刷新cdn的流程:
jenkins获取git中的代码,触发脚本推送到生产环境中(即cdn的源站) --> 触发脚本获取git工作目录的更新列表,将更新列表拼凑成带域名信息的url,写入到目录中 --> 触发python脚本读取目录中的url发送给akamai的api进行cdn的刷新
参考文档创建client api,此次我们的账号没有创建client api的权限,需要管理员处理
文档地址:https://developer.akamai.com/api/getting-started#beforeyoubegin
创建和api交互的client api后会得到类似如下信息
client_secret = "pass"
host = "host.purge.akamaiapis.net"
access_token = "token"
client_token = "client_token"
api参考地址:
https://github.com/akamai/api-kickstart
jenkins中的shell脚本
[root@jenkins:/usr/local/worksh/jeninks_task]# cat neveragain_chinasoft_com.sh #!/bin/bash ############################################# # 通过jenkins发布任务 neveragain.chinasoft.com 发布 注意/data/www/vhosts/neveragain.chinasoft.com/httpdocs/dist/ 发布到线上对应的是2019目录 cart_iplist="1.1.1.1" function neveragain_chinasoft_eus_rsync() { for ip in $cart_iplist do echo "-- start pub --- 预发布到外网 ${ip} ----------------------------------------" /usr/local/bin/rsync -vazP --bwlimit=1000 --exclude='.git/' --exclude='.gitignore/' --password-file=/data/www/.rsync/rsyncd.pass /data/www/vhosts/neveragain.chinasoft.com/httpdocs/dist/ apache@$ip::apache/data/www/vhosts/neveragain.chinasoft.com/httpdocs/2019/ if [[ $? == 0 || $? == 23 ]];then rsync_edit=1 else rsync_edit=0 echo "`date` rsync发布失败! -> editUrls.txt" exit 1 fi echo -e "-- end pub ${ip} ----------------------------------------------------------\n\n" done } # 执行同步 neveragain_chinasoft_eus_rsync # 读取git的更新列表,发送请求调用python脚本刷新akamai CDN function update_cdn { # 工作目录 WORKSPACE="/data/jenkins_home/workspace/DesignCenter.neveragain.chinasoft.com/" cd $WORKSPACE # 获取git变更列表 changefiles=$(git diff --name-only HEAD~ HEAD) #echo $changefiles # 先把文件路径写死,作为测试使用 #changefiles="dist/assets/image/box/drfone-mac.png dist/assets/image/box/drfone-win.png dist/assets/image/box/dvdcreator-mac.png dist/assets/image/box/dvdcreator-win.png" #20190812103337 now_time="`date +%Y%m%d%H%M%S`" # 将更新的文件列表写入日志文件中 for newfile in $changefiles; do start_str=${newfile:0:4} #echo $start_str # 如果变更的文件是 dist 目录下的文件就触发该文件刷新CDN if [ $start_str == 'dist' ];then need_file=${newfile:5} #echo $need_file need_url="https://neveragain.chinasoft.com/2019/$need_file" #echo $need_url echo "${need_url}" >> "/usr/local/worksh/jeninks_task/akamai_api/logs/${now_time}.log" fi done # 调用Python脚本刷新cdn /usr/local/worksh/jeninks_task/akamai_api_venv/bin/python /usr/local/worksh/jeninks_task/akamai_api/akamai_api.py $now_time if [ $? != 0 ];then echo "刷新CDN失败" exit 1 else echo "刷新CDN成功" fi } # 刷新cdn update_cdn
# python脚本
# 刷新cdn的python脚本结构
[root@jenkins:/usr/local/worksh/jeninks_task/akamai_api]# tree
.
├── akamai_api.py
├── lib
│ ├── http_calls.py
│ ├── __init__.py
├── logs
│ ├── 20190814164047.log
│ └── 20190814172256.log
├── log.txt
├── README.md
└── requirement.txt
# cat /usr/local/worksh/jeninks_task/akamai_api/logs/20190814172256.log
https://neveragain.chinasoft.com/2019/assets/icon/brand/finder.svg
https://neveragain.chinasoft.com/2019/assets/icon/logo/edraw-horizontal-white.png
# 主程序 [root@jenkins:/usr/local/worksh/jeninks_task]# cat /usr/local/worksh/jeninks_task/akamai_api/akamai_api.py #!/usr/bin/env python # -*- coding: utf-8 -*- # @File : akamai_api.py # @Desc : 读取指定文件中url的路径内容,刷新Akamai CDN的边缘节点数据 import requests, json,time,os,sys from lib.http_calls import EdgeGridHttpCaller from akamai.edgegrid import EdgeGridAuth import logging class Akamai_API(): def __init__(self,api_host,api_access_token,api_client_token,api_client_secret,verbose=False,debug=False,action="delete",network="production"): self.host = api_host self.access_token = api_access_token self.client_token = api_client_token self.client_secret = api_client_secret self.verbose = verbose self.debug = debug #API的清除动作:delete invalidate self.action =action self.network =network self.session = requests.Session() def __auth(self): self.session.auth = EdgeGridAuth( client_token=self.client_token, client_secret=self.client_secret, access_token=self.access_token ) return self.session def postPurgeRequest(self,refush_url_list): self.__auth() baseurl = '%s://%s/' % ('https', self.host) httpCaller = EdgeGridHttpCaller(self.session, self.debug, self.verbose, baseurl) purge_obj = { # "objects": [ # "https://bc.akamaiapibootcamp.com/index.html" # ] "objects": refush_url_list, } # print("Adding %s request to queue - %s" % (self.action, json.dumps(purge_obj))) purge_post_result = httpCaller.postResult('/ccu/v3/%s/url/%s' % (self.action, self.network), json.dumps(purge_obj)) return purge_post_result def ReadFile(filename): """ 读取文件内容中的url路径 每行一条url路径 """ l = [] error_l = [] with open(filename) as f: for url in f.readlines(): url_str = str(url).strip("\n") if str(url).startswith("https://neveragain.chinasoft.com"): l.append(url_str) else: error_l.append(url_str) if error_l: raise Exception("The format of the file path is incorrect. %s"%('\n'.join(error_l))) return l if __name__ == "__main__": #API信息 API_HOST = "host.purge.akamaiapis.net" API_ACCESS_TOKEN = "token" API_CLIENT_TOKEN = "client_token" API_CLIENT_SECRET = "api_client_secret=" api = Akamai_API(api_host=API_HOST,api_access_token=API_ACCESS_TOKEN,api_client_token=API_CLIENT_TOKEN,api_client_secret=API_CLIENT_SECRET) #接收url文件名称 if len(sys.argv) != 2: raise Exception("Not enough parameters for %s"%sys.argv[0]) prefix_url_filename = sys.argv[1] # 定义日志级别 baseDir = os.path.dirname(os.path.abspath(__file__)) logfile = os.path.join(baseDir,"log.txt") logging.basicConfig(level=logging.INFO, filename=logfile, filemode='a', format='%(asctime)s - %(filename)s - %(levelname)s: %(message)s') logger = logging.getLogger(__name__) #读取url的文件内容 filename = os.path.join(baseDir,os.path.join("logs","%s.log"%prefix_url_filename)) if not os.path.isfile(filename): raise Exception("Not exists file %s" %filename) url_list = ReadFile(filename) #每次POST提交url的条数 MAX_REQUEST_SIZE = 800 while url_list: batch = [] batch_size = 0 while url_list and batch_size < MAX_REQUEST_SIZE: next_url = url_list.pop() batch.append(next_url) batch_size += 1 if batch: response = api.postPurgeRequest(batch) if response["httpStatus"] != 201: # 将本次请求url返回到总url列表中,以便稍后在试 url_list.extend(batch) #速率限制 if response["httpStatus"] == 507: details = response.json().get('detail', '<response did not contain "detail">') print('Will retry request in 1s seconds due to API rate-limit: %s,Try again now.'%details) logger.info('Will retry request in 1s seconds due to API rate-limit: %s,Try again now.'%details) time.sleep(1) # 针对速率限制以外的错误 抛出 if response["httpStatus"] != 507: details = response.json().get('detail', '<response did not contain "detail">') print("{status:Failed,detail:%s}"%details) logger.info("{status:Failed,detail:%s}"%details) response.raise_for_status() else: logger.info("{status:Success,supportId:%s,purgeId:%s,queue:%s}"%(response["supportId"],response["purgeId"],json.dumps(batch))) # 依赖包: [root@jenkins:/usr/local/worksh/jeninks_task/akamai_api]# cat requirement.txt asn1crypto==0.24.0 certifi==2019.6.16 cffi==1.12.3 chardet==3.0.4 configparser==3.7.4 cryptography==2.7 edgegrid-python==1.1.1 idna==2.8 ndg-httpsclient==0.5.1 pyasn1==0.4.6 pycparser==2.19 pyOpenSSL==19.0.0 requests==2.22.0 six==1.12.0 urllib3==1.25.3 [root@jenkins:/usr/local/worksh/jeninks_task/akamai_api]# cat lib/http_calls.py #!/usr/bin/env python # Python edgegrid module """ Copyright 2015 Akamai Technologies, Inc. All Rights Reserved. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. """ import sys if sys.version_info[0] >= 3: # python3 from urllib import parse else: # python2.7 import urlparse as parse import logging, json logger = logging.getLogger(__name__) class EdgeGridHttpCaller(): def __init__(self, session, debug, verbose, baseurl): self.debug = debug self.verbose = verbose self.session = session self.baseurl = baseurl return None def urlJoin(self, url, path): return parse.urljoin(url, path) def getResult(self, endpoint, parameters=None): path = endpoint endpoint_result = self.session.get(parse.urljoin(self.baseurl, path), params=parameters) if self.verbose: print(">>>\n" + json.dumps(endpoint_result.json(), indent=2) + "\n<<<\n") status = endpoint_result.status_code if self.verbose: print("LOG: GET %s %s %s" % (endpoint, status, endpoint_result.headers["content-type"])) self.httpErrors(endpoint_result.status_code, path, endpoint_result.json()) return endpoint_result.json() def httpErrors(self, status_code, endpoint, result): if not isinstance(result, list): details = result.get('detail') or result.get('details') or "" else: details = "" if status_code == 403: error_msg = "ERROR: Call to %s failed with a 403 result\n" % endpoint error_msg += "ERROR: This indicates a problem with authorization.\n" error_msg += "ERROR: Please ensure that the credentials you created for this script\n" error_msg += "ERROR: have the necessary permissions in the Luna portal.\n" error_msg += "ERROR: Problem details: %s\n" % details exit(error_msg) if status_code in [400, 401]: error_msg = "ERROR: Call to %s failed with a %s result\n" % (endpoint, status_code) error_msg += "ERROR: This indicates a problem with authentication or headers.\n" error_msg += "ERROR: Please ensure that the .edgerc file is formatted correctly.\n" error_msg += "ERROR: If you still have issues, please use gen_edgerc.py to generate the credentials\n" error_msg += "ERROR: Problem details: %s\n" % result exit(error_msg) if status_code in [404]: error_msg = "ERROR: Call to %s failed with a %s result\n" % (endpoint, status_code) error_msg += "ERROR: This means that the page does not exist as requested.\n" error_msg += "ERROR: Please ensure that the URL you're calling is correctly formatted\n" error_msg += "ERROR: or look at other examples to make sure yours matches.\n" error_msg += "ERROR: Problem details: %s\n" % details exit(error_msg) error_string = None if "errorString" in result: if result["errorString"]: error_string = result["errorString"] else: for key in result: if type(key) is not str or isinstance(result, dict) or not isinstance(result[key], dict): continue if "errorString" in result[key] and type(result[key]["errorString"]) is str: error_string = result[key]["errorString"] if error_string: error_msg = "ERROR: Call caused a server fault.\n" error_msg += "ERROR: Please check the problem details for more information:\n" error_msg += "ERROR: Problem details: %s\n" % error_string exit(error_msg) def postResult(self, endpoint, body, parameters=None): headers = {'content-type': 'application/json'} path = endpoint endpoint_result = self.session.post(parse.urljoin(self.baseurl, path), data=body, headers=headers, params=parameters) status = endpoint_result.status_code if self.verbose: print("LOG: POST %s %s %s" % (path, status, endpoint_result.headers["content-type"])) if status == 204: return {} self.httpErrors(endpoint_result.status_code, path, endpoint_result.json()) if self.verbose: print(">>>\n" + json.dumps(endpoint_result.json(), indent=2) + "\n<<<\n") return endpoint_result.json() def postFiles(self, endpoint, file): path = endpoint endpoint_result = self.session.post(parse.urljoin(self.baseurl, path), files=file) status = endpoint_result.status_code if self.verbose: print("LOG: POST FILES %s %s %s" % (path, status, endpoint_result.headers["content-type"])) if status == 204: return {} self.httpErrors(endpoint_result.status_code, path, endpoint_result.json()) if self.verbose: print(">>>\n" + json.dumps(endpoint_result.json(), indent=2) + "\n<<<\n") return endpoint_result.json() def putResult(self, endpoint, body, parameters=None): headers = {'content-type': 'application/json'} path = endpoint endpoint_result = self.session.put(parse.urljoin(self.baseurl, path), data=body, headers=headers, params=parameters) status = endpoint_result.status_code if self.verbose: print("LOG: PUT %s %s %s" % (endpoint, status, endpoint_result.headers["content-type"])) if status == 204: return {} if self.verbose: print(">>>\n" + json.dumps(endpoint_result.json(), indent=2) + "\n<<<\n") return endpoint_result.json() def deleteResult(self, endpoint): endpoint_result = self.session.delete(parse.urljoin(self.baseurl, endpoint)) status = endpoint_result.status_code if self.verbose: print("LOG: DELETE %s %s %s" % (endpoint, status, endpoint_result.headers["content-type"])) if status == 204: return {} if self.verbose: print(">>>\n" + json.dumps(endpoint_result.json(), indent=2) + "\n<<<\n") return endpoint_result.json()