).
+		Get(url)
+	if err != nil {
+		return nil, fmt.Errorf("error response: %s", err)
+	}
+
+	if resp.IsError() {
+		return nil, fmt.Errorf("error response: %s", resp.String())
+	}
+
+	return &tlsCertResponse, nil
+}
+
+func (c *EdgioClient) UploadTlsCert(req dtos.UploadTlsCertRequest) (*dtos.TLSCertResponse, error) {
+	token, err := c.getToken("app.config")
+	if err != nil {
+		return nil, fmt.Errorf("failed to get token: %w", err)
+	}
+
+	url := fmt.Sprintf("%s/config/v0.1/tls-certs", c.apiURL)
+	response := &dtos.TLSCertResponse{}
+
+	resp, err := c.client.R().
+		SetAuthToken(token).
+		SetHeader("Content-Type", "application/json").
+		SetBody(req).
+		SetResult(response).
+		Post(url)
+	if err != nil {
+		return nil, fmt.Errorf("failed to upload TLS certificate: %w", err)
+	}
+
+	if resp.IsError() {
+		return nil, fmt.Errorf("API responded with error: %s", resp.String())
+	}
+
+	return response, nil
+}
+
+func (c *EdgioClient) GenerateTlsCert(environmentId string) (*dtos.TLSCertResponse, error) {
+	token, err := c.getToken("app.config")
+	if err != nil {
+		return nil, fmt.Errorf("failed to get token: %w", err)
+	}
+
+	url := fmt.Sprintf("%s/config/v0.1/tls-certs/generate", c.apiURL)
+	request := map[string]interface{}{
+		"environment_id": environmentId,
+	}
+	response := &dtos.TLSCertResponse{}
+
+	resp, err := c.client.R().
+		SetAuthToken(token).
+		SetHeader("Content-Type", "application/json").
+		SetBody(request).
+		SetResult(response).
+		Post(url)
+	if err != nil {
+		return nil, fmt.Errorf("failed to upload TLS certificate: %w", err)
+	}
+
+	if resp.IsError() {
+		return nil, fmt.Errorf("API responded with error: %s", resp.String())
+	}
+
+	return response, nil
+}
+
+func (c *EdgioClient) GetTlsCerts(page int, pageSize int, environmentID string) (*dtos.TLSCertSResponse, error) {
+	token, err := c.getToken("app.config")
+	if err != nil {
+		return nil, fmt.Errorf("failed to get token: %w", err)
+	}
+
+	url := fmt.Sprintf("%s/config/v0.1/tls-certs", c.apiURL)
+
+	var tlsCertsResponse dtos.TLSCertSResponse
+	resp, err := c.client.R().
+		SetAuthToken(token).
+		SetQueryParams(map[string]string{
+			"page":           fmt.Sprintf("%d", page),
+			"page_size":      fmt.Sprintf("%d", pageSize),
+			"environment_id": environmentID,
+		}).
+		SetResult(&tlsCertsResponse).
+		Get(url)
+	if err != nil {
+		return nil, fmt.Errorf("failed to send request: %w", err)
+	}
+
+	if resp.IsError() {
+		return nil, fmt.Errorf("unexpected status code for getTlsCerts: %d", resp.StatusCode())
+	}
+
+	return &tlsCertsResponse, nil
+}
+
+func (c *EdgioClient) UploadCdnConfiguration(config *dtos.CDNConfiguration) (*dtos.CDNConfiguration, error) {
+	fmt.Println("------------------------------------------------------------------------- uploading")
+
+	token, err := c.getToken("app.config")
+	if err != nil {
+		return nil, fmt.Errorf("failed to get token: %w", err)
+	}
+
+	url := fmt.Sprintf("%s/config/v0.1/configs", c.apiURL)
+	var response dtos.CDNConfiguration
+
+	// Convert config to json
+	jsonBody, _ := json.MarshalIndent(config, "", "    ")
+	jsonString := string(jsonBody)
+	fmt.Println("------------------------- config report code: ", config.Hostnames[0].ReportCode == nil)
+	fmt.Println("------------------------- config report code value: ", config.Hostnames[0].ReportCode)
+	fmt.Println("----------------------------------- jsonBody: ", jsonString)
+
+	resp, err := c.client.R().
+		SetAuthToken(token).
+		SetHeader("Content-Type", "application/json").
+		SetBody(config).
+		SetResult(&response).
+		Post(url)
+	if err != nil {
+		return nil, fmt.Errorf("failed to upload CDN configuration: %w", err)
+	}
+
+	if resp.IsError() {
+		return nil, fmt.Errorf("unexpected status code for uploadCdnConfiguration: %d, %s", resp.StatusCode(), resp.Body())
+	}
+
+	return &response, nil
+}
+
+func (c *EdgioClient) GetCDNConfiguration(configID string) (*dtos.CDNConfiguration, error) {
+	fmt.Println("------------------------------------------------------------------------- reading config")
+
+	token, err := c.getToken("app.config")
+	if err != nil {
+		return nil, fmt.Errorf("failed to get token: %w", err)
+	}
+
+	url := fmt.Sprintf("https://edgioapis.com/config/v0.1/configs/%s", configID)
+	var response dtos.CDNConfiguration
+
+	resp, err := c.client.R().
+		SetAuthToken(token).
+		SetResult(&response).
+		Get(url)
+	if err != nil {
+		return nil, fmt.Errorf("failed to get CDN configuration: %w", err)
+	}
+
+	if resp.IsError() {
+		return nil, fmt.Errorf("unexpected status code for GetCDNConfiguration: %d", resp.StatusCode())
+	}
+
+	return &response, nil
+}

internal/pkg/vendors/edgio-sdk/applications/v7/edgio_client_interface.go

@@ -0,0 +1,26 @@
+package edgio_api
+
+import (
+	"context"
+
+	"github.com/usual2970/certimate/internal/pkg/vendors/edgio-sdk/applications/v7/dtos"
+)
+
+type EdgioClientInterface interface {
+	GetProperty(ctx context.Context, propertyID string) (*dtos.Property, error)
+	GetProperties(page int, pageSize int, organizationID string) (*dtos.Properties, error)
+	CreateProperty(ctx context.Context, organizationID, slug string) (*dtos.Property, error)
+	DeleteProperty(propertyID string) error
+	UpdateProperty(ctx context.Context, propertyID string, slug string) (*dtos.Property, error)
+	GetEnvironments(page, pageSize int, propertyID string) (*dtos.EnvironmentsResponse, error)
+	GetEnvironment(environmentID string) (*dtos.Environment, error)
+	CreateEnvironment(propertyID, name string, onlyMaintainersCanDeploy, httpRequestLogging bool) (*dtos.Environment, error)
+	UpdateEnvironment(environmentID, name string, onlyMaintainersCanDeploy, httpRequestLogging, preserveCache bool) (*dtos.Environment, error)
+	DeleteEnvironment(environmentID string) error
+	GetTlsCert(tlsCertId string) (*dtos.TLSCertResponse, error)
+	UploadTlsCert(req dtos.UploadTlsCertRequest) (*dtos.TLSCertResponse, error)
+	GenerateTlsCert(environmentId string) (*dtos.TLSCertResponse, error)
+	GetTlsCerts(page int, pageSize int, environmentID string) (*dtos.TLSCertSResponse, error)
+	UploadCdnConfiguration(config *dtos.CDNConfiguration) (*dtos.CDNConfiguration, error)
+	GetCDNConfiguration(configID string) (*dtos.CDNConfiguration, error)
+}

internal/workflow/node-processor/apply_node.go

@@ -89,7 +89,7 @@ func (a *applyNode) Run(ctx context.Context) error {
 		Outputs:    a.node.Outputs,
 	}
 
-	certX509, err := x509.ParseCertificateFromPEM(applyResult.Certificate)
+	certX509, err := x509.ParseCertificateFromPEM(applyResult.CertificateChain)
 	if err != nil {
 		a.AddOutput(ctx, a.node.Name, "解析证书失败", err.Error())
 		return err
@@ -98,7 +98,7 @@ func (a *applyNode) Run(ctx context.Context) error {
 	certificate := &domain.Certificate{
 		Source:            domain.CertificateSourceTypeWorkflow,
 		SubjectAltNames:   strings.Join(certX509.DNSNames, ";"),
-		Certificate:       applyResult.Certificate,
+		Certificate:       applyResult.CertificateChain,
 		PrivateKey:        applyResult.PrivateKey,
 		IssuerCertificate: applyResult.IssuerCertificate,
 		ACMECertUrl:       applyResult.ACMECertUrl,