docker-swarm-review

Revert "docker-swarm-review"
This reverts commit 49d2697ef4c5047934a642b0df656c5112d37509.
2026-05-13 15:27:39 +08:00 · 2026-05-13 15:27:26 +08:00 · 2026-05-13 15:27:25 +08:00 · 2026-03-02 12:38:07 +08:00 · 2025-08-21 18:57:57 +08:00 · 2025-05-08 21:24:56 +08:00
190 changed files with 19367 additions and 197 deletions
--- a/.DS_Store
+++ b/.DS_Store
--- a/README.md
+++ b/README.md
@@ -37,6 +37,11 @@ mysql -uroot -pgkxl650 zd_rescue <  ./zd_rescue.sql
 nohup mysql -uroot -pgkxl650 zd_rescue --max_allowed_packet=16777216 --net_buffer_length=16384 <  ./zd_rescue.sql > ./mysql.log  2>&1 &
 change master to master_host='192.168.10.10',master_user='repl',master_password='nczl@sino_db',master_log_file='mysql-bin.006898',master_log_pos=155;
 ```
 ## rabbitmq
--- a/ai/openai-test.py
+++ b/ai/openai-test.py
@@ -0,0 +1,5 @@
 from transformers import AutoTokenizer, AutoModelForSeq2SeqLM
 tokenizer = AutoTokenizer.from_pretrained("/opt/local/openai/whisper-large-v2")
 model = AutoModelForSeq2SeqLM.from_pretrained("bigscience/T0_3B")
--- a/ai/配置服务器.md
+++ b/ai/配置服务器.md
@@ -0,0 +1,7 @@
 1. 安装anaconda，维护python版本
 https://www.anaconda.com/download/success
 ```wget https://repo.anaconda.com/archive/Anaconda3-2024.10-1-Linux-x86_64.sh```
--- a/builder-docker/.DS_Store
+++ b/builder-docker/.DS_Store
--- a/builder-docker/fastdfs/docker-compose-old.yml
+++ b/builder-docker/fastdfs/docker-compose-old.yml
@@ -0,0 +1,46 @@
 version: '3'
 services:
  tracker:
    image: harbor.sino-assist.com/season/fastdfs:1.2
    container_name: tracker
    network_mode: host
    restart: always
    volumes:
      - "./tracker_data:/fastdfs/tracker/data"
    # ports: 
      # - "22122:22122"
    command: "tracker" 
  storage:
    image: harbor.sino-assist.com/season/fastdfs:1.2
    container_name: storage
    network_mode: host
    # links: 
    #   - tracker
    restart: always
    volumes:
      - "./storage.conf:/fdfs_conf/storage.conf"
      - "./storage_base_path:/fastdfs/storage/data"
      - "./store_path0:/fastdfs/store_path"  
    #ports: 
      # - "23000:23000"
    environment:
      TRACKER_SERVER: "192.168.1.204:22122"
    command: "storage"
  nginx:
    image: harbor.sino-assist.com/season/fastdfs:1.2
    container_name: fdfs-nginx
    network_mode: host
    restart: always
    volumes:
      - "./nginx.conf:/etc/nginx/conf/nginx.conf"
      - "./store_path0:/fastdfs/store_path"
    # links: 
    #   - tracker
    # ports: 
      # - "8088:8088"
    environment:
      TRACKER_SERVER: "192.168.1.204:22122"
    command: "nginx"
--- a/builder-docker/fastdfs/docker-compose.yml
+++ b/builder-docker/fastdfs/docker-compose.yml
@@ -1,46 +1,28 @@
 version: '3'
 services:
  tracker:
    image: season/fastdfs:1.2
    container_name: tracker
    image: ygqygq2/fastdfs-nginx:latest
    command: tracker
    network_mode: host
    restart: always
    volumes:
-      - "./tracker_data:/fastdfs/tracker/data"
+      - /data/tracker:/var/fdfs
-    # ports: 
+    ports:
-      # - "22122:22122"
+      - 22122:22122
-    command: "tracker" 
+  storage0:
- 
+    container_name: storage0
-  storage:
+    image: ygqygq2/fastdfs-nginx:latest
-    image: season/fastdfs:1.2
+    command: storage
    container_name: storage
    network_mode: host
-    # links: 
+    extra_hosts:
-    #   - tracker
+      - "tracker:192.168.1.204"
    restart: always
    volumes:
      - "./storage.conf:/fdfs_conf/storage.conf"
      - "./storage_base_path:/fastdfs/storage/data"
      - "./store_path0:/fastdfs/store_path"  
    #ports: 
      # - "23000:23000"
    environment:
-      TRACKER_SERVER: "192.168.1.206:22122"
+      - TRACKER_SERVER=tracker:22122
    command: "storage"
  nginx:
    image: season/fastdfs:1.2
    container_name: fdfs-nginx
    network_mode: host
    restart: always
    volumes:
-      - "./nginx.conf:/etc/nginx/conf/nginx.conf"
+      - ./data/storage0:/var/fdfs
-      - "./store_path0:/fastdfs/store_path"
+      - 8080:8080
-    # links: 
+    depends_on:
-    #   - tracker
+      - tracker
    # ports: 
      # - "8088:8088"
    environment:
      TRACKER_SERVER: "192.168.1.206:22122"
    command: "nginx"
 ## https://github.com/ygqygq2/fastdfs-nginx
--- a/builder-docker/fastdfs/storage.conf
+++ b/builder-docker/fastdfs/storage.conf
@@ -111,7 +111,7 @@ subdir_count_per_path=256
 # tracker_server can ocur more than once, and tracker_server format is
 #  "host:port", host can be hostname or ip address
-tracker_server=192.168.209.121:22122
+# tracker_server=192.168.209.121:22122
 #standard log level as syslog, case insensitive, value list:
 ### emerg for emergency
--- a/builder-docker/java11/skywalking-agent/.DS_Store
+++ b/builder-docker/java11/skywalking-agent/.DS_Store
--- a/builder-docker/java11/skywalking-agent/optional-plugins/apm-hikaricp-3.x-4.x-plugin-8.15.0.jar
+++ b/builder-docker/java11/skywalking-agent/optional-plugins/apm-hikaricp-3.x-4.x-plugin-8.15.0.jar
--- a/builder-docker/java11/skywalking-agent/optional-plugins/apm-kafka-commons-8.15.0.jar
+++ b/builder-docker/java11/skywalking-agent/optional-plugins/apm-kafka-commons-8.15.0.jar
--- a/builder-docker/java11/skywalking-agent/optional-plugins/apm-kafka-plugin-8.15.0.jar
+++ b/builder-docker/java11/skywalking-agent/optional-plugins/apm-kafka-plugin-8.15.0.jar
--- a/builder-docker/java11/skywalking-agent/optional-plugins/apm-mybatis-3.x-plugin-8.15.0.jar
+++ b/builder-docker/java11/skywalking-agent/optional-plugins/apm-mybatis-3.x-plugin-8.15.0.jar
--- a/builder-docker/java11/skywalking-agent/optional-plugins/apm-shardingsphere-5.0.0-plugin-8.15.0.jar
+++ b/builder-docker/java11/skywalking-agent/optional-plugins/apm-shardingsphere-5.0.0-plugin-8.15.0.jar
--- a/builder-docker/java11/skywalking-agent/plugins/apm-jdk-threading-plugin-8.15.0.jar
+++ b/builder-docker/java11/skywalking-agent/plugins/apm-jdk-threading-plugin-8.15.0.jar
--- a/builder-docker/java11/skywalking-agent/plugins/apm-jdk-threadpool-plugin-8.15.0.jar
+++ b/builder-docker/java11/skywalking-agent/plugins/apm-jdk-threadpool-plugin-8.15.0.jar
--- a/builder-docker/jenkins/Dockerfile
+++ b/builder-docker/jenkins/Dockerfile
@@ -7,7 +7,7 @@ ADD gradle-8.7 /opt/gradle-8.7
 RUN curl -fsSL https://deb.nodesource.com/setup_16.x | bash -
-RUN apt-get install -y nodejs git vim curl sshpass
+RUN apt-get install -y nodejs git vim curl sshpass pigz
 # ADD node-v18.20.2-linux-x64 /usr/local/node-v18.20.2-linux-x64
--- a/builder-docker/jenkins/gradle-8.7/lib/kotlin-compiler-embeddable-1.9.22.jar
+++ b/builder-docker/jenkins/gradle-8.7/lib/kotlin-compiler-embeddable-1.9.22.jar
--- a/builder-docker/jenkins/node-v18.20.2-linux-x64/bin/node
+++ b/builder-docker/jenkins/node-v18.20.2-linux-x64/bin/node
--- a/docker-3.124/support/data/nginx/conf.d/yudao.conf
+++ b/docker-3.124/support/data/nginx/conf.d/yudao.conf
@@ -0,0 +1,11 @@
 server { ## 前端项目
    listen       80;
    ## server_name  admin.iocoder.cn; ## 重要！！！修改成你的前端域名
    location / { ## 前端项目
        root   /usr/share/nginx/html/yudao-ui-admin;
        index  index.html index.htm;
        try_files $uri $uri/ /index.html;
    }
 }a
--- a/docker-3.124/support/data/nginx/conf/nginx.conf
+++ b/docker-3.124/support/data/nginx/conf/nginx.conf
@@ -0,0 +1,31 @@
 user  nginx;
 worker_processes  1;
 events {
    worker_connections  1024;
 }
 error_log  /var/log/nginx/error.log warn;
 pid        /var/run/nginx.pid;
 http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;
    sendfile        on;
    keepalive_timeout  65;
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';
 #    access_log  /var/log/nginx/access.log  main;
    gzip on;
    gzip_min_length 1k;     # 设置允许压缩的页面最小字节数
    gzip_buffers 4 16k;     # 用来存储 gzip 的压缩结果
    gzip_http_version 1.1;  # 识别 HTTP 协议版本
    gzip_comp_level 2;      # 设置 gzip 的压缩比 1-9。1 压缩比最小但最快，而 9 相反
    gzip_types text/plain application/x-javascript text/css application/xml application/javascript; # 指定压缩类型
    gzip_proxied any;       # 无论后端服务器的 headers 头返回什么信息，都无条件启用压缩
    include /etc/nginx/conf.d/*.conf; ## 加载该目录下的其它 Nginx 配置文件
 }
--- a/docker-3.124/support/data/redis/conf/redis.conf
+++ b/docker-3.124/support/data/redis/conf/redis.conf
@@ -0,0 +1,28 @@
 # redis 密码
 requirepass gkxl650
 # key 监听器配置
 # notify-keyspace-events Ex
 # 配置持久化文件存储路径
 dir /redis/data
 # 配置rdb
 # 15分钟内有至少1个key被更改则进行快照
 save 900 1
 # 5分钟内有至少10个key被更改则进行快照
 save 300 10
 # 1分钟内有至少10000个key被更改则进行快照
 save 60 10000
 # 开启压缩
 rdbcompression yes
 # rdb文件名 用默认的即可
 dbfilename dump.rdb
 # 开启aof
 appendonly yes
 # 文件名
 appendfilename "appendonly.aof"
 # 持久化策略,no:不同步,everysec:每秒一次,always:总是同步,速度比较慢
 # appendfsync always
 appendfsync everysec
 # appendfsync no
--- a/docker-3.124/support/docker-compose.yml
+++ b/docker-3.124/support/docker-compose.yml
@@ -0,0 +1,49 @@
 version: '3'
 networks:
  sa-net:
 services:
  mysql:
    image: mysql:8.0.33
    container_name: mysql
    environment:
      # 时区上海
      TZ: Asia/Shanghai
      # root 密码
      MYSQL_ROOT_PASSWORD: gkxl650
      # 初始化数据库(后续的初始化sql会在这个库执行)
      # MYSQL_DATABASE: 
    ports:
      - "3306:3306"
    volumes:
      # 数据挂载
      - ./data/mysql/data/:/var/lib/mysql/
      # 配置挂载
      - ./data/mysql/conf/:/etc/mysql/conf.d/
    command:
      # 将mysql8.0默认密码策略 修改为 原先 策略 (mysql8.0对其默认策略做了更改 会导致密码无法匹配)
      --default-authentication-plugin=mysql_native_password
      --character-set-server=utf8mb4
      --collation-server=utf8mb4_general_ci
      --explicit_defaults_for_timestamp=true
      --lower_case_table_names=1
    privileged: true
    networks:
      - sa-net
  redis:
    image: redis:6.2.12
    container_name: redis
    ports:
      - "6379:6379"
    environment:
      # 时区上海
      TZ: Asia/Shanghai
    volumes:
      # 配置文件
      - ./data/redis/conf:/redis/config:rw
      # 数据文件
      - ./data/redis/data/:/redis/data/:rw
    command: "redis-server /redis/config/redis.conf"
    privileged: true
    networks:
      - sa-net
--- a/docker-compose-3.111/snoarqube/docker-compose.yml
+++ b/docker-compose-3.111/snoarqube/docker-compose.yml
@@ -0,0 +1,37 @@
 services:
  postgresql:
    image: docker.io/bitnami/postgresql:latest
    ports:
      - '5432:5432'
    volumes:
      - './data/postgresql:/bitnami/postgresql'
    environment:
      # ALLOW_EMPTY_PASSWORD is recommended only for development.
      - ALLOW_EMPTY_PASSWORD=yes
      - POSTGRESQL_USERNAME=bn_sonarqube
      - POSTGRESQL_DATABASE=bitnami_sonarqube
      - POSTGRESQL_PASSWORD=bn_sonarqube
      - TZ=Asia/Shanghai
  sonarqube:
    image: docker.io/bitnami/sonarqube:25
    ports:
      - '9010:9000'
    volumes:
      - './data/sonarqube/sonarqube:/bitnami/sonarqube'
      - './data/sonarqube/data:/opt/bitnami/sonarqube/data'
      - './data/sonarqube/extensions:/opt/bitnami/sonarqube/extensions'
      - './data/sonarqube/temp:/opt/bitnami/sonarqube/temp'
      - './data/sonarqube/logs:/opt/bitnami/sonarqube/logs'
    depends_on:
      - postgresql
    environment:
      # ALLOW_EMPTY_PASSWORD is recommended only for development.
      - ALLOW_EMPTY_PASSWORD=yes
      - SONARQUBE_DATABASE_HOST=postgresql
      - SONARQUBE_DATABASE_PORT_NUMBER=5432
      - SONARQUBE_DATABASE_USER=bn_sonarqube
      - SONARQUBE_DATABASE_NAME=bitnami_sonarqube
      - SONARQUBE_DATABASE_PASSWORD=bn_sonarqube
      - TZ=Asia/Shanghai
--- a/docker-compose-3.111/snoarqube/test
+++ b/docker-compose-3.111/snoarqube/test
@@ -0,0 +1,36 @@
 services:
  sonarqube:
    image: sonarqube:community
    hostname: sonarqube
    container_name: sonarqube
    read_only: true
    depends_on:
      db:
        condition: service_healthy
    environment:
      SONAR_JDBC_URL: jdbc:postgresql://db:5432/sonar
      SONAR_JDBC_USERNAME: sonar
      SONAR_JDBC_PASSWORD: sonar
    volumes:
      - ./data/sonarqube/data:/opt/sonarqube/data
      - ./data/sonarqube/extensions:/opt/sonarqube/extensions
      - ./data/sonarqube/logs:/opt/sonarqube/logs
      - ./data/sonarqube/temp:/opt/sonarqube/temp
    ports:
      - "9010:9000"
  db:
    image: postgres:17
    healthcheck:
      test: [ "CMD-SHELL", "pg_isready -d $${POSTGRES_DB} -U $${POSTGRES_USER}" ]
      interval: 10s
      timeout: 5s
      retries: 5
    hostname: postgresql
    container_name: postgresql
    environment:
      POSTGRES_USER: sonar
      POSTGRES_PASSWORD: sonar
      POSTGRES_DB: sonar
    volumes:
      - ./data/postgresql:/var/lib/postgresql
      - ./data/postgresql_data:/var/lib/postgresql/data
--- a/docker-compose-3.129/Untitled-12.seqdiag
+++ b/docker-compose-3.129/Untitled-12.seqdiag
@@ -0,0 +1,25 @@
 ```mermaid
 sequenceDiagram
    participant 服务商系统
    participant 中道系统
    服务商系统->>中道系统: 提交司机信息（/provider/driver-info）
    中道系统-->>服务商系统: 返回受理结果
    alt 数据校验失败
        中道系统-->>服务商系统: code=2001
    else 校验通过
        中道系统->>中道系统: 状态变更为「认证中」
        loop 核验流程
            中道系统->>中道系统: 人工审核/系统核验
        end
        中道系统->>服务商系统: POST核验通知（/provider/verification-notify）
        alt 核验成功
            服务商系统->>服务商系统: 锁定认证字段
        else 核验失败/过期
            服务商系统->>服务商系统: 开放对应修改权限
        end
    end
--- a/docker-compose-3.129/funasr/docker-compose.yml
+++ b/docker-compose-3.129/funasr/docker-compose.yml
@@ -0,0 +1,17 @@
 networks:
  funasr:
    external: false
 services:
  server:
    image:  registry.cn-hangzhou.aliyuncs.com/funasr_repo/funasr:funasr-runtime-sdk-online-cpu-0.1.11
    networks:
      - funasr
    ports:
      - 10096:10095
    privileged: true
    environment:
      - TZ=Asia/Shanghai
    volumes:
      - ./funasr-runtime-resources/models://workspace/models
--- a/docker-compose-3.129/kong/docker-compose.yml
+++ b/docker-compose-3.129/kong/docker-compose.yml
@@ -0,0 +1,94 @@
 version: '2'
 networks:
  kong-net:
    driver: bridge
 services:
  kong-database:
    image: postgres:9.6
    container_name: kong-database
    restart: always
    networks:
      - kong-net
    environment:
      POSTGRES_USER: kong
      POSTGRES_DB: kong
      POSTGRES_PASSWORD: kong
    ports:
      - "5432:5432"
 #kong数据库的初始化
  kong-migration:
    container_name: kong-migration
    image: kong:latest
    command: "kong migrations bootstrap"
    networks:
      - kong-net
    restart: on-failure
    environment:
      KONG_PG_HOST: kong-database
      KONG_DATABASE: postgres
      KONG_PG_USER: kong
      KONG_PG_PASSWORD: kong
      KONG_CASSANDRA_CONTACT_POINTS: kong-database
    links:
      - kong-database
    depends_on:
      - kong-database
  # 启动kong
  kong:
    container_name: kong
    image: kong:latest
    restart: always
    networks:
      - kong-net
    environment:
      TZ: Asia/Shanghai
      KONG_DATABASE: postgres
      KONG_PG_HOST: kong-database
      KONG_PG_USER: kong
      KONG_PG_PASSWORD: kong
      KONG_CASSANDRA_CONTACT_POINTS: kong-database
      KONG_PROXY_ACCESS_LOG: /dev/stdout
      KONG_ADMIN_ACCESS_LOG: /dev/stdout
      KONG_PROXY_ERROR_LOG: /dev/stderr
      KONG_ADMIN_ERROR_LOG: /dev/stderr
      KONG_ADMIN_LISTEN: 0.0.0.0:8001, 0.0.0.0:8444
    depends_on:
      - kong-migration
      - kong-database
    ports:
      - "8001:8001"
      - "8000:8000"
      - "8443:8443"
      - "8444:8444"
 #konga数据库的初始化
  konga-prepare:
    container_name: konga-prepare
    image: pantsel/konga:latest
    command: "-c prepare -a postgres -u postgresql://kong:kong@kong-database:5432/konga"
    networks:
      - kong-net
    restart: on-failure
    links:
      - kong-database
    depends_on:
      - kong
      - kong-database
 #postgres数据库存储数据
  konga:
    container_name: konga
    image: pantsel/konga:latest
    restart: always
    networks:
      - kong-net
    environment:
      DB_ADAPTER: postgres
      DB_HOST: kong-database
      DB_USER: kong
      DB_DATABASE: konga
      DB_PASSWORD: kong
    depends_on:
      - kong
      - kong-database
    ports:
      - "1337:1337"
--- a/docker-compose-3.129/readme.MD
+++ b/docker-compose-3.129/readme.MD
@@ -0,0 +1,41 @@
 1. tts服务 https://github.com/remsky/Kokoro-FastAPI
 git clone https://github.com/remsky/Kokoro-FastAPI.git
 cd Kokoro-FastAPI
 cd docker/gpu  # For GPU support
 # or cd docker/cpu  # For CPU support
 docker compose up --build
 # Models will auto-download, but if needed you can manually download:
 python docker/scripts/download_model.py --output api/src/models/v1_0
 # Or run directly via UV:
 ./start-gpu.sh  # For GPU support
 ./start-cpu.sh  # For CPU support
 2. ASR服务   https://github.com/modelscope/FunASR/blob/main/runtime/docs/SDK_advanced_guide_offline_en_zh.md
 镜像启动
 通过下述命令拉取并启动FunASR runtime-SDK的docker镜像：
 sudo docker pull \
  registry.cn-hangzhou.aliyuncs.com/funasr_repo/funasr:funasr-runtime-sdk-en-cpu-0.1.7
 mkdir -p ./funasr-runtime-resources/models
 sudo docker run -p 10097:10095 -it --privileged=true \
  -v $PWD/funasr-runtime-resources/models:/workspace/models \
  registry.cn-hangzhou.aliyuncs.com/funasr_repo/funasr:funasr-runtime-sdk-en-cpu-0.1.7
 服务端启动
 docker启动之后，启动 funasr-wss-server服务程序：
 cd FunASR/runtime
 nohup bash run_server.sh \
  --download-model-dir /workspace/models \
  --vad-dir damo/speech_fsmn_vad_zh-cn-16k-common-onnx \
  --model-dir damo/speech_paraformer-large_asr_nat-en-16k-common-vocab10020-onnx  \
  --punc-dir damo/punc_ct-transformer_cn-en-common-vocab471067-large-onnx  > log.txt 2>&1 &
 # 如果您想关闭ssl，增加参数：--certfile 0
 服务端详细参数介绍可参考服务端用法详解
--- a/docker-compose-3.129/test.md
+++ b/docker-compose-3.129/test.md
@@ -0,0 +1,115 @@
 ### 测试人员试用期考试题目
 ---
 #### 一、选择题（每题5分，共10题）
 1. **（技术）以下哪种测试方法主要用于验证软件是否符合需求文档中的功能描述？**  
   A. 白盒测试  
   B. 黑盒测试  
   C. 灰盒测试  
   D. 单元测试  
 2. **（经验）在测试过程中发现一个偶现的缺陷，但无法稳定复现，此时应如何处理？**  
   A. 直接忽略该缺陷  
   B. 记录缺陷并注明“偶现”  
   C. 要求开发立即修复  
   D. 不提交缺陷报告  
 3. **（规范）以下哪种命名方式符合测试用例的规范要求？**  
   A. Test_Case_1  
   B. TC_Login_ValidCredentials  
   C. Case123  
   D. LoginTest  
 4. **（技术）以下哪项是性能测试工具？**  
   A. JIRA  
   B. Selenium  
   C. JMeter  
   D. Postman  
 5. **（经验）测试用例设计中，等价类划分法的核心目的是：**  
   A. 减少测试用例数量  
   B. 覆盖所有可能的输入组合  
   C. 仅测试边界值  
   D. 验证用户界面  
 6. **（规范）测试文档中，以下哪项内容属于测试计划的必要组成部分？**  
   A. 缺陷统计表  
   B. 测试范围与目标  
   C. 测试用例详细步骤  
   D. 开发人员名单  
 7. **（技术）自动化测试脚本的维护成本较高的主要原因是：**  
   A. 脚本语言复杂  
   B. 需求频繁变更导致脚本失效  
   C. 测试人员能力不足  
   D. 开发工具限制  
 8. **（经验）在敏捷开发模式下，测试人员的主要职责不包括：**  
   A. 参与需求评审  
   B. 编写用户手册  
   C. 执行每日构建测试  
   D. 设计测试用例  
 9. **（规范）以下哪种行为违反了缺陷管理规范？**  
   A. 缺陷描述中包含复现步骤和实际结果  
   B. 将多个相似缺陷合并为一个报告  
   C. 缺陷状态标记为“已关闭”后不再验证  
   D. 使用优先级和严重程度区分缺陷  
 10. **（技术）以下哪项是安全测试的典型场景？**  
    A. 验证用户登录功能  
    B. 检测SQL注入漏洞  
    C. 测量系统响应时间  
    D. 检查界面布局兼容性  
 ---
 #### 二、填空题（每题3分，共5题）
 1. **（技术）测试用例的三大核心组成部分是：______、测试步骤、预期结果。**  
 2. **（规范）测试计划中应明确测试的______、资源分配、风险评估和交付物。**  
 3. **（经验）BUG的生命周期通常包括新建、______、修复、验证、关闭。**  
 4. **（技术）性能测试中，TPS的全称是______。**  
 5. **（规范）代码审查时，应重点关注______、可维护性和潜在风险。**  
 ---
 #### 三、简答题（每题5分，共7题）
 1. **（技术）请简述黑盒测试与白盒测试的核心区别。**  
 2. **（经验）如何设计一个高覆盖率的登录功能测试用例？**  
 3. **（规范）测试人员在提交缺陷报告时需包含哪些关键信息？**  
 4. **（技术）什么是回归测试？在什么情况下需要执行回归测试？**  
 5. **（经验）当开发人员不认可你提交的缺陷时，应如何处理？**  
 6. **（规范）测试用例评审的参与方通常包括哪些角色？**  
 7. **（技术）请列举3种常见的接口测试工具。**  
 ---
 ### 标准答案
 #### 一、选择题  
 1. B  2. B  3. B  4. C  5. A  
 6. B  7. B  8. B  9. C  10. B  
 #### 二、填空题  
 1. 用例编号/名称  
 2. 测试范围  
 3. 确认/分配  
 4. Transactions Per Second（每秒事务数）  
 5. 代码逻辑  
 #### 三、简答题  
 1. **黑盒测试**关注功能是否符合需求，不关注内部代码；**白盒测试**基于代码结构设计用例，验证逻辑正确性。  
 2. 设计用例需覆盖：有效/无效用户名密码、空输入、特殊字符、密码加密、错误提示、多次失败锁定等场景。  
 3. 缺陷标题、复现步骤、实际结果、预期结果、环境信息、截图/日志、严重程度、优先级。  
 4. **回归测试**用于验证代码修改未引入新缺陷。需执行的情况：需求变更、缺陷修复、版本迭代后。  
 5. 提供更详细的复现步骤和日志；沟通需求文档或设计规范；若仍有争议，可请团队负责人或产品经理仲裁。  
 6. 测试人员、开发人员、产品经理、项目经理。  
 7. Postman、JMeter、SoapUI、Swagger（任选3个）。  
 --- 
 试卷设计覆盖技术能力、实际经验和规范意识，适用于评估测试人员的综合能力。
--- a/docker-swarm-review/10.5x环境配置记录/0.使用阿里云的源.md
+++ b/docker-swarm-review/10.5x环境配置记录/0.使用阿里云的源.md
@@ -0,0 +1,15 @@
 更换yum源为阿里云的yum源，因为后续Centos7可能也会停止官方的yum源支持，所以需要手动更换
 备份官方yum源配置文件：
 cp /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.bak
 下载阿里云yum源配置文件：
 curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
 4、清除缓存生产新的缓存
 yum clean all
 yum makecache
--- a/docker-swarm-review/10.5x环境配置记录/1.
+++ b/docker-swarm-review/10.5x环境配置记录/1.
@@ -0,0 +1,92 @@
 1、卸载旧版本
 执行如下指令对旧版本进行卸载：
 sudo yum remove docker \
 docker-client \
 docker-client-latest \
 docker-common \
 docker-latest \
 docker-latest-logrotate \
 docker-logrotate \
 docker-engine
 执行完毕后，如果输入docker version发现docker依然还存在，则说明当前机器上存在的是历史版本，输入如下指令进行卸载即可：
 sudo yum remove docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin docker-ce-rootless-extras
 在卸载完毕后，也要对之前的数据进行清理（这里是默认路径，如果自己更改过的话，则需要清理自己更改后的数据所在路径）:
 sudo rm -rf /var/lib/docker
 sudo rm -rf /var/lib/containerd
 2、配置仓库
 这里我们可以借助yum-config-manager这个工具来实现仓库的配置，在利用之前，先下载一个yum工具包
 sudo yum install -y yum-utils
 在安装完毕后，输入如下指令进行配置：
 sudo yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo
 接下来为了提高安装速度，我们进行配置使用国内源，输入如下指令：
 ### sed -i 's@//download.docker.com@//mirrors.ustc.edu.cn/docker-ce@g' /etc/yum.repos.d/docker-ce.repo
  sed -i 's@//download.docker.com@//mirrors.aliyun.com/docker-ce@g' /etc/yum.repos.d/docker-ce.repo
 3、安装
 输入如下指令，进行docker安装：
 sudo yum install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin  d 
 设置日志大小
 vim /etc/docker/daemon.json
 <!-- 
 {
    "log-opts": {"max-size":"1g", "max-file":"3"},
    "registry-mirrors": ["https://dockerproxy.net"]
 } -->
 {
    "log-opts": {"max-size":"1g", "max-file":"3"},
    "registry-mirrors": ["https://docker.hlmirror.com"]
 }
 systemctl reload docker 
 4、启动docker
 安装完毕后，进行启动，先输入如下指令加载配置：
    sudo systemctl daemon-reload
 接下来启动服务：
 sudo systemctl start docker
 启动完毕后我们可以输入如下指令，查看是否已经启动：
 systemctl status docker
 systemctl enable docker
 5. 停用firewalld
 ```
 [root@ZD-CRM1 ~]# systemctl stop  firewalld
 [root@ZD-CRM1 ~]# systemctl disable firewalld
 ```
 6. ulimit 
 ulimit -SHn 65536
 vim /etc/security/limits.conf 
 * soft nofile 65535
 * hard nofile 65535
--- a/docker-swarm-review/10.5x环境配置记录/2.
+++ b/docker-swarm-review/10.5x环境配置记录/2.
@@ -0,0 +1,28 @@
 1. 10.51上执行 docker swarm init
 ```
 [root@ZD-CRM1 ~]# docker swarm init
 Swarm initialized: current node (pbbaiutisn0vsvwt8tfxwusev) is now a manager.
 To add a worker to this swarm, run the following command:
    docker swarm join --token SWMTKN-1-2jliqh8rns5afbnzrrwr036p7c0kkj38188290at4xb35zgctg-ek7ku7qskkfiu2pl0dmu8q5v6 192.168.10.51:2377
 To add a manager to this swarm, run 'docker swarm join-token manager' and follow the instructions.
 ```
 2. 其他机器执行上面的 docker swarm join 
 ```
  docker swarm join --token SWMTKN-1-2jliqh8rns5afbnzrrwr036p7c0kkj38188290at4xb35zgctg-ek7ku7qskkfiu2pl0dmu8q5v6 192.168.10.51:2377
 ```
 3. 10.51上查看集群情况
 ```
 [root@ZD-CRM1 ~]# docker node ls
 ID                            HOSTNAME   STATUS    AVAILABILITY   MANAGER STATUS   ENGINE VERSION
 pbbaiutisn0vsvwt8tfxwusev *   ZD-CRM1    Ready     Active         Leader           25.0.1
 je9g46e68diiryiz1cddd7765     ZD-CRM2    Ready     Active                          25.0.1
 fqim3l4inkscd4px8jzi9j7nc     ZD-CRM3    Ready     Active                          25.0.1
 ```
--- a/docker-swarm-review/10.5x环境配置记录/3.
+++ b/docker-swarm-review/10.5x环境配置记录/3.
@@ -0,0 +1,101 @@
 ## 基础配置
 ### 1. 初始化网路 review
  docker network create \
    --driver=overlay \
    --subnet=10.17.0.0/16 \
    --scope swarm \
    --attachable \
    review
 ### 2. [portainer](../portainer) 管理工具
  docker stack deploy --compose-file docker-compose.yml portainer
  管理界面： https://192.168.10.51:9443
  页面出现报错，docker service update portainer_agent --force
 ### 3. [monitor](../monitor)
  用于 grafana 监控
  管理界面： 192.168.10.51:3000
  admin gkxl2024#@
 ## 软件包 
 部署方法均参见文件夹内readme，变量在对于的env文件。
 ### 1. [rabbitmq](../rabbitmq) 
  管理界面： 192.168.10.51:15672
  内部：review_rabbitmq_stats:5672,review_rabbitmq_queue1:5672,review_rabbitmq_queue2:5672
  stomp-url：192.168.10.51:15674
 ### 2. [xxl-job-adin](../xxl-job-admin)
  管理界面： 192.168.10.51:9991
  内部：review-xxl-job-admin:8080
 ### 3. [nacos](../nacos-cluser)
  管理界面： http://192.168.10.51:25848/nacos/
 ### 4. [redis](../redis-review-50)
  端口：192.168.10.51:6379
  内部：review_redis_redis-sentinel:16379
 ### 5. [elasticsearch](../elasticsearch)
  管理界面： 192.168.10.51:5601
  外部端口： 192.168.10.51:9200
  内部端口： review-es-elasticsearch:9200
 ### 6. [log](../log)
  无管理界面，仅需要加载对于的volumes：review-log
 ### 7. [elasticsearch](../mysql-repl-tool)
  管理界面： 192.168.10.51:5601
  外部端口： 192.168.10.51:9200
  内部端口： review-es-elasticsearch:9200
 ### 8. [skywalking](../skywalking)
  管理界面： 192.168.10.51:18080
  内部端口： review-skywalking-oap:11800
 ### 8. [mysql](../mysql-repl-tool)
  用于 [nacos](../nacos-cluser/mysql-schema.sql)，xxl-job
  管理界面： 192.168.10.51:25306
  内部端口： review-tool-mysql-master:3306  review-tool-mysql-salve:3306
 ## 其余服务
 [clickhouse](../clickhouse) 应用于服务 3.123
 [datart](../datart)  依赖的服务，其中mysql服务bi正在使用，在3.123上
 [jenkins](../jenkins) 3.120上专门用于部署
 [canal](../canal) 用于数据同步只clickhouse，在3.120
--- a/docker-swarm-review/10.5x环境配置记录/portainer_template.json
+++ b/docker-swarm-review/10.5x环境配置记录/portainer_template.json
@@ -0,0 +1,105 @@
 {
    "version": "3",
    "templates": [
        {
            "id": 52,
            "type": 2,
            "title": "nacos cluser",
            "description": "nacos集群",
            "categories": ["开发组件"],
            "platform": "linux",
            "logo": "",
            "repository": {
              "url": "https://git.sino-assist.com/sa-charts/",
              "stackfile": "docker-swarm/nacos-cluser/cluster-docker-compose.yml"
            },
            "env": [
              {
                "name": "NAMESPACE",
                "label": "NAMESPACE",
                "default": "review"
              },
              {
                "name": "NACOS_VERSION",
                "label": "NACOS_VERSION",
                "default": "v2.3.0"
              },
              {
                "name": "NODE_PORT_11",
                "label": "NODE_PORT_11",
                "default": "21848"
              },
              {
                "name": "NODE_PORT_12",
                "label": "NODE_PORT_12",
                "default": "22848"
              },
              {
                "name": "NODE_PORT_13",
                "label": "NODE_PORT_13",
                "default": "22849"
              },
              {
                "name": "NODE_PORT_21",
                "label": "NODE_PORT_21",
                "default": "23848"
              },
              {
                "name": "NODE_PORT_22",
                "label": "NODE_PORT_22",
                "default": "24848"
              },
              {
                "name": "NODE_PORT_23",
                "label": "NODE_PORT_23",
                "default": "24849"
              },
              {
                "name": "NODE_PORT_31",
                "label": "NODE_PORT_31",
                "default": "25848"
              },
              {
                "name": "NODE_PORT_32",
                "label": "NODE_PORT_32",
                "default": "26848"
              },
              {
                "name": "NODE_PORT_33",
                "label": "NODE_PORT_33",
                "default": "26849"
              },
              {
                "name": "MYSQL_SERVICE_HOST",
                "label": "MYSQL_SERVICE_HOST",
                "default": "review-tool-mysql-master"
              },
              {
                "name": "MYSQL_SERVICE_USER",
                "label": "MYSQL_SERVICE_USER",
                "default": "zd_tool"
              },
              {
                "name": "MYSQL_SERVICE_PASSWORD",
                "label": "MYSQL_SERVICE_PASSWORD",
                "default": "gkxl2024#@"
              },
              {
                "name": "NACOS_AUTH_IDENTITY_KEY",
                "label": "NACOS_AUTH_IDENTITY_KEY",
                "default": "nacos"
              },
              {
                "name": "NACOS_AUTH_IDENTITY_VALUE",
                "label": "NACOS_AUTH_IDENTITY_VALUE",
                "default": "gkxl2024#@"
              },
              {
                "name": "NACOS_AUTH_TOKEN",
                "label": "NACOS_AUTH_TOKEN",
                "default": "OTg1NjRzZnJ0Z2RmZzIwMjQ1NTU1NTExZWZnZGVmZGVz"
              }
            ]
          }
    ]
 }
--- a/docker-swarm-review/10.5x环境配置记录/前期处理.md
+++ b/docker-swarm-review/10.5x环境配置记录/前期处理.md
@@ -0,0 +1,2 @@
 1. redis的数据需要全部切换为无状态
 2. 
--- a/docker-swarm-review/Dockerfile
+++ b/docker-swarm-review/Dockerfile
@@ -0,0 +1,30 @@
 FROM harbor.sino-assist.com/marsal1212/java11:latest as builder
 ENV active_profile ''
 ENV nacos_address ''
 ENV nacos_password ''
 ENV project_name ''
 ENV namespace ''
 ENV params '-Dserver.port=8080'
 ARG FILE_JAR
 ENV TZ=Asia/Shanghai
 RUN cp /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone
 WORKDIR application
 COPY $FILE_JAR application.jar
 RUN java -Djarmode=layertools -jar application.jar extract
 FROM harbor.sino-assist.com/marsal1212/java11:latest
 WORKDIR application
 VOLUME /tmp
 COPY --from=builder application/dependencies/ ./
 COPY --from=builder application/spring-boot-loader/ ./
 COPY --from=builder application/snapshot-dependencies/ ./
 COPY --from=builder application/application/ ./
 #ENTRYPOINT ["java", "org.springframework.boot.loader.JarLauncher"]
 ENTRYPOINT java -javaagent:/skywalking-agent/skywalking-agent.jar -DSW_AGENT_NAMESPACE=$namespace -DSW_AGENT_COLLECTOR_BACKEND_SERVICES=${namespace}-skywalking-oap:11800 -DSW_AGENT_NAME=$project_name  -Dspring.profiles.active=$active_profile  -Dsa.nacos.namespace=$namespace -Dsa.nacos.password=$nacos_password -Dsa.nacos.addr=$nacos_address $params -Dfile.encoding=UTF-8  org.springframework.boot.loader.JarLauncher
 #ENTRYPOINT java -javaagent:/skywalking-agent/skywalking-agent.jar -DSW_AGENT_NAMESPACE=$namespace -DSW_AGENT_COLLECTOR_BACKEND_SERVICES=${namespace}-skywalking-oap:11800 -DSW_AGENT_NAME=$project_name  -Dserver.port=8080 -Dspring.profiles.active=$active_profile  -Dsa.nacos.namespace=$namespace -Dsa.nacos.password=$nacos_password -Dsa.nacos.addr=$nacos_address  -Dfile.encoding=UTF-8  org.springframework.boot.loader.JarLauncher
--- a/docker-swarm-review/build.gradle
+++ b/docker-swarm-review/build.gradle
@@ -0,0 +1,338 @@
 import java.time.Instant
 import java.time.format.DateTimeFormatter
 plugins {
    id 'org.springframework.boot' version '2.7.18' apply false
    id 'io.spring.dependency-management' version '1.1.0' apply false
    id 'com.github.shalousun.smart-doc' version '2.6.9' apply false
    id "org.sonarqube" version "4.0.0.2929"
    id 'com.google.cloud.tools.jib' version '3.3.2' apply false
 }
 ext { // 自定义扩展 字段 这里定义版本信息
    jjwtVersion = '0.11.1'
    mapstructPlusVersion = '1.2.4'
    jacksonVersion = '2.17.1'
    woodstoxVersion = '6.6.2'
    lombokVersion = '1.18.32'
    guavaVersion = '33.2.0-jre'
    slf4jVersion = '1.7.36'
    log4jVersion = '1.2.17'
    springCloudVersion = '2021.0.9'
    springCloudAlibabaVersion = '2021.0.6.0'
    springBootVersion = '2.7.18'
    junitVersion = '5.9.3'
    skywalkingVersion = '8.15.0'
    canalVersion = '1.1.5'
    mysqlVersion = '8.0.27'
    colaVersion = '4.0.1'
    pagehelperVersion = '1.4.7'
    smartDocVersion = '2.6.9'
    hibernateValidatorVersion = '8.0.1.Final'
    javaxAnnotationVersion = '1.3.2'
    prometheusVersion = '1.10.4'
    minioVersion = '8.5.4'
    easyexcelVersion = '3.3.1'
    hutoolVersion = '5.8.18'
    zxingVersion = '3.4.0'
    shardingsphereVersion = '5.2.1'
    snakeyamlVersion = '1.33'
    oauth2AuthorizationServerVersion = '0.4.1'
    springSecurityVersion = '5.8.2'
    wxJavaVersion = '4.4.0'
    bootAdminVersion = '2.7.15'
    fastjsonVersion = '1.2.83'
    curvesapiVersion = '1.06'
    jeepayVersion = '1.5.0'
 }
 //配置所有项目公共内容
 allprojects {
    group 'com.sa'
    version '1.1-SNAPSHOT'
    //配置仓库
    repositories {
        maven {
            url 'https://maven.aliyun.com/repository/public'
        }
        maven {
            url 'https://oss.sonatype.org/content/groups/public/'
        }
        maven {
            url 'https://maven.sino-assist.com/repository/thirdparty/'
        }
        mavenLocal()
        mavenCentral()
    }
 }
 def pomProjects = ['starters', 'infra-config', 'job', 'interface', 'infra', 'infra', 'admin', 'search', 'doc', 'commons', 'ns']
 def bootRunProjects = [
        'data-search', 'gps-data', 'data-statistics', 'data-report', 'boot-admin',
        'zgs-manager', 'return-order', 'aggregation',  'api-gate', 'sa-uaa', 'supplier-setting',
        'finance-connector', 'sa-gateway', 'export-app', 'sa-response', 'sa-api',
        'sa-app', 'sa-admin', 'gps-pass', 'file-oss', 'supplier-app','call-center','toc-user-client','supplier-manage'
 ]
 static def getMainClass(project) {
    if (project.hasProperty('mainClassName')) {
        return project.mainClassName
    } else {
        return null
    }
 }
 //配置子工程
 subprojects {
    if (!pomProjects.contains(it.name)) {
        apply plugin: "io.spring.dependency-management"
        apply plugin: "java"
        // 设置编码格式
        tasks.withType(JavaCompile).configureEach {
            options.encoding = "UTF-8"
            java {
                sourceCompatibility = "8"
                targetCompatibility = "8"
            }
        }
        dependencyManagement {
            resolutionStrategy {
                cacheChangingModulesFor 0, 'seconds'
            }
            imports {
                mavenBom "com.alibaba.cloud:spring-cloud-alibaba-dependencies:${springCloudAlibabaVersion}"
                mavenBom "org.springframework.cloud:spring-cloud-dependencies:${springCloudVersion}"
                mavenBom "org.springframework.boot:spring-boot-dependencies:${springBootVersion}"
                mavenBom "com.fasterxml.jackson:jackson-bom:${jacksonVersion}"
 //                mavenBom "org.springframework.security:spring-security-bom:${springSecurityVersion}"
            }
            dependencies {
                dependency "org.slf4j:slf4j-api:${slf4jVersion}"
                dependency "log4j:log4j:${log4jVersion}"
                dependency "com.alibaba.otter:canal.client:${canalVersion}"
                dependency "com.alibaba.otter:canal.protocol:${canalVersion}"
                dependency "mysql:mysql-connector-java:${mysqlVersion}"
                dependency "com.github.pagehelper:pagehelper-spring-boot-starter:${pagehelperVersion}"
                dependency "com.github.shalousun:smart-doc:${smartDocVersion}"
                dependency "org.hibernate:hibernate-validator:${hibernateValidatorVersion}"
                dependency "javax.annotation:javax.annotation-api:${javaxAnnotationVersion}"
                dependency "org.projectlombok:lombok:${lombokVersion}"
                dependency "io.micrometer:micrometer-registry-prometheus:${prometheusVersion}"
                dependency "io.minio:minio:${minioVersion}"
                dependency "com.alibaba:easyexcel:${easyexcelVersion}"
                dependency "com.alibaba:easyexcel-core:${easyexcelVersion}"
                dependency "cn.hutool:hutool-core:${hutoolVersion}"
                dependency "cn.hutool:hutool-all:${hutoolVersion}"
                dependency "com.alibaba:fastjson:${fastjsonVersion}"
                dependency "com.google.zxing:core:${zxingVersion}"
                dependency "com.google.zxing:javase:${zxingVersion}"
                dependency "org.yaml:snakeyaml:${snakeyamlVersion}"
                dependency "org.apache.shardingsphere:shardingsphere-jdbc-core-spring-boot-starter:${shardingsphereVersion}"
                dependency "org.springframework.security:spring-security-oauth2-authorization-server:${oauth2AuthorizationServerVersion}"
                dependency "com.github.binarywang:weixin-java-pay:${wxJavaVersion}"
                dependency "com.github.binarywang:weixin-java-miniapp:${wxJavaVersion}"
                dependency "de.codecentric:spring-boot-admin-starter-client:${bootAdminVersion}"
                dependency "com.github.binarywang:weixin-java-mp:${wxJavaVersion}"
                dependency "com.jeequan:jeepay-sdk-java:${jeepayVersion}"
                dependency "com.google.guava:guava:${guavaVersion}"
                dependency "org.apache.skywalking:apm-toolkit-logback-1.x:${skywalkingVersion}"
                dependency "com.fasterxml.jackson.core:jackson-core:${jacksonVersion}"
                dependency "com.fasterxml.jackson.core:jackson-databind:${jacksonVersion}"
                dependency "com.fasterxml.jackson.core:jackson-annotations:${jacksonVersion}"
                dependency "com.fasterxml.jackson.dataformat:jackson-dataformat-cbor:${jacksonVersion}"
                dependency "com.fasterxml.jackson.dataformat:jackson-dataformat-smile:${jacksonVersion}"
                dependency "com.fasterxml.jackson.dataformat:jackson-dataformat-xml:${jacksonVersion}"
                dependency "com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:${jacksonVersion}"
                dependency "com.fasterxml.jackson.datatype:jackson-datatype-jdk8:${jacksonVersion}"
                dependency "com.fasterxml.jackson.datatype:jackson-datatype-jsr310:${jacksonVersion}"
                dependency "com.fasterxml.jackson.module:jackson-module-parameter-names:${jacksonVersion}"
                dependency "com.fasterxml.woodstox:woodstox-core:${woodstoxVersion}"
                dependency "com.github.virtuald:curvesapi:${curvesapiVersion}"
                dependency "com.google.errorprone:error_prone_annotations:2.11.0"
                dependency "com.google.protobuf:protobuf-java:3.17.1"
                dependency "com.nimbusds:nimbus-jose-jwt:9.24.4"
                dependency "com.squareup.okhttp3:okhttp:4.9.3"
                dependency "com.squareup.okio:okio:2.8.0"
                dependency "commons-codec:commons-codec:1.15"
                dependency "commons-collections:commons-collections:3.2.2"
                dependency "commons-fileupload:commons-fileupload:1.4"
                dependency "commons-logging:commons-logging:1.2"
                dependency "commons-io:commons-io:2.11.0"
                dependency "commons-lang:commons-lang:2.6"
                dependency 'commons-beanutils:commons-beanutils:1.9.4'
                dependency "net.java.dev.jna:jna:5.10.0"
                dependency "org.apache.commons:commons-pool2:2.11.1"
                dependency "org.apache.commons:commons-compress:1.23.0"
                dependency "org.apache.httpcomponents:httpclient:4.5.14"
                dependency "org.apache.httpcomponents:httpmime:4.5.14"
                dependency "org.apache.groovy:groovy:4.0.21"
                dependency "org.apache.poi:poi:4.1.2"
                dependency "org.apache.poi:poi-ooxml:4.1.2"
                dependency "org.apache.poi:poi-ooxml-schemas:4.1.2"
                dependency "org.apache.poi:poi-scratchpad:4.1.2"
                dependency "org.bouncycastle:bcprov-jdk15on:1.70"
                dependency "org.bouncycastle:bcpkix-jdk15on:1.70"
                dependency "org.mybatis:mybatis:3.5.14"
                dependency "org.mybatis:mybatis-spring:2.1.2"
                dependency "org.ow2.ams:asm:9.3"
                dependency "org.objenesis:objenesis:3.2"
                dependency "org.beust:jcommander:1.82"
            }
        }
        dependencies {
            compileOnly "com.google.guava:guava"
            compileOnly "cn.hutool:hutool-all"
            compileOnly "org.projectlombok:lombok:${lombokVersion}"
            annotationProcessor "org.projectlombok:lombok:${lombokVersion}"
            testCompileOnly "org.projectlombok:lombok:${lombokVersion}"
            testAnnotationProcessor "org.projectlombok:lombok:${lombokVersion}"
            compileOnly "io.github.linpeilie:mapstruct-plus:${mapstructPlusVersion}"
            annotationProcessor "io.github.linpeilie:mapstruct-plus-processor:${mapstructPlusVersion}"
            testCompileOnly "io.github.linpeilie:mapstruct-plus:${mapstructPlusVersion}"
            testAnnotationProcessor "io.github.linpeilie:mapstruct-plus-processor:${mapstructPlusVersion}"
        }
    }
    if (it.name.contains("-starter")) {
        apply plugin: "java-library"
    }
    if (bootRunProjects.contains(it.name)) {
        apply plugin: "java"
        apply plugin: "idea"
        apply plugin: "org.springframework.boot"
        apply plugin: 'com.github.shalousun.smart-doc'
        apply plugin: 'com.google.cloud.tools.jib'
        smartdoc {
            configFile = file("src/main/resources/smart-doc.json")
            exclude 'org.springframework.boot:spring-boot-starter-tomcat'
            exclude 'org.springframework.boot.*'
            exclude 'com.xuxueli:xxl-job-core:*'
            exclude 'com.alibaba:easyexcel-core:*'
            exclude 'org.apache.*'
        }
        //配置子模块依赖
        dependencies {
            implementation "org.apache.skywalking:apm-toolkit-logback-1.x"
            testImplementation 'org.springframework.boot:spring-boot-starter-test'
            testImplementation "org.junit.jupiter:junit-jupiter-api:${junitVersion}"
            testRuntimeOnly "org.junit.jupiter:junit-jupiter-engine:${junitVersion}"
        }
        sourceSets {
            main {
                resources {
                    srcDirs("${rootProject.projectDir}/doc/spring-cloud-config")
                }
            }
        }
        test {
            useJUnitPlatform()
        }
        jib{
            String imageName = "harbor.sino-assist.com/marsal1212/java11:latest"
            from{
                image = imageName
            }
            to{
                image = "harbor.sino-assist.com/sa-server/${project.name}:${project.properties.get('docker_version')}"
            }
            container{
                environment = [active_profile:'dev', nacos_address:'', nacos_password:'nacos', project_name:"", namespace:"", params: "", nativeIp: "", limitMemory: "1G", reservationsMemory: "1G"]
                creationTime = DateTimeFormatter.ISO_INSTANT.format(Instant.now())
                entrypoint = ["/bin/sh", "-c",
                              'java -javaagent:/skywalking-agent/skywalking-agent.jar -Dskywalking.trace.ignore_path=/actuator,/actuator/* ' +
                                      ' -DSW_AGENT_COLLECTOR_BACKEND_SERVICES=${namespace}-skywalking-oap:11800 -DSW_AGENT_NAME=$project_name ' +
                                      ' -DSW_AGENT_INSTANCE_NAME=$project_name:${nativeIp}  -Dspring.cloud.nacos.discovery.metadata.ip=${nativeIp} ' +
                                      ' -Dspring.devtools.add-properties=false -Xms${reservationsMemory} -Xmx${limitMemory}' +
                                      ' -Dserver.port=8080 -Dspring.profiles.active=$active_profile  -Dsa.nacos.namespace=$namespace ' +
                                      ' -Dsa.nacos.password=$nacos_password -Dsa.nacos.addr=$nacos_address $params -Dfile.encoding=UTF-8 ' +
                                      ' -cp @/app/jib-classpath-file @/app/jib-main-class-file'
                ]
            }
        }
        afterEvaluate {
            bootJar {
                layered {
                    application {
                        intoLayer("spring-boot-loader") {
                            include "org/springframework/boot/loader/**"
                        }
                        intoLayer("application")
                    }
                    dependencies {
                        intoLayer("application") {
                            includeProjectDependencies()
                        }
                        intoLayer("snapshot-dependencies") {
                            include "*:*:*SNAPSHOT*"
                        }
                        intoLayer("dependencies")
                    }
                    layerOrder = ["dependencies", "spring-boot-loader", "snapshot-dependencies", "application"]
                }
            }
        }
    }
 }
 // 在文件底部更新gradle wrapper的版本
 task updateWrapper(type: UpdateWrapper) {
    gradleVersion = '8.7'
 }
 // 自定义任务用于更新wrapper
 class UpdateWrapper extends DefaultTask {
    @Input
    String gradleVersion
    @TaskAction
    void update() {
        File wrapperDir = new File(project.getProjectDir(), "gradle/wrapper")
        File propertiesFile = new File(wrapperDir, "gradle-wrapper.properties")
        Properties properties = new Properties()
        propertiesFile.withInputStream { input ->
            properties.load(input)
        }
        properties.setProperty("distributionUrl", "https://services.gradle.org/distributions/gradle-$gradleVersion-bin.zip")
        properties.setProperty("distributionSha256Sum", "some-sha-sum") // 这里填写正确的SHA-256校验和
        propertiesFile.withOutputStream { output ->
            properties.store(output, null)
        }
        File wrapperJar = new File(wrapperDir, "gradle-wrapper.jar")
        if (wrapperJar.exists()) {
            wrapperJar.delete()
        }
    }
 }
--- a/docker-swarm-review/canal/README
+++ b/docker-swarm-review/canal/README
@@ -0,0 +1,9 @@
 # crm1环境下  部署canal
 docker network create --driver overlay   review
 env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - crm1_canal
 env $(cat ./env_review | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - review_canal
--- a/docker-swarm-review/canal/docker-compose.yml
+++ b/docker-swarm-review/canal/docker-compose.yml
@@ -0,0 +1,33 @@
 version: '3.8'
 networks:
  default:
    name: ${NAMESPACE}
    external: true
 services:
  db:
    image: canal/canal-server:v1.1.5
    environment:
      - TZ=Asia/Shanghai
      - canal.instance.master.address=${canal_instance_master_address}
      - canal.instance.dbUsername=${canal_instance_dbUsername}
      - canal.instance.dbPassword=${canal_instance_dbPassword}
      - canal.instance.gtidon=false
      - canal.instance.connectionCharset=UTF-8
      - canal.instance.tsdb.enable=true
      - canal.instance.enableDruid=false
      - canal.instance.filter.regex=${canal_instance_filter_regex}
      - canal.instance.parser.parallel=true
      - canal.serverMode=rabbitMQ
      - canal.mq.topic=${canal_mq_topic}
      - rabbitmq.host=${rabbitmq_host}
      - rabbitmq.exchange=${rabbitmq_exchange}
      - rabbitmq.username=${rabbitmq_username}
      - rabbitmq.password=${rabbitmq_password}
      - rabbitmq.virtual.host=${rabbitmq_virtual_host}
    deploy:
      update_config:
        order: start-first
      placement:
        constraints:
          - node.labels.${NAMESPACE}_canal==1
--- a/docker-swarm-review/canal/env_crm1
+++ b/docker-swarm-review/canal/env_crm1
@@ -0,0 +1,11 @@
 NAMESPACE=crm1
 canal_instance_master_address=crm_mysql_db:3306
 canal_instance_dbUsername=root
 canal_instance_dbPassword=gkxl650
 canal_instance_filter_regex=zd_rescue\\.user_order_20.*,zd_rescue\\.task_order_20.*,zd_rescue\\.task_order_cost_20.*,zd_rescue\\.supplier_account_record_20.*,zd_rescue\\.customer_order_account_20.*,zd_rescue\\.customer_order_relation_20.*
 canal_mq_topic=canal_mysql_bin
 rabbitmq_host=crm1_rabbitmq_stats:5672
 rabbitmq_exchange=canal_exchange
 rabbitmq_username=root
 rabbitmq_password=gkxl650
 rabbitmq_virtual_host=canal
--- a/docker-swarm-review/canal/env_review
+++ b/docker-swarm-review/canal/env_review
@@ -0,0 +1,11 @@
 NAMESPACE=review
 canal_instance_master_address=192.168.3.123:3306
 canal_instance_dbUsername=repl
 canal_instance_dbPassword=nczl@sino_db
 canal_instance_filter_regex=zd_rescue.user_order_20.*,zd_rescue.task_order_20.*,zd_rescue.task_order_cost_20.*,zd_rescue.supplier_account_record_20.*,zd_rescue.customer_order_account_20.*,zd_rescue.customer_order_relation_20.*,zd_rescue.order_lowest_record
 canal_mq_topic=canal_mysql_bin
 rabbitmq_host=review-rabbitmq-stats:5672
 rabbitmq_exchange=canal_exchange
 rabbitmq_username=root
 rabbitmq_password=gkxl650
 rabbitmq_virtual_host=review
--- a/docker-swarm-review/clickhouse/README
+++ b/docker-swarm-review/clickhouse/README
@@ -0,0 +1,7 @@
 # crm1环境下  部署clickhouse
 env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - crm1_clickhouse
 env $(cat ./env_review | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - review_clickhouse
--- a/docker-swarm-review/clickhouse/docker-compose.yml
+++ b/docker-swarm-review/clickhouse/docker-compose.yml
@@ -0,0 +1,36 @@
 version: '3.8'
 networks:
  default:
    name: ${NAMESPACE}
    external: true
 services:
  db:
    image: docker.io/bitnami/clickhouse:23
    ports:
      - '${NODE_PORT}:8123'
    environment:
      - TZ=Asia/Shanghai
      - CLICKHOUSE_ADMIN_USER=${CLICKHOUSE_ADMIN_USER}
      - CLICKHOUSE_ADMIN_PASSWORD=${CLICKHOUSE_ADMIN_PASSWORD}
    volumes:
      - 'data_db:/bitnami/clickhouse'
      - 'data_config:/opt/bitnami/clickhouse/etc'
    deploy:
      update_config:
        order: start-first
      resources:
        limits:
            cpus: "8"
            memory: 24G
        reservations:
            cpus: "2"
            memory: 12G
      placement:
        constraints:
          - node.labels.${NAMESPACE}_clickhouse==1
 volumes:
  data_db:
    driver: local
  data_config:
    driver: local
--- a/docker-swarm-review/clickhouse/env_crm1
+++ b/docker-swarm-review/clickhouse/env_crm1
@@ -0,0 +1,4 @@
 NAMESPACE=crm1
 NODE_PORT=8123
 CLICKHOUSE_ADMIN_USER=default
 CLICKHOUSE_ADMIN_PASSWORD=gkxl650
--- a/docker-swarm-review/clickhouse/env_review
+++ b/docker-swarm-review/clickhouse/env_review
@@ -0,0 +1,4 @@
 NAMESPACE=review
 NODE_PORT=8123
 CLICKHOUSE_ADMIN_USER=default
 CLICKHOUSE_ADMIN_PASSWORD=gkxl650
--- a/docker-swarm-review/datart/README
+++ b/docker-swarm-review/datart/README
@@ -0,0 +1,10 @@
 # crm1环境下  部署redis sentinel
 env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - crm1_redis
 env $(cat ./env_review | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - review_datart
 java -Dspring.profiles.active=review -Xms512M -Dsa.nacos.namespace=review -Dspring.cloud.nacos.config.server-addr=192.168.10.12:8848 -Dspring.cloud.nacos.discovery.server-addr=192.168.10.12:8848 -Dfile.encoding=UTF-8 -jar /zd/gps/zhongdao-gps.jar
--- a/docker-swarm-review/datart/docker-compose.yml
+++ b/docker-swarm-review/datart/docker-compose.yml
@@ -0,0 +1,89 @@
 version: '3.8'
 networks:
  default:
    name: ${NAMESPACE}
    external: true
 services:
  redis:
    image: 'bitnami/redis:7.0.11'
    environment:
      - TZ=Asia/Shanghai
      - REDIS_REPLICATION_MODE=master
      - REDIS_PASSWORD=${REDIS_PASSWORD}
    ports:
      - '${REDIS_PORT}:6379'
    deploy:
      update_config:
        order: start-first
      resources:
        limits:
            cpus: "1"
            memory: 1G
        reservations:
            cpus: "0.1"
            memory: 200M
      placement:
        constraints:
          - node.labels.${NAMESPACE}_datart==1
  db:
    image: docker.io/bitnami/mysql:8.0
    ports:
      - '${MYSQL_PORT}:3306'
    environment:
      - TZ=Asia/Shanghai
      - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
      - MYSQL_DATABASE=${MYSQL_DATABASE}
      - MYSQL_ENABLE_SLOW_QUERY=0
      - MYSQL_LONG_QUERY_TIME=10
      - MYSQL_USER=${MYSQL_USER}
      - MYSQL_PASSWORD=${MYSQL_PASSWORD}
      - MYSQL_AUTHENTICATION_PLUGIN=mysql_native_password
    volumes:
      - 'mysql:/bitnami/mysql/data'
    healthcheck:
      test: ['CMD', '/opt/bitnami/scripts/mysql/healthcheck.sh']
      interval: 15s
      timeout: 5s
      retries: 6
    configs:
      - source: my_conf
        target: /opt/bitnami/mysql/conf/my_custom.cnf
    deploy:
      resources:
        limits:
            cpus: "2"
            memory: 2G
        reservations:
            cpus: "0.1"
            memory: 500M
      placement:
        constraints:
          - node.labels.${NAMESPACE}_datart==1
  chrome:
    image: 'selenium/standalone-chrome:latest'
    environment:
      - TZ=Asia/Shanghai
    ports:
      - '${CHROME_PORT}:4444'
    deploy:
      resources:
        limits:
          cpus: "2"
          memory: 6G
        reservations:
          cpus: "1"
          memory: 2G
      update_config:
        order: start-first
      placement:
        constraints:
          - node.labels.${NAMESPACE}_datart==1
 volumes:
  mysql:
    driver: local
 configs:
  my_conf:
    file: ./my.conf
--- a/docker-swarm-review/datart/env_crm1
+++ b/docker-swarm-review/datart/env_crm1
@@ -0,0 +1,9 @@
 NAMESPACE=crm1
 REDIS_PORT=16379
 REDIS_PASSWORD=gkxl650
 MYSQL_PORT=13306
 MYSQL_ROOT_PASSWORD=gkxl650
 MYSQL_DATABASE=datart
 MYSQL_USER=datart
 MYSQL_PASSWORD=gkxl650
 CHROME_PORT=14444
--- a/docker-swarm-review/datart/env_review
+++ b/docker-swarm-review/datart/env_review
@@ -0,0 +1,9 @@
 NAMESPACE=review
 REDIS_PORT=16379
 REDIS_PASSWORD=gkxl650
 MYSQL_PORT=13306
 MYSQL_ROOT_PASSWORD=gkxl650
 MYSQL_DATABASE=datart
 MYSQL_USER=datart
 MYSQL_PASSWORD=gkxl650
 CHROME_PORT=14444
--- a/docker-swarm-review/datart/my.conf
+++ b/docker-swarm-review/datart/my.conf
@@ -0,0 +1,6 @@
 [mysqld]
 max_allowed_packet=64M
 sql_mode=NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES
 log-bin=mysql-bin # 开启 binlog
 binlog-format=ROW # 选择 ROW 模式
 server_id=123
--- a/docker-swarm-review/elasticsearch/README
+++ b/docker-swarm-review/elasticsearch/README
@@ -0,0 +1,9 @@
 # crm1环境下  部署 单机 es
 env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - crm1_es   --with-registry-auth
 # review环境下  部署 单机 es 仅用于日志
 env $(cat ./env_review | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - review_log_es   --with-registry-auth
--- a/docker-swarm-review/elasticsearch/docker-compose.yml
+++ b/docker-swarm-review/elasticsearch/docker-compose.yml
@@ -0,0 +1,48 @@
 version: '3.8'
 networks:
  default:
    name: ${NAMESPACE}
    external: true
 services:
  elasticsearch:
    image: docker.io/bitnami/elasticsearch:8.13.4
    hostname: ${NAMESPACE}-es-elasticsearch
    ports:
      - '${NODE_PORT}:9200'
      - '${NODE_PORT_2}:9300'
    environment:
      - TZ=Asia/Shanghai
      - ELASTICSEARCH_HEAP_SIZE=8192m
    volumes:
      - '/mnt/data/volumes/elasticsearch:/bitnami/elasticsearch/data'
      - '/mnt/data/volumes/elasticsearch-plugins:/opt/bitnami/elasticsearch/plugins'
    deploy:
      placement:
        constraints:
          - node.labels.${NAMESPACE}_es==1
  kibana:
    image: docker.io/bitnami/kibana:8.13.4
    hostname: ${NAMESPACE}-es-kibana
    ports:
      - "${NODE_PORT_KIBANA}:5601"
    volumes:
      - "/mnt/data/volumes/kibana/data:/bitnami/kibana/data"
      - "/mnt/data/volumes/kibana/config:/opt/bitnami/kibana/config"
    environment:
      - TZ=Asia/Shanghai
      - KIBANA_ELASTICSEARCH_URL=${NAMESPACE}-es-elasticsearch
    depends_on:
      - elasticsearch
    deploy:
      update_config:
        order: start-first
      placement:
        constraints:
          - node.labels.${NAMESPACE}_es==1
 # volumes:
 #   data_db:
 #     driver: local
 #   kibana_data:
 #     driver: local
--- a/docker-swarm-review/elasticsearch/env_crm1
+++ b/docker-swarm-review/elasticsearch/env_crm1
@@ -0,0 +1,4 @@
 NAMESPACE=crm1
 NODE_PORT=9200
 NODE_PORT_2=9300
 NODE_PORT_KIBANA=5601
--- a/docker-swarm-review/elasticsearch/env_review
+++ b/docker-swarm-review/elasticsearch/env_review
@@ -0,0 +1,4 @@
 NAMESPACE=review
 NODE_PORT=9200
 NODE_PORT_2=9300
 NODE_PORT_KIBANA=5601
--- a/docker-swarm-review/elasticsearch/kibana.yml
+++ b/docker-swarm-review/elasticsearch/kibana.yml
@@ -0,0 +1,191 @@
 # For more configuration options see the configuration guide for Kibana in
 # https://www.elastic.co/guide/index.html
 # =================== System: Kibana Server ===================
 # Kibana is served by a back end server. This setting specifies the port to use.
 #server.port: 5601
 # Specifies the address to which the Kibana server will bind. IP addresses and host names are both valid values.
 # The default is 'localhost', which usually means remote machines will not be able to connect.
 # To allow connections from remote users, set this parameter to a non-loopback address.
 #server.host: "localhost"
 # Enables you to specify a path to mount Kibana at if you are running behind a proxy.
 # Use the `server.rewriteBasePath` setting to tell Kibana if it should remove the basePath
 # from requests it receives, and to prevent a deprecation warning at startup.
 # This setting cannot end in a slash.
 #server.basePath: ""
 # Specifies whether Kibana should rewrite requests that are prefixed with
 # `server.basePath` or require that they are rewritten by your reverse proxy.
 # Defaults to `false`.
 #server.rewriteBasePath: false
 # Specifies the public URL at which Kibana is available for end users. If
 # `server.basePath` is configured this URL should end with the same basePath.
 #server.publicBaseUrl: ""
 # The maximum payload size in bytes for incoming server requests.
 #server.maxPayload: 1048576
 # The Kibana server's name. This is used for display purposes.
 #server.name: "your-hostname"
 # =================== System: Kibana Server (Optional) ===================
 # Enables SSL and paths to the PEM-format SSL certificate and SSL key files, respectively.
 # These settings enable SSL for outgoing requests from the Kibana server to the browser.
 #server.ssl.enabled: false
 #server.ssl.certificate: /path/to/your/server.crt
 #server.ssl.key: /path/to/your/server.key
 # =================== System: Elasticsearch ===================
 # The URLs of the Elasticsearch instances to use for all your queries.
 #elasticsearch.hosts: ["http://localhost:9200"]
 # If your Elasticsearch is protected with basic authentication, these settings provide
 # the username and password that the Kibana server uses to perform maintenance on the Kibana
 # index at startup. Your Kibana users still need to authenticate with Elasticsearch, which
 # is proxied through the Kibana server.
 #elasticsearch.username: "kibana_system"
 #elasticsearch.password: "pass"
 # Kibana can also authenticate to Elasticsearch via "service account tokens".
 # Service account tokens are Bearer style tokens that replace the traditional username/password based configuration.
 # Use this token instead of a username/password.
 # elasticsearch.serviceAccountToken: "my_token"
 # Time in milliseconds to wait for Elasticsearch to respond to pings. Defaults to the value of
 # the elasticsearch.requestTimeout setting.
 #elasticsearch.pingTimeout: 1500
 # Time in milliseconds to wait for responses from the back end or Elasticsearch. This value
 # must be a positive integer.
 #elasticsearch.requestTimeout: 30000
 # The maximum number of sockets that can be used for communications with elasticsearch.
 # Defaults to `Infinity`.
 #elasticsearch.maxSockets: 1024
 # Specifies whether Kibana should use compression for communications with elasticsearch
 # Defaults to `false`.
 #elasticsearch.compression: false
 # List of Kibana client-side headers to send to Elasticsearch. To send *no* client-side
 # headers, set this value to [] (an empty list).
 #elasticsearch.requestHeadersWhitelist: [ authorization ]
 # Header names and values that are sent to Elasticsearch. Any custom headers cannot be overwritten
 # by client-side headers, regardless of the elasticsearch.requestHeadersWhitelist configuration.
 #elasticsearch.customHeaders: {}
 # Time in milliseconds for Elasticsearch to wait for responses from shards. Set to 0 to disable.
 #elasticsearch.shardTimeout: 30000
 # =================== System: Elasticsearch (Optional) ===================
 # These files are used to verify the identity of Kibana to Elasticsearch and are required when
 # xpack.security.http.ssl.client_authentication in Elasticsearch is set to required.
 #elasticsearch.ssl.certificate: /path/to/your/client.crt
 #elasticsearch.ssl.key: /path/to/your/client.key
 # Enables you to specify a path to the PEM file for the certificate
 # authority for your Elasticsearch instance.
 #elasticsearch.ssl.certificateAuthorities: [ "/path/to/your/CA.pem" ]
 # To disregard the validity of SSL certificates, change this setting's value to 'none'.
 #elasticsearch.ssl.verificationMode: full
 # =================== System: Logging ===================
 # Set the value of this setting to off to suppress all logging output, or to debug to log everything. Defaults to 'info'
 #logging.root.level: debug
 # Enables you to specify a file where Kibana stores log output.
 #logging.appenders.default:
 #  type: file
 #  fileName: /var/logs/kibana.log
 #  layout:
 #    type: json
 # Example with size based log rotation
 #logging.appenders.default:
 #  type: rolling-file
 #  fileName: /var/logs/kibana.log
 #  policy:
 #    type: size-limit
 #    size: 256mb
 #  strategy:
 #    type: numeric
 #    max: 10
 #  layout:
 #    type: json
 # Logs queries sent to Elasticsearch.
 #logging.loggers:
 #  - name: elasticsearch.query
 #    level: debug
 # Logs http responses.
 #logging.loggers:
 #  - name: http.server.response
 #    level: debug
 # Logs system usage information.
 #logging.loggers:
 #  - name: metrics.ops
 #    level: debug
 # Enables debug logging on the browser (dev console)
 #logging.browser.root:
 #  level: debug
 # =================== System: Other ===================
 # The path where Kibana stores persistent data not saved in Elasticsearch. Defaults to data
 #path.data: data
 # Specifies the path where Kibana creates the process ID file.
 #pid.file: /run/kibana/kibana.pid
 # Set the interval in milliseconds to sample system and process performance
 # metrics. Minimum is 100ms. Defaults to 5000ms.
 #ops.interval: 5000
 # Specifies locale to be used for all localizable strings, dates and number formats.
 # Supported languages are the following: English (default) "en", Chinese "zh-CN", Japanese "ja-JP", French "fr-FR".
 i18n.locale: "zh-CN"
 # =================== Frequently used (Optional)===================
 # =================== Saved Objects: Migrations ===================
 # Saved object migrations run at startup. If you run into migration-related issues, you might need to adjust these settings.
 # The number of documents migrated at a time.
 # If Kibana can't start up or upgrade due to an Elasticsearch `circuit_breaking_exception`,
 # use a smaller batchSize value to reduce the memory pressure. Defaults to 1000 objects per batch.
 #migrations.batchSize: 1000
 # The maximum payload size for indexing batches of upgraded saved objects.
 # To avoid migrations failing due to a 413 Request Entity Too Large response from Elasticsearch.
 # This value should be lower than or equal to your Elasticsearch cluster’s `http.max_content_length`
 # configuration option. Default: 100mb
 #migrations.maxBatchSizeBytes: 100mb
 # The number of times to retry temporary migration failures. Increase the setting
 # if migrations fail frequently with a message such as `Unable to complete the [...] step after
 # 15 attempts, terminating`. Defaults to 15
 #migrations.retryAttempts: 15
 # =================== Search Autocomplete ===================
 # Time in milliseconds to wait for autocomplete suggestions from Elasticsearch.
 # This value must be a whole number greater than zero. Defaults to 1000ms
 #unifiedSearch.autocomplete.valueSuggestions.timeout: 1000
 # Maximum number of documents loaded by each shard to generate autocomplete suggestions.
 # This value must be a whole number greater than zero. Defaults to 100_000
 #unifiedSearch.autocomplete.valueSuggestions.terminateAfter: 100000
 path:
  data: /bitnami/kibana/data
 pid:
  file: /opt/bitnami/kibana/tmp/kibana.pid
 server:
  host: 0.0.0.0
  port: 5601
 elasticsearch:
  hosts: http://review-es-elasticsearch:9200
--- a/docker-swarm-review/elasticsearch/node.options
+++ b/docker-swarm-review/elasticsearch/node.options
@@ -0,0 +1,15 @@
 ## Node command line options
 ## See `node --help` and `node --v8-options` for available options
 ## Please note you should specify one option per line
 ## max size of old space in megabytes
 #--max-old-space-size=4096
 ## do not terminate process on unhandled promise rejection
 --unhandled-rejections=warn
 ## restore < Node 16 default DNS lookup behavior
 --dns-result-order=ipv4first
 ## enable OpenSSL 3 legacy provider
 --openssl-legacy-provider
--- a/docker-swarm-review/fastdfs/docker-compose.yml
+++ b/docker-swarm-review/fastdfs/docker-compose.yml
@@ -0,0 +1,28 @@
 version: '3'
 services:
  tracker:
    container_name: tracker
    image: harbor.sino-assist.com/ygqygq2/fastdfs-nginx:latest
    command: tracker
    network_mode: host
    volumes:
      - /data/tracker:/var/fdfs
    ports:
      - 22122:22122
  storage0:
    container_name: storage0
    image: harbor.sino-assist.com/ygqygq2/fastdfs-nginx:latest
    command: storage
    network_mode: host
    extra_hosts:
      - "tracker:192.168.3.125"
    environment:
      - TRACKER_SERVER=tracker:22122
    volumes:
      - /data/storage0:/var/fdfs
      - ./conf.d:/nginx_conf/conf.d
    depends_on:
      - tracker
 ## https://github.com/ygqygq2/fastdfs-nginx
--- a/docker-swarm-review/jenkins/README
+++ b/docker-swarm-review/jenkins/README
@@ -0,0 +1,9 @@
 # crm1环境下  部署canal
 docker network create --driver overlay   review
 env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - crm1_canal
 env $(cat ./env_review | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - review_canal
--- a/docker-swarm-review/jenkins/docker-compose.yml
+++ b/docker-swarm-review/jenkins/docker-compose.yml
@@ -0,0 +1,16 @@
 version: '3.8'
 networks:
  jenkins:
    external: false
 services:
  jenkins:
    image: harbor.sino-assist.com/marsal1212/jenkins:latest
    environment:
      - TZ=Asia/Shanghai
    networks:
      - 'jenkins'
    volumes:
      - './jenkins_home:/var/jenkins_home'
    ports:
      - 8081:8080
--- a/docker-swarm-review/jenkins/env_crm1
+++ b/docker-swarm-review/jenkins/env_crm1
@@ -0,0 +1,11 @@
 NAMESPACE=crm1
 canal_instance_master_address=crm_mysql_db:3306
 canal_instance_dbUsername=root
 canal_instance_dbPassword=gkxl650
 canal_instance_filter_regex=zd_rescue\\.user_order_20.*,zd_rescue\\.task_order_20.*,zd_rescue\\.task_order_cost_20.*,zd_rescue\\.supplier_account_record_20.*,zd_rescue\\.customer_order_account_20.*,zd_rescue\\.customer_order_relation_20.*
 canal_mq_topic=canal_mysql_bin
 rabbitmq_host=crm1_rabbitmq_stats:5672
 rabbitmq_exchange=canal_exchange
 rabbitmq_username=root
 rabbitmq_password=gkxl650
 rabbitmq_virtual_host=canal
--- a/docker-swarm-review/jenkins/env_review
+++ b/docker-swarm-review/jenkins/env_review
@@ -0,0 +1,11 @@
 NAMESPACE=review
 canal_instance_master_address=192.168.10.10:3306
 canal_instance_dbUsername=repl
 canal_instance_dbPassword=nczl@sino_db
 canal_instance_filter_regex=zd_rescue\\.user_order_20.*,zd_rescue\\.task_order_20.*,zd_rescue\\.task_order_cost_20.*,zd_rescue\\.supplier_account_record_20.*,zd_rescue\\.customer_order_account_20.*,zd_rescue\\.customer_order_relation_20.*
 canal_mq_topic=canal_mysql_bin
 rabbitmq_host=192.168.3.110:5672
 rabbitmq_exchange=canal_exchange
 rabbitmq_username=root
 rabbitmq_password=gkxl650
 rabbitmq_virtual_host=review
--- a/docker-swarm-review/log/README
+++ b/docker-swarm-review/log/README
@@ -0,0 +1,15 @@
 # es index生命周期参考 https://developer.aliyun.com/article/793119，为索引配置索引模板即可，索引模板中添加ilm
 # {
 #   "index": {
 #     "lifecycle": {
 #       "name": "90-days-default"
 #     }
 #   }
 # }
 env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - crm1_log   --with-registry-auth
 env $(cat ./env_review | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - review_log   --with-registry-auth
--- a/docker-swarm-review/log/docker-compose.yml
+++ b/docker-swarm-review/log/docker-compose.yml
@@ -0,0 +1,52 @@
 version: '3.8'
 networks:
  default:
    name: ${NAMESPACE}
    external: true
 services:
  logstash:
    image: docker.elastic.co/logstash/logstash:8.13.4
    hostname: ${NAMESPACE}-log-logstash
    ports:
      - '${NODE_PORT}:5044'
    environment:
      - TZ=Asia/Shanghai
    configs:
      - source: logstash_conf
        target: /usr/share/logstash/pipeline/my.conf
    logging:
      driver: json-file
      options:
        max-size: "500m"
        max-file: "3"
    deploy:
      placement:
        constraints:
          - node.labels.${NAMESPACE}_es==1
  filebeat:
    image: docker.elastic.co/beats/filebeat:8.13.4
    volumes:
      - "kibana_data:/bitnami/kibana"
    environment:
      - TZ=Asia/Shanghai
      - LOGSTASH_URL=${NAMESPACE}-log-logstash:5044
      - KIBANA_HOSTS=${NAMESPACE}-es-kibana
    configs:
      - source: filebeat_conf
        target: /usr/share/filebeat/filebeat.yml
    volumes:
      - ${NAMESPACE}_logs:/logs
    deploy:
      update_config:
        order: start-first
      mode: global
      placement:
        constraints: [node.platform.os == linux]
 configs:
  logstash_conf:
    file: ./logstash.conf
  filebeat_conf:
    file: ./filebeat.yml
 volumes:
  ${NAMESPACE}_logs:
    external: true
--- a/docker-swarm-review/log/env_crm1
+++ b/docker-swarm-review/log/env_crm1
@@ -0,0 +1,2 @@
 NAMESPACE=crm1
 NODE_PORT=5045
--- a/docker-swarm-review/log/env_review
+++ b/docker-swarm-review/log/env_review
@@ -0,0 +1,2 @@
 NAMESPACE=review
 NODE_PORT=5044
--- a/docker-swarm-review/log/filebeat.yml
+++ b/docker-swarm-review/log/filebeat.yml
@@ -0,0 +1,16 @@
 filebeat.inputs: 
 - type: filestream 
  id: new-sino-log
  paths:
    - "/logs/*/*.log"
  parsers:
  - multiline:
      type: pattern
      pattern: '^[0-9]{4}-[0-9]{2}-[0-9]{2}'
      negate: true
      match: after
 setup.kibana.host: "${KIBANA_HOSTS:kibana:5601}"
 output.logstash:
  hosts: '${LOGSTASH_URL:logstash:5044}'
--- a/docker-swarm-review/log/jvm.options
+++ b/docker-swarm-review/log/jvm.options
@@ -0,0 +1,90 @@
 ## JVM configuration
 # Xms represents the initial size of total heap space
 # Xmx represents the maximum size of total heap space
 -Xms1g
 -Xmx1g
 ################################################################
 ## Expert settings
 ################################################################
 ##
 ## All settings below this section are considered
 ## expert settings. Don't tamper with them unless
 ## you understand what you are doing
 ##
 ################################################################
 ## GC configuration
 11-13:-XX:+UseConcMarkSweepGC
 11-13:-XX:CMSInitiatingOccupancyFraction=75
 11-13:-XX:+UseCMSInitiatingOccupancyOnly
 ## Locale
 # Set the locale language
 #-Duser.language=en
 # Set the locale country
 #-Duser.country=US
 # Set the locale variant, if any
 #-Duser.variant=
 ## basic
 # set the I/O temp directory
 #-Djava.io.tmpdir=$HOME
 # set to headless, just in case
 -Djava.awt.headless=true
 # ensure UTF-8 encoding by default (e.g. filenames)
 -Dfile.encoding=UTF-8
 # use our provided JNA always versus the system one
 #-Djna.nosys=true
 # Turn on JRuby invokedynamic
 -Djruby.compile.invokedynamic=true
 ## heap dumps
 # generate a heap dump when an allocation from the Java heap fails
 # heap dumps are created in the working directory of the JVM
 -XX:+HeapDumpOnOutOfMemoryError
 # specify an alternative path for heap dumps
 # ensure the directory exists and has sufficient space
 #-XX:HeapDumpPath=${LOGSTASH_HOME}/heapdump.hprof
 ## GC logging
 #-Xlog:gc*,gc+age=trace,safepoint:file=@loggc@:utctime,pid,tags:filecount=32,filesize=64m
 # log GC status to a file with time stamps
 # ensure the directory exists
 #-Xloggc:${LS_GC_LOG_FILE}
 # Entropy source for randomness
 -Djava.security.egd=file:/dev/urandom
 # Copy the logging context from parent threads to children
 -Dlog4j2.isThreadContextMapInheritable=true
 # FasterXML/jackson defaults
 #
 # Sets the maximum string length (in chars or bytes, depending on input context).
 # This limit is not exact and an exception will happen at sizes greater than this limit.
 # Some text values that are a little bigger than the limit may be treated as valid but no
 # text values with sizes less than or equal to this limit will be treated as invalid.
 # This value should be higher than `logstash.jackson.stream-read-constraints.max-number-length`.
 # The jackson library defaults to 20000000 or 20MB, whereas Logstash defaults to 200MB or 200000000 characters.
 -Dlogstash.jackson.stream-read-constraints.max-string-length=200000000
 #
 # Sets the maximum number length (in chars or bytes, depending on input context).
 # The jackson library defaults to 1000, whereas Logstash defaults to 10000.
 -Dlogstash.jackson.stream-read-constraints.max-number-length=10000
 #
 # Sets the maximum nesting depth. The depth is a count of objects and arrays that have not
 # been closed, `{` and `[` respectively.
 #-Dlogstash.jackson.stream-read-constraints.max-nesting-depth=1000
--- a/docker-swarm-review/log/logstash.conf
+++ b/docker-swarm-review/log/logstash.conf
@@ -0,0 +1,36 @@
 filter {
    grok {
        match => { "message" => "%{TIMESTAMP_ISO8601:oldtimestamp}\s+\[%{DATA:service}\]\s+\[TID:%{NOTSPACE:tid}\]\s+\[%{DATA:thread}\]\s+%{LOGLEVEL:loglevel}\s+%{NOTSPACE:class}\s+-%{GREEDYDATA:oldmessage}"}
    }
    date {
      match => ["oldtimestamp", "ISO8601"] 
      target => "@timestamp" 
    }
    mutate {
      replace => { "message" => "%{oldmessage}" }
      remove_field => [ "oldmessage","oldtimestamp","agent","host","input","log.flags","log.flags.keyword","tags" ]
    }
 }
 output {
  if [service] {  
    elasticsearch {
        hosts => [ "review-es-elasticsearch:9200" ]
        index => "sslog-%{[service]}"
        action => "create"
        ilm_enabled => false
    }
  }else{
    elasticsearch {
        hosts => [ "review-es-elasticsearch:9200" ]
        index => "sslog-default"
        action => "create"
        ilm_enabled => false
    }
  }
 }
--- a/docker-swarm-review/minio/README
+++ b/docker-swarm-review/minio/README
@@ -0,0 +1,18 @@
 # es index生命周期参考 https://developer.aliyun.com/article/793119，为索引配置索引模板即可，索引模板中添加ilm
 # {
 #   "index": {
 #     "lifecycle": {
 #       "name": "90-days-default"
 #     }
 #   }
 # }
 docker network create \
 --driver overlay \
  review
 env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - crm1_log   --with-registry-auth
 env $(cat ./env_review | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - minio   --with-registry-auth
--- a/docker-swarm-review/minio/docker-compose.yml
+++ b/docker-swarm-review/minio/docker-compose.yml
@@ -0,0 +1,35 @@
 version: '3.8'
 networks:
  default:
    name: ${NAMESPACE}
    external: true
 services:
  minio:
    image: docker.io/bitnami/minio:2023
    hostname: ${NAMESPACE}-minio
    ports:
      - '${NODE_PORT}:9000'
      - '${NODE_PORT_1}:9001'
    environment:
      # 时区上海
      TZ: Asia/Shanghai
      # 管理后台用户名
      MINIO_ROOT_USER: ${MINIO_ROOT_USER}
      # 管理后台密码，最小8个字符
      MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
    volumes:
      - 'data:/data'
    deploy:
      update_config:
        order: start-first
      placement:
        constraints:
          - node.labels.${NAMESPACE}_minio==1
 volumes:
  data:
    driver: local
--- a/docker-swarm-review/minio/env_crm1
+++ b/docker-swarm-review/minio/env_crm1
@@ -0,0 +1,5 @@
 NAMESPACE=crm1
 NODE_PORT=9000
 NODE_PORT_1=9001
 MINIO_ROOT_USER=minioadmin
 MINIO_ROOT_PASSWORD=gkxl###650
--- a/docker-swarm-review/minio/env_review
+++ b/docker-swarm-review/minio/env_review
@@ -0,0 +1,5 @@
 NAMESPACE=review
 NODE_PORT=9000
 NODE_PORT_1=9001
 MINIO_ROOT_USER=minioadmin
 MINIO_ROOT_PASSWORD=gkxl###650
--- a/docker-swarm-review/mongodb/README
+++ b/docker-swarm-review/mongodb/README
@@ -0,0 +1,12 @@
 # crm1环境下  部署集群mongodb
 env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file -  crm1_mongodb
 # crm1环境下  部署集群mongodb rs
 docker stack deploy --compose-file docker-stack-rs.yml review_mongodb  --with-registry-auth
--- a/docker-swarm-review/mongodb/docker-compose.yml
+++ b/docker-swarm-review/mongodb/docker-compose.yml
@@ -0,0 +1,25 @@
 version: '3.8'
 networks:
  default:
    name: ${NAMESPACE}
    external: true
 services:
  db:
    image: docker.io/bitnami/mongodb:6.0
    ports:
      - '${NODE_PORT}:27017'
    environment:
      - TZ=Asia/Shanghai
      - MONGODB_ROOT_USER=root
      - MONGODB_ROOT_PASSWORD=123456
      - MONGODB_DATABASE=${MONGODB_DATABASE}
    volumes:
      - '/mnt/data/volumes/mongodb:/bitnami/mongodb'
    deploy:
      update_config:
        order: start-first
      placement:
        constraints:
          - node.labels.${NAMESPACE}_mongodb==1
--- a/docker-swarm-review/mongodb/docker-stack-rs.yml
+++ b/docker-swarm-review/mongodb/docker-stack-rs.yml
@@ -0,0 +1,64 @@
 # Copyright Broadcom, Inc. All Rights Reserved.
 # SPDX-License-Identifier: APACHE-2.0
 version: '3.8'
 networks:
  default:
    name: review
    external: true
 services:
  primary:
    image: docker.io/bitnami/mongodb:7.0
    hostname: mongodb-primary
    ports:
      - 27015:27017
    environment:
      - TZ=Asia/Shanghai
      - MONGODB_ADVERTISED_HOSTNAME=mongodb-primary
      - MONGODB_REPLICA_SET_MODE=primary
      - MONGODB_ROOT_PASSWORD=123456
      - MONGODB_REPLICA_SET_KEY=replicasetkey123
    volumes:
      - '/mnt/data/volumes/mongodb/primary:/bitnami/mongodb'
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints: [node.hostname == ZD-CRM5]
  secondary:
    image: docker.io/bitnami/mongodb:7.0
    hostname: mongodb-secondary
    ports:
      - 27016:27017
    depends_on:
      - mongodb-primary
    environment:
      - TZ=Asia/Shanghai
      - MONGODB_ADVERTISED_HOSTNAME=mongodb-secondary
      - MONGODB_REPLICA_SET_MODE=secondary
      - MONGODB_INITIAL_PRIMARY_HOST=mongodb-primary
      - MONGODB_INITIAL_PRIMARY_ROOT_PASSWORD=123456
      - MONGODB_REPLICA_SET_KEY=replicasetkey123
    volumes:
      - '/mnt/data/volumes/mongodb/secondary:/bitnami/mongodb'
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints: [node.hostname == ZD-CRM6]
  arbiter:
    image: docker.io/bitnami/mongodb:7.0
    depends_on:
      - mongodb-primary
    environment:
      - TZ=Asia/Shanghai
      - MONGODB_ADVERTISED_HOSTNAME=mongodb-arbiter
      - MONGODB_REPLICA_SET_MODE=arbiter
      - MONGODB_INITIAL_PRIMARY_HOST=mongodb-primary
      - MONGODB_INITIAL_PRIMARY_ROOT_PASSWORD=password123
      - MONGODB_REPLICA_SET_KEY=replicasetkey123
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints: [node.hostname == ZD-CRM3]
--- a/docker-swarm-review/mongodb/env_crm1
+++ b/docker-swarm-review/mongodb/env_crm1
@@ -0,0 +1,3 @@
 NAMESPACE=crm1
 NODE_PORT=27017
 MONGODB_DATABASE=gps_data
--- a/docker-swarm-review/mongodb/env_review
+++ b/docker-swarm-review/mongodb/env_review
@@ -0,0 +1,3 @@
 NAMESPACE=review
 NODE_PORT=27017
 MONGODB_DATABASE=gps_data
--- a/docker-swarm-review/monitor/README
+++ b/docker-swarm-review/monitor/README
@@ -0,0 +1,19 @@
 env $(cat ./env_review | xargs) envsubst < ./docker-stack.yml | docker stack deploy --compose-file - monitor
 docker stack deploy --compose-file docker-compose.yml monitor   --with-registry-auth
 docker run \
    -p 9090:9090 \
    -v /opt/support/prometheus.yml:/etc/prometheus/prometheus.yml \
    prom/prometheus:v2.52.0
 docker service create --name cadvisor -l prometheus-job=cadvisor \
    --mode=global --publish target=8080,mode=host \
    --mount type=bind,src=/var/run/docker.sock,dst=/var/run/docker.sock,ro \
    --mount type=bind,src=/,dst=/rootfs,ro \
    --mount type=bind,src=/var/run,dst=/var/run \
    --mount type=bind,src=/sys,dst=/sys,ro \
    --mount type=bind,src=/var/lib/docker,dst=/var/lib/docker,ro \
    spcodes/cadvisor:v0.49.1 -docker_only
--- a/docker-swarm-review/monitor/docker-compose.yml
+++ b/docker-swarm-review/monitor/docker-compose.yml
@@ -0,0 +1,70 @@
 version: '3.8'
 services:
  prometheus:
    image: prom/prometheus:v2.52.0
    ports:
      - "9090:9090"
    configs:
      - source: prometheus_conf
        target: /etc/prometheus/prometheus.yml
    command:
      - --config.file=/etc/prometheus/prometheus.yml
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    deploy:
      mode: replicated
      placement:
        constraints: [node.hostname == ZD-CRM2]
      replicas: 1
  # alertmanager:
  #   image: prom/alertmanager:v0.27.0
  #   ports:
  #     - "9093:9093"
  #   volumes:
  #     - ./alertmanager.yml:/etc/alertmanager/alertmanager.yml
  #   command:
  #     - --config.file=/etc/alertmanager/alertmanager.yml
  #   deploy:
  #     mode: replicated
  #     replicas: 1
  # node-exporter:
  #   image: prom/node-exporter:v1.8.1
  #   volumes:
  #     - /proc:/host/proc:ro
  #     - /sys:/host/sys:ro
  #     - /:/rootfs:ro
  #   deploy:
  #     mode: global
  #     placement:
  #       constraints: [node.role == manager]
  cadvisor:
    image: spcodes/cadvisor:v0.49.1
    ports:
      - 8180:8080
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /:/rootfs:ro
      - /var/run:/var/run:rw
      - /sys:/sys:ro
      - /var/lib/docker/:/var/lib/docker:ro
    deploy:
      mode: global
  grafana:
    image: grafana/grafana:11.0.0
    ports:
      - 23000:3000
    volumes:
      - /opt/data/grafana/:/var/lib/grafana:ro
    deploy:
      mode: replicated
      placement:
        constraints: [node.hostname == ZD-CRM2]
      replicas: 1
 configs:
  prometheus_conf:
 #    file: ./prometheus.yml
     external: true
     name: monitor_prometheus_conf_v2
--- a/docker-swarm-review/monitor/docker-stack.yml
+++ b/docker-swarm-review/monitor/docker-stack.yml
@@ -0,0 +1,125 @@
 version: "3.8"
 services:
  grafana:
    image: portainer/template-swarm-monitoring:grafana-9.5.2
    ports:
      - target: 3000
        published: 3000
        protocol: tcp
        mode: ingress
    deploy:
      replicas: 1
      restart_policy:
        condition: on-failure
      placement:
        constraints:
          - node.role == manager
          - node.labels.monitoring == true
    volumes:
      - type: volume
        source: grafana-data
        target: /var/lib/grafana
    environment:
      - GF_SECURITY_ADMIN_USER=${GRAFANA_USER}
      - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_PASSWORD}
      - GF_USERS_ALLOW_SIGN_UP=false
    networks:
      - net    
  prometheus:
    image: portainer/template-swarm-monitoring:prometheus-v2.44.0
    command:
      - '--config.file=/etc/prometheus/prometheus.yml'
      - '--log.level=error'
      - '--storage.tsdb.path=/prometheus'
      - '--storage.tsdb.retention.time=7d'
    deploy:
      replicas: 1
      restart_policy:
        condition: on-failure
      placement:
        constraints:
          - node.role == manager
          - node.labels.monitoring == true
    volumes:
      - type: volume
        source: prometheus-data
        target: /prometheus
    networks:
      - net
  cadvisor:
    image: spcodes/cadvisor:v0.49.1
    command: -logtostderr -docker_only
    deploy:
      mode: global
      resources:
        limits:
          memory: 128M
        reservations:
          memory: 64M
    volumes:
      - type: bind
        source: /
        target: /rootfs
        read_only: true
      - type: bind
        source: /var/run
        target: /var/run
        read_only: true
      - type: bind
        source: /sys
        target: /sys
        read_only: true
      - type: bind
        source: /var/lib/docker
        target: /var/lib/docker
        read_only: true
      - type: bind
        source: /dev/disk
        target: /dev/disk
        read_only: true                        
    networks:
      - net
  node-exporter:
    image: prom/node-exporter:v1.5.0
    command:
      - '--path.sysfs=/host/sys'
      - '--path.procfs=/host/proc'
      - '--collector.filesystem.ignored-mount-points=^/(sys|proc|dev|host|etc)($$|/)'
      - '--no-collector.ipvs'
    deploy:
      mode: global
      resources:
        limits:
          memory: 128M
        reservations:
          memory: 64M
    volumes:
      - type: bind
        source: /
        target: /rootfs
        read_only: true
      - type: bind
        source: /proc
        target: /host/proc
        read_only: true
      - type: bind
        source: /sys
        target: /host/sys
        read_only: true
    networks:
      - net
 volumes:
  grafana-data:
  prometheus-data:
 networks:
  net:
    driver: host
--- a/docker-swarm-review/monitor/prometheus.yml
+++ b/docker-swarm-review/monitor/prometheus.yml
@@ -0,0 +1,30 @@
 scrape_configs:
  # Make Prometheus scrape itself for metrics.
  - job_name: 'prometheus'
    static_configs:
    - targets: ['localhost:9090']
  # Create a job for Docker Swarm containers.
  - job_name: 'dockerswarm'
    dockerswarm_sd_configs:
      - host: unix:///var/run/docker.sock
        role: nodes
    relabel_configs:
      # Fetch metrics on port 9323.
      - source_labels: [__meta_dockerswarm_node_address]
        target_label: __address__
        replacement: $1:9323
      # Set hostname as instance label
      - source_labels: [__meta_dockerswarm_node_hostname]
        target_label: instance
      # Only keep containers that should be running.
      - source_labels: [__meta_dockerswarm_task_desired_state]
        regex: running
        action: keep
      # Only keep containers that have a `prometheus-job` label.
      - source_labels: [__meta_dockerswarm_service_label_prometheus_job]
        regex: .+
        action: keep
      # Use the prometheus-job Swarm label as Prometheus job label.
      - source_labels: [__meta_dockerswarm_service_label_prometheus_job]
        target_label: job
--- a/docker-swarm-review/mysql-repl-tool/README.md
+++ b/docker-swarm-review/mysql-repl-tool/README.md
@@ -0,0 +1,50 @@
 生产环境用于nacos xxl-job的专用数据库
 # review环境下  部署 附属工具类服务使用的mysql
 env $(cat ./env_review | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - review_tool_mysql
 [mysqladmin]
 user=
 [mysqld]
 skip_name_resolve
 explicit_defaults_for_timestamp
 basedir=/opt/bitnami/mysql
 port=3306
 tmpdir=/opt/bitnami/mysql/tmp
 socket=/opt/bitnami/mysql/tmp/mysql.sock
 pid_file=/opt/bitnami/mysql/tmp/mysqld.pid
 max_allowed_packet=16M
 bind_address=0.0.0.0
 log_error=/opt/bitnami/mysql/logs/mysqld.log
 slow_query_log=0
 slow_query_log_file=/opt/bitnami/mysql/logs/mysqld.log
 long_query_time=10
 character_set_server=utf8mb4
 collation_server=utf8mb4_unicode_ci
 plugin_dir=/opt/bitnami/mysql/lib/plugin
 [client]
 port=3306
 socket=/opt/bitnami/mysql/tmp/mysql.sock
 default_character_set=utf8mb4
 plugin_dir=/opt/bitnami/mysql/lib/plugin
 [manager]
 port=3306
 socket=/opt/bitnami/mysql/tmp/mysql.sock
 pid_file=/opt/bitnami/mysql/tmp/mysqld.pid
 ---- 实际版本
 [mysqld]
 max_connections=500
 max_allowed_packet=64M
 sql_mode=NO_ENGINE_SUBSTITUTION,STRICT_TRANS_TABLES
 log-bin=mysql-bin # 开启 binlog
 binlog-format=ROW # 选择 ROW 模式
 server_id=209
--- a/docker-swarm-review/mysql-repl-tool/docker-compose.yml
+++ b/docker-swarm-review/mysql-repl-tool/docker-compose.yml
@@ -0,0 +1,92 @@
 version: '3.8'
 networks:
  default:
    name: ${NAMESPACE}
    external: true
 services:
  mysql-master:
    image: docker.io/bitnami/mysql:8.0
    hostname: ${NAMESPACE}-tool-mysql-master
    ports:
      - '${NODE_PORT_MASTER}:3306'
    volumes:
      - 'mysql_repl_master_data:/bitnami/mysql/data'
    environment:
      - MYSQL_REPLICATION_MODE=master
      - MYSQL_REPLICATION_USER=repl_user
      - MYSQL_REPLICATION_PASSWORD=${MYSQL_REPLICATION_PASSWORD}
      # - MYSQL_DATABASE=my_database
      # ALLOW_EMPTY_PASSWORD is recommended only for development.
      - MYSQL_USER=${MYSQL_USER}
      - MYSQL_PASSWORD=${MYSQL_PASSWORD}
      - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
      - MYSQL_AUTHENTICATION_PLUGIN=mysql_native_password
      - MYSQL_ENABLE_SLOW_QUERY=0
      - MYSQL_LONG_QUERY_TIME=10
    configs:
      - source: custome_config_master
        target: /opt/bitnami/mysql/conf/my_custom.cnf
    healthcheck:
      test: ['CMD', '/opt/bitnami/scripts/mysql/healthcheck.sh']
      interval: 15s
      timeout: 5s
      retries: 6
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints: [node.hostname == ZD-BAK-APP1]
  mysql-slave:
    image: docker.io/bitnami/mysql:8.0
    hostname: ${NAMESPACE}-tool-mysql-slave
    ports:
      - '${NODE_PORT_SLAVE}:3306'
    volumes:
      - 'mysql_repl_slave_data:/bitnami/mysql/data'
    depends_on:
      - mysql-master
    environment:
      - MYSQL_REPLICATION_MODE=slave
      - MYSQL_REPLICATION_USER=repl_user
      - MYSQL_REPLICATION_PASSWORD=${MYSQL_REPLICATION_PASSWORD}
      # - MYSQL_DATABASE=my_database
      - MYSQL_MASTER_HOST=mysql-master
      - MYSQL_MASTER_PORT_NUMBER=3306
      - MYSQL_MASTER_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
      - MYSQL_USER=${MYSQL_USER}
      - MYSQL_PASSWORD=${MYSQL_PASSWORD}
      - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
      - MYSQL_AUTHENTICATION_PLUGIN=mysql_native_password
      - MYSQL_ENABLE_SLOW_QUERY=0
      - MYSQL_LONG_QUERY_TIME=10
      # ALLOW_EMPTY_PASSWORD is recommended only for development.
      # - ALLOW_EMPTY_PASSWORD=yes
      # In case of missing binary files on master, use `true` to reset those binary files. Creating a previous backup is recommended.
      - MYSQL_REPLICATION_SLAVE_DUMP=false
    healthcheck:
      test: ['CMD', '/opt/bitnami/scripts/mysql/healthcheck.sh']
      interval: 30s
      timeout: 10s
      retries: 6
      start_period: 180s
    configs:
      - source: custome_config_slave
        target: /opt/bitnami/mysql/conf/my_custom.cnf
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints: [node.hostname == ZD-BAK-APP2]
 volumes:
  mysql_repl_master_data:
    driver: local
  mysql_repl_slave_data:
    driver: local
 configs:
  custome_config_master:
    external: true
    name: ${CUSTOME_CONFIG_MASTER}
  custome_config_slave:
    external: true
    name: ${CUSTOME_CONFIG_SLAVE}
--- a/docker-swarm-review/mysql-repl-tool/env_review
+++ b/docker-swarm-review/mysql-repl-tool/env_review
@@ -0,0 +1,9 @@
 NAMESPACE=review
 NODE_PORT_MASTER=25306
 NODE_PORT_SLAVE=25307
 MYSQL_USER=zd_tool
 MYSQL_PASSWORD=gkxl2024#@
 MYSQL_ROOT_PASSWORD=gkxl2024#@
 MYSQL_REPLICATION_PASSWORD=gkxl2024#@
 CUSTOME_CONFIG_MASTER=review_tool_mysql_master_conf_v1
 CUSTOME_CONFIG_SLAVE=review_tool_mysql_slave_conf_v1
--- a/docker-swarm-review/mysql/README
+++ b/docker-swarm-review/mysql/README
@@ -0,0 +1,36 @@
 # crm1环境下  部署 mysql
 env $(cat ./env_crm1 | xargs) envsubst < ./docker-compose.yml | docker stack deploy --compose-file - crm1_mysql
 [mysqladmin]
 user=
 [mysqld]
 skip_name_resolve
 explicit_defaults_for_timestamp
 basedir=/opt/bitnami/mysql
 port=3306
 tmpdir=/opt/bitnami/mysql/tmp
 socket=/opt/bitnami/mysql/tmp/mysql.sock
 pid_file=/opt/bitnami/mysql/tmp/mysqld.pid
 max_allowed_packet=16M
 bind_address=0.0.0.0
 log_error=/opt/bitnami/mysql/logs/mysqld.log
 slow_query_log=0
 slow_query_log_file=/opt/bitnami/mysql/logs/mysqld.log
 long_query_time=10
 character_set_server=utf8mb4
 collation_server=utf8mb4_unicode_ci
 plugin_dir=/opt/bitnami/mysql/lib/plugin
 [client]
 port=3306
 socket=/opt/bitnami/mysql/tmp/mysql.sock
 default_character_set=utf8mb4
 plugin_dir=/opt/bitnami/mysql/lib/plugin
 [manager]
 port=3306
 socket=/opt/bitnami/mysql/tmp/mysql.sock
 pid_file=/opt/bitnami/mysql/tmp/mysqld.pid
--- a/docker-swarm-review/mysql/docker-compose.yml
+++ b/docker-swarm-review/mysql/docker-compose.yml
@@ -0,0 +1,42 @@
 version: '3.8'
 networks:
  default:
    name: ${NAMESPACE}
    external: true
 services:
  db:
    image: docker.io/bitnami/mysql:8.0
    ports:
      - '${NODE_PORT}:3306'
    environment:
      - TZ=Asia/Shanghai
      - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
      - MYSQL_DATABASE=${MYSQL_DATABASE}
      - MYSQL_ENABLE_SLOW_QUERY=0
      - MYSQL_LONG_QUERY_TIME=10
      - MYSQL_USER=${MYSQL_USER}
      - MYSQL_PASSWORD=${MYSQL_PASSWORD}
      - MYSQL_AUTHENTICATION_PLUGIN=mysql_native_password
    volumes:
      - 'data_db:/bitnami/mysql/data'
    healthcheck:
      test: ['CMD', '/opt/bitnami/scripts/mysql/healthcheck.sh']
      interval: 15s
      timeout: 5s
      retries: 6
    configs:
      - source: custome_config
        target: /opt/bitnami/mysql/conf/my_custom.cnf
    deploy:
      placement:
        constraints:
          - node.labels.${NAMESPACE}_mysql==1
 volumes:
  data_db:
    driver: local
 configs:
  custome_config:
    external: true
    name: ${CUSTOME_CONFIG}
--- a/docker-swarm-review/mysql/env_review
+++ b/docker-swarm-review/mysql/env_review
@@ -0,0 +1,7 @@
 NAMESPACE=review
 NODE_PORT=3306
 MYSQL_USER=gkxl650
 MYSQL_PASSWORD=gkxl650
 MYSQL_ROOT_PASSWORD=gkxl650
 MYSQL_DATABASE=zd_rescue
 CUSTOME_CONFIG=review_mysql_conf_v1
--- a/docker-swarm-review/nacos-cluser/README
+++ b/docker-swarm-review/nacos-cluser/README
@@ -0,0 +1,10 @@
 # crm1环境下  部署单机nacos
 env $(cat ./env_crm1 | xargs) envsubst < ./standalone-derby.yml | docker stack deploy --compose-file - crm1_nacos
 # review环境下  部署单机nacos
 env $(cat ./env_review | xargs) envsubst < ./cluster-docker-compose.yml | docker stack deploy --compose-file - review_nacos
--- a/docker-swarm-review/nacos-cluser/cluster-docker-compose.yml
+++ b/docker-swarm-review/nacos-cluser/cluster-docker-compose.yml
@@ -0,0 +1,103 @@
 version: '3.8'
 networks:
  default:
    name: ${NAMESPACE}
    external: true
 services:
  nacos1:
    image: nacos/nacos-server:${NACOS_VERSION}
    hostname: ${NAMESPACE}-nacos1
    ports:
      - ${NODE_PORT_11}:8848
      - ${NODE_PORT_12}:9848
      - ${NODE_PORT_13}:9849
    volumes:
      - nacos_cluster_log:/home/nacos/logs  #配置docker存储日志的卷
    environment:
      MODE: cluster
      PREFER_HOST_MODE: hostname
      NACOS_SERVERS: ${NAMESPACE}-nacos1:8848 ${NAMESPACE}-nacos2:8848 ${NAMESPACE}-nacos3:8848
      NACOS_SERVER_PORT: 8848
      NACOS_AUTH_ENABLE: 'true'     #1.2.0版本默认关闭登陆界面
      SPRING_DATASOURCE_PLATFORM: mysql
      MYSQL_SERVICE_HOST: ${MYSQL_SERVICE_HOST}
      MYSQL_SERVICE_DB_NAME: nacos
      MYSQL_SERVICE_PORT: 3306
      MYSQL_SERVICE_USER: ${MYSQL_SERVICE_USER}
      MYSQL_SERVICE_PASSWORD: ${MYSQL_SERVICE_PASSWORD}
      NACOS_AUTH_IDENTITY_KEY: ${NACOS_AUTH_IDENTITY_KEY}
      NACOS_AUTH_IDENTITY_VALUE: ${NACOS_AUTH_IDENTITY_VALUE}
      NACOS_AUTH_TOKEN: ${NACOS_AUTH_TOKEN}
    deploy:
      replicas: 1       #部署时，指定部署一个副本
      placement:
        constraints: [node.hostname == ZD-BAK-APP1]
      restart_policy:
        condition: on-failure
  nacos2:
    image: nacos/nacos-server:${NACOS_VERSION}
    hostname: ${NAMESPACE}-nacos2
    ports:
      - ${NODE_PORT_21}:8848
      - ${NODE_PORT_22}:9848
      - ${NODE_PORT_23}:9849
    volumes:
      - nacos_cluster_log:/home/nacos/logs  #配置docker存储日志的卷
    environment:
      MODE: cluster
      PREFER_HOST_MODE: hostname
      NACOS_SERVERS: ${NAMESPACE}-nacos1:8848 ${NAMESPACE}-nacos2:8848 ${NAMESPACE}-nacos3:8848
      NACOS_SERVER_PORT: 8848
      NACOS_AUTH_ENABLE: 'true'     #1.2.0版本默认关闭登陆界面
      SPRING_DATASOURCE_PLATFORM: mysql
      MYSQL_SERVICE_HOST: ${MYSQL_SERVICE_HOST}
      MYSQL_SERVICE_DB_NAME: nacos
      MYSQL_SERVICE_PORT: 3306
      MYSQL_SERVICE_USER: ${MYSQL_SERVICE_USER}
      MYSQL_SERVICE_PASSWORD: ${MYSQL_SERVICE_PASSWORD}
      NACOS_AUTH_IDENTITY_KEY: ${NACOS_AUTH_IDENTITY_KEY}
      NACOS_AUTH_IDENTITY_VALUE: ${NACOS_AUTH_IDENTITY_VALUE}
      NACOS_AUTH_TOKEN: ${NACOS_AUTH_TOKEN}
    deploy:
      replicas: 1       #部署时，指定部署一个副本
      placement:
        constraints: [node.hostname == ZD-BAK-APP2]
      restart_policy:
        condition: on-failure
  nacos3:
    image: nacos/nacos-server:${NACOS_VERSION}
    hostname: ${NAMESPACE}-nacos3
    ports:
      - ${NODE_PORT_31}:8848
      - ${NODE_PORT_32}:9848
      - ${NODE_PORT_33}:9849
    volumes:
      - nacos_cluster_log:/home/nacos/logs  #配置docker存储日志的卷
    environment:
      MODE: cluster
      PREFER_HOST_MODE: hostname
      NACOS_SERVERS: ${NAMESPACE}-nacos1:8848 ${NAMESPACE}-nacos2:8848 ${NAMESPACE}-nacos3:8848
      NACOS_SERVER_PORT: 8848
      NACOS_AUTH_ENABLE: 'true'     #1.2.0版本默认关闭登陆界面
      SPRING_DATASOURCE_PLATFORM: mysql
      MYSQL_SERVICE_HOST: ${MYSQL_SERVICE_HOST}
      MYSQL_SERVICE_DB_NAME: nacos
      MYSQL_SERVICE_PORT: 3306
      MYSQL_SERVICE_USER: ${MYSQL_SERVICE_USER}
      MYSQL_SERVICE_PASSWORD: ${MYSQL_SERVICE_PASSWORD}
      NACOS_AUTH_IDENTITY_KEY: ${NACOS_AUTH_IDENTITY_KEY}
      NACOS_AUTH_IDENTITY_VALUE: ${NACOS_AUTH_IDENTITY_VALUE}
      NACOS_AUTH_TOKEN: ${NACOS_AUTH_TOKEN}
    deploy:
      replicas: 1       #部署时，指定部署一个副本
      placement:
        constraints: [node.hostname == zd-bak-app3]
      restart_policy:
        condition: on-failure
 volumes:
  nacos_cluster_log:
    driver: local
--- a/docker-swarm-review/nacos-cluser/env_crm1
+++ b/docker-swarm-review/nacos-cluser/env_crm1
@@ -0,0 +1,5 @@
 NAMESPACE=crm1
 NACOS_VERSION=v2.2.2
 NODE_PORT=8848
 NODE_PORT_2=9848
 NACOS_SERVER_IP=192.168.1.209
--- a/docker-swarm-review/nacos-cluser/env_review
+++ b/docker-swarm-review/nacos-cluser/env_review
@@ -0,0 +1,17 @@
 NAMESPACE=review
 NACOS_VERSION=v2.3.0
 NODE_PORT_11=21848
 NODE_PORT_12=22848
 NODE_PORT_13=22849
 NODE_PORT_21=23848
 NODE_PORT_22=24848
 NODE_PORT_23=24849
 NODE_PORT_31=25848
 NODE_PORT_32=26848
 NODE_PORT_33=26849
 MYSQL_SERVICE_HOST=review-tool-mysql-master
 MYSQL_SERVICE_USER=zd_tool
 MYSQL_SERVICE_PASSWORD=gkxl2024#@
 NACOS_AUTH_IDENTITY_KEY=nacos
 NACOS_AUTH_IDENTITY_VALUE=gkxl2024#@
 NACOS_AUTH_TOKEN=OTg1NjRzZnJ0Z2RmZzIwMjQ1NTU1NTExZWZnZGVmZGVz
--- a/docker-swarm-review/nacos-cluser/mysql-schema.sql
+++ b/docker-swarm-review/nacos-cluser/mysql-schema.sql
@@ -0,0 +1,213 @@
 /*
 * Copyright 1999-2018 Alibaba Group Holding Ltd.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
 /******************************************/
 /*   表名称 = config_info                  */
 /******************************************/
 CREATE TABLE `config_info` (
  `id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT 'id',
  `data_id` varchar(255) NOT NULL COMMENT 'data_id',
  `group_id` varchar(128) DEFAULT NULL COMMENT 'group_id',
  `content` longtext NOT NULL COMMENT 'content',
  `md5` varchar(32) DEFAULT NULL COMMENT 'md5',
  `gmt_create` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
  `gmt_modified` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '修改时间',
  `src_user` text COMMENT 'source user',
  `src_ip` varchar(50) DEFAULT NULL COMMENT 'source ip',
  `app_name` varchar(128) DEFAULT NULL COMMENT 'app_name',
  `tenant_id` varchar(128) DEFAULT '' COMMENT '租户字段',
  `c_desc` varchar(256) DEFAULT NULL COMMENT 'configuration description',
  `c_use` varchar(64) DEFAULT NULL COMMENT 'configuration usage',
  `effect` varchar(64) DEFAULT NULL COMMENT '配置生效的描述',
  `type` varchar(64) DEFAULT NULL COMMENT '配置的类型',
  `c_schema` text COMMENT '配置的模式',
  `encrypted_data_key` text NOT NULL COMMENT '密钥',
  PRIMARY KEY (`id`),
  UNIQUE KEY `uk_configinfo_datagrouptenant` (`data_id`,`group_id`,`tenant_id`)
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='config_info';
 /******************************************/
 /*   表名称 = config_info_aggr             */
 /******************************************/
 CREATE TABLE `config_info_aggr` (
  `id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT 'id',
  `data_id` varchar(255) NOT NULL COMMENT 'data_id',
  `group_id` varchar(128) NOT NULL COMMENT 'group_id',
  `datum_id` varchar(255) NOT NULL COMMENT 'datum_id',
  `content` longtext NOT NULL COMMENT '内容',
  `gmt_modified` datetime NOT NULL COMMENT '修改时间',
  `app_name` varchar(128) DEFAULT NULL COMMENT 'app_name',
  `tenant_id` varchar(128) DEFAULT '' COMMENT '租户字段',
  PRIMARY KEY (`id`),
  UNIQUE KEY `uk_configinfoaggr_datagrouptenantdatum` (`data_id`,`group_id`,`tenant_id`,`datum_id`)
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='增加租户字段';
 /******************************************/
 /*   表名称 = config_info_beta             */
 /******************************************/
 CREATE TABLE `config_info_beta` (
  `id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT 'id',
  `data_id` varchar(255) NOT NULL COMMENT 'data_id',
  `group_id` varchar(128) NOT NULL COMMENT 'group_id',
  `app_name` varchar(128) DEFAULT NULL COMMENT 'app_name',
  `content` longtext NOT NULL COMMENT 'content',
  `beta_ips` varchar(1024) DEFAULT NULL COMMENT 'betaIps',
  `md5` varchar(32) DEFAULT NULL COMMENT 'md5',
  `gmt_create` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
  `gmt_modified` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '修改时间',
  `src_user` text COMMENT 'source user',
  `src_ip` varchar(50) DEFAULT NULL COMMENT 'source ip',
  `tenant_id` varchar(128) DEFAULT '' COMMENT '租户字段',
  `encrypted_data_key` text NOT NULL COMMENT '密钥',
  PRIMARY KEY (`id`),
  UNIQUE KEY `uk_configinfobeta_datagrouptenant` (`data_id`,`group_id`,`tenant_id`)
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='config_info_beta';
 /******************************************/
 /*   表名称 = config_info_tag              */
 /******************************************/
 CREATE TABLE `config_info_tag` (
  `id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT 'id',
  `data_id` varchar(255) NOT NULL COMMENT 'data_id',
  `group_id` varchar(128) NOT NULL COMMENT 'group_id',
  `tenant_id` varchar(128) DEFAULT '' COMMENT 'tenant_id',
  `tag_id` varchar(128) NOT NULL COMMENT 'tag_id',
  `app_name` varchar(128) DEFAULT NULL COMMENT 'app_name',
  `content` longtext NOT NULL COMMENT 'content',
  `md5` varchar(32) DEFAULT NULL COMMENT 'md5',
  `gmt_create` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
  `gmt_modified` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '修改时间',
  `src_user` text COMMENT 'source user',
  `src_ip` varchar(50) DEFAULT NULL COMMENT 'source ip',
  PRIMARY KEY (`id`),
  UNIQUE KEY `uk_configinfotag_datagrouptenanttag` (`data_id`,`group_id`,`tenant_id`,`tag_id`)
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='config_info_tag';
 /******************************************/
 /*   表名称 = config_tags_relation         */
 /******************************************/
 CREATE TABLE `config_tags_relation` (
  `id` bigint(20) NOT NULL COMMENT 'id',
  `tag_name` varchar(128) NOT NULL COMMENT 'tag_name',
  `tag_type` varchar(64) DEFAULT NULL COMMENT 'tag_type',
  `data_id` varchar(255) NOT NULL COMMENT 'data_id',
  `group_id` varchar(128) NOT NULL COMMENT 'group_id',
  `tenant_id` varchar(128) DEFAULT '' COMMENT 'tenant_id',
  `nid` bigint(20) NOT NULL AUTO_INCREMENT COMMENT 'nid, 自增长标识',
  PRIMARY KEY (`nid`),
  UNIQUE KEY `uk_configtagrelation_configidtag` (`id`,`tag_name`,`tag_type`),
  KEY `idx_tenant_id` (`tenant_id`)
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='config_tag_relation';
 /******************************************/
 /*   表名称 = group_capacity               */
 /******************************************/
 CREATE TABLE `group_capacity` (
  `id` bigint(20) unsigned NOT NULL AUTO_INCREMENT COMMENT '主键ID',
  `group_id` varchar(128) NOT NULL DEFAULT '' COMMENT 'Group ID，空字符表示整个集群',
  `quota` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '配额，0表示使用默认值',
  `usage` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '使用量',
  `max_size` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '单个配置大小上限，单位为字节，0表示使用默认值',
  `max_aggr_count` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '聚合子配置最大个数，，0表示使用默认值',
  `max_aggr_size` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '单个聚合数据的子配置大小上限，单位为字节，0表示使用默认值',
  `max_history_count` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '最大变更历史数量',
  `gmt_create` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
  `gmt_modified` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '修改时间',
  PRIMARY KEY (`id`),
  UNIQUE KEY `uk_group_id` (`group_id`)
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='集群、各Group容量信息表';
 /******************************************/
 /*   表名称 = his_config_info              */
 /******************************************/
 CREATE TABLE `his_config_info` (
  `id` bigint(20) unsigned NOT NULL COMMENT 'id',
  `nid` bigint(20) unsigned NOT NULL AUTO_INCREMENT COMMENT 'nid, 自增标识',
  `data_id` varchar(255) NOT NULL COMMENT 'data_id',
  `group_id` varchar(128) NOT NULL COMMENT 'group_id',
  `app_name` varchar(128) DEFAULT NULL COMMENT 'app_name',
  `content` longtext NOT NULL COMMENT 'content',
  `md5` varchar(32) DEFAULT NULL COMMENT 'md5',
  `gmt_create` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
  `gmt_modified` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '修改时间',
  `src_user` text COMMENT 'source user',
  `src_ip` varchar(50) DEFAULT NULL COMMENT 'source ip',
  `op_type` char(10) DEFAULT NULL COMMENT 'operation type',
  `tenant_id` varchar(128) DEFAULT '' COMMENT '租户字段',
  `encrypted_data_key` text NOT NULL COMMENT '密钥',
  PRIMARY KEY (`nid`),
  KEY `idx_gmt_create` (`gmt_create`),
  KEY `idx_gmt_modified` (`gmt_modified`),
  KEY `idx_did` (`data_id`)
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='多租户改造';
 /******************************************/
 /*   表名称 = tenant_capacity              */
 /******************************************/
 CREATE TABLE `tenant_capacity` (
  `id` bigint(20) unsigned NOT NULL AUTO_INCREMENT COMMENT '主键ID',
  `tenant_id` varchar(128) NOT NULL DEFAULT '' COMMENT 'Tenant ID',
  `quota` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '配额，0表示使用默认值',
  `usage` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '使用量',
  `max_size` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '单个配置大小上限，单位为字节，0表示使用默认值',
  `max_aggr_count` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '聚合子配置最大个数',
  `max_aggr_size` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '单个聚合数据的子配置大小上限，单位为字节，0表示使用默认值',
  `max_history_count` int(10) unsigned NOT NULL DEFAULT '0' COMMENT '最大变更历史数量',
  `gmt_create` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '创建时间',
  `gmt_modified` datetime NOT NULL DEFAULT CURRENT_TIMESTAMP COMMENT '修改时间',
  PRIMARY KEY (`id`),
  UNIQUE KEY `uk_tenant_id` (`tenant_id`)
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='租户容量信息表';
 CREATE TABLE `tenant_info` (
  `id` bigint(20) NOT NULL AUTO_INCREMENT COMMENT 'id',
  `kp` varchar(128) NOT NULL COMMENT 'kp',
  `tenant_id` varchar(128) default '' COMMENT 'tenant_id',
  `tenant_name` varchar(128) default '' COMMENT 'tenant_name',
  `tenant_desc` varchar(256) DEFAULT NULL COMMENT 'tenant_desc',
  `create_source` varchar(32) DEFAULT NULL COMMENT 'create_source',
  `gmt_create` bigint(20) NOT NULL COMMENT '创建时间',
  `gmt_modified` bigint(20) NOT NULL COMMENT '修改时间',
  PRIMARY KEY (`id`),
  UNIQUE KEY `uk_tenant_info_kptenantid` (`kp`,`tenant_id`),
  KEY `idx_tenant_id` (`tenant_id`)
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin COMMENT='tenant_info';
 CREATE TABLE `users` (
 	`username` varchar(50) NOT NULL PRIMARY KEY COMMENT 'username',
 	`password` varchar(500) NOT NULL COMMENT 'password',
 	`enabled` boolean NOT NULL COMMENT 'enabled'
 );
 CREATE TABLE `roles` (
 	`username` varchar(50) NOT NULL COMMENT 'username',
 	`role` varchar(50) NOT NULL COMMENT 'role',
 	UNIQUE INDEX `idx_user_role` (`username` ASC, `role` ASC) USING BTREE
 );
 CREATE TABLE `permissions` (
    `role` varchar(50) NOT NULL COMMENT 'role',
    `resource` varchar(255) NOT NULL COMMENT 'resource',
    `action` varchar(8) NOT NULL COMMENT 'action',
    UNIQUE INDEX `uk_role_permission` (`role`,`resource`,`action`) USING BTREE
 );
 INSERT INTO users (username, password, enabled) VALUES ('nacos', '$2a$10$EuWPZHzz32dJN7jexM34MOeYirDdFAZm2kuWj7VEOJhhZkDrxfvUu', TRUE);
 INSERT INTO roles (username, role) VALUES ('nacos', 'ROLE_ADMIN');
--- a/docker-swarm-review/nacos-cluser/standalone-derby.yml
+++ b/docker-swarm-review/nacos-cluser/standalone-derby.yml
@@ -0,0 +1,38 @@
 version: '3.8'
 networks:
  default:
    name: ${NAMESPACE}
    external: true
 services:
  server:
    hostname: ${NAMESPACE}_nacos_server
    image: nacos/nacos-server:${NACOS_VERSION}
    environment:
      - PREFER_HOST_MODE=hostname
      - NACOS_SERVER_IP=${NACOS_SERVER_IP}
      - MODE=standalone
      - NACOS_AUTH_ENABLE=true
      - NACOS_AUTH_IDENTITY_KEY=bndmsdsad
      - NACOS_AUTH_IDENTITY_VALUE=wepqweq#dasld
      - NACOS_AUTH_TOKEN=SecretKey012345678901234567890123456587012345678901234567890123456789
    ports:
      - target: 8848
        published: ${NODE_PORT}
        protocol: tcp
        mode: host  # 解析：默认是ingress就是通过swarm的负载均衡模式，无论通过集群节点的映射端口都能访问到业务容器，此种方式类似于k8s的NodePort的svc服务暴露方式，而host则属于，业务容器运行在哪个节点，则就通过节点地址+映射端口访问对应的业务容器。
      - target: 9848
        published: ${NODE_PORT_2}
        protocol: tcp
        mode: host 
    volumes:
      - data_server:/home/nacos/
    deploy:
      update_config:
        order: stop-first
      placement:
        constraints:
          - node.labels.${NAMESPACE}_nacos_server==1
 volumes:
  data_server:
    driver: local
--- a/docker-swarm-review/nacos/README
+++ b/docker-swarm-review/nacos/README
@@ -0,0 +1,5 @@
 # crm1环境下  部署单机nacos
 env $(cat ./env_crm1 | xargs) envsubst < ./standalone-derby.yml | docker stack deploy --compose-file - crm1_nacos
--- a/docker-swarm-review/nacos/cluser.yml
+++ b/docker-swarm-review/nacos/cluser.yml
@@ -0,0 +1,155 @@
 version: '3.8'
 services:
  nacos1:
    container_name: nacos1
    image: nacos/nacos-server:latest
    hostname: nacos1
    restart: always
    ports:
      - target: 8848
        published: 8848
        protocol: tcp
        mode: host  #采用host模式（默认为ingress，配置较灵活，根据自己的需求也可调整为ingress，本案例防止nacos 采用 swarm集群调度，所以改为host模式，两台服务器之间通过内网及nacos端口访问，通过nginx配置对外服务）
    volumes:
      - cluster1_logs:/home/nacos/logs  #配置docker存储日志的卷
    environment:
      MODE: cluster
      PREFER_HOST_MODE: hostname
      NACOS_SERVERS: 192.168.3.75:8848 192.168.3.94:8848 192.168.3.142:8848
      NACOS_SERVER_IP: 192.168.3.75
      NACOS_SERVER_PORT: 8848
      NACOS_AUTH_ENABLE: 'true'     #1.2.0版本默认关闭登陆界面
      MYSQL_SERVICE_HOST: mysql
      MYSQL_SERVICE_DB_NAME: nacos_devtest
      MYSQL_SERVICE_PORT: 3306
      MYSQL_SERVICE_USER: nacos
      MYSQL_SERVICE_PASSWORD: 123456
    deploy:
      replicas: 1       #部署时，指定部署一个副本
      placement:
        constraints:
          - node.labels.env==docker-server-1
      restart_policy:
        condition: on-failure
    depends_on:
    - mysql
    networks:
       - srm
  nacos2:
    container_name: nacos2
    image: nacos/nacos-server:latest
    restart: always
    hostname: nacos2
    ports:
      - target: 8848
        published: 8848
        protocol: tcp
        mode: host
    volumes:
        - cluster2_logs:/home/nacos/logs
    environment:
      MODE: cluster
      PREFER_HOST_MODE: hostname
      NACOS_SERVERS: 192.168.3.75:8848 192.168.3.94:8848 192.168.3.142:8848
      NACOS_SERVER_IP: 192.168.3.94
      NACOS_SERVER_PORT: 8848
      NACOS_AUTH_ENABLE: 'true'
      MYSQL_SERVICE_HOST: mysql
      MYSQL_SERVICE_DB_NAME: nacos_devtest
      MYSQL_SERVICE_PORT: 3306
      MYSQL_SERVICE_USER: nacos
      MYSQL_SERVICE_PASSWORD: 123456
    deploy:
      replicas: 1
      placement:
        constraints:
          - node.labels.env==docker-server-2
      restart_policy:
        condition: on-failure
    depends_on:
    - mysql
    networks:
       - srm
  nacos3:
    container_name: nacos3
    image: nacos/nacos-server:latest
    restart: always
    hostname: nacos3
    ports:
      - target: 8848
        published: 8848
        protocol: tcp
        mode: host
    volumes:
        - cluster3_logs:/home/nacos/logs
    environment:
      MODE: cluster
      PREFER_HOST_MODE: hostname
      NACOS_SERVERS: 192.168.3.75:8848 192.168.3.94:8848 192.168.3.142:8848 
      NACOS_SERVER_IP: 192.168.3.142
      NACOS_SERVER_PORT: 8848
      NACOS_AUTH_ENABLE: 'true'
      MYSQL_SERVICE_HOST: mysql
      MYSQL_SERVICE_DB_NAME: nacos_devtest
      MYSQL_SERVICE_PORT: 3306
      MYSQL_SERVICE_USER: nacos
      MYSQL_SERVICE_PASSWORD: 123456
    deploy:
      replicas: 1
      placement:
        constraints:
          - node.labels.env==docker-server-3
      restart_policy:
        condition: on-failure
    depends_on:
    - mysql
    networks:
       - srm
  mysql:
    image: mysql:5.7.33
    restart: always
    container_name: mysql
    hostname: mysql
    ports:
      - 3306:3306
    volumes:
      - /data/software/nacos/mysql/data:/var/lib/mysql
      - /etc/localtime:/etc/localtime:ro
      - /etc/my.cnf:/etc/mysql/mysql.conf.d/my.cnf
    environment:
      TZ: Asia/Shanghai
      MYSQL_ROOT_PASSWORD: sonar
      MYSQL_DATABASE: nacos_devtest
    deploy:
      replicas: 1
      placement:
        constraints:
          - node.labels.env==docker-server-1
      restart_policy:
        condition: on-failure
    networks:
       - srm
 volumes:
  cluster1_logs:
  cluster2_logs:
  cluster3_logs:
 networks:
  srm:
    external: true
 #https://blog.51cto.com/u_12898848/4054447
--- a/docker-swarm-review/nacos/env_crm1
+++ b/docker-swarm-review/nacos/env_crm1
@@ -0,0 +1,5 @@
 NAMESPACE=crm1
 NACOS_VERSION=v2.2.2
 NODE_PORT=8848
 NODE_PORT_2=9848
 NACOS_SERVER_IP=192.168.1.209
--- a/docker-swarm-review/nacos/standalone-derby.yml
+++ b/docker-swarm-review/nacos/standalone-derby.yml
@@ -0,0 +1,38 @@
 version: '3.8'
 networks:
  default:
    name: ${NAMESPACE}
    external: true
 services:
  server:
    hostname: ${NAMESPACE}_nacos_server
    image: nacos/nacos-server:${NACOS_VERSION}
    environment:
      - PREFER_HOST_MODE=hostname
      - NACOS_SERVER_IP=${NACOS_SERVER_IP}
      - MODE=standalone
      - NACOS_AUTH_ENABLE=true
      - NACOS_AUTH_IDENTITY_KEY=bndmsdsad
      - NACOS_AUTH_IDENTITY_VALUE=wepqweq#dasld
      - NACOS_AUTH_TOKEN=SecretKey012345678901234567890123456587012345678901234567890123456789
    ports:
      - target: 8848
        published: ${NODE_PORT}
        protocol: tcp
        mode: host  # 解析：默认是ingress就是通过swarm的负载均衡模式，无论通过集群节点的映射端口都能访问到业务容器，此种方式类似于k8s的NodePort的svc服务暴露方式，而host则属于，业务容器运行在哪个节点，则就通过节点地址+映射端口访问对应的业务容器。
      - target: 9848
        published: ${NODE_PORT_2}
        protocol: tcp
        mode: host 
    volumes:
      - data_server:/home/nacos/
    deploy:
      update_config:
        order: stop-first
      placement:
        constraints:
          - node.labels.${NAMESPACE}_nacos_server==1
 volumes:
  data_server:
    driver: local
--- a/docker-swarm-review/nginx-proxy-simple/crm1.conf
+++ b/docker-swarm-review/nginx-proxy-simple/crm1.conf
@@ -0,0 +1,68 @@
 server {
  listen 8080;
  server_name api1.sino-assist.com api2.sino-assist.com;
  location / {
  	proxy_pass  http://ss208_sa-gateway_svc:8080/;
    proxy_set_header   Host $host;
    proxy_set_header   X-Real-IP $remote_addr;
    proxy_set_header   X-Forwarded-Host $server_name;
    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
  }
  location ~ .*actuator.* {
        deny all;
  }
 }
 server {
  listen 8080;
  server_name crm1.sino-assist.com crm2.sino-assist.com;
  location / {
  	proxy_pass  http://crm1_ss_sa-cc_svc:8080/;
    proxy_set_header   Host $host;
    proxy_set_header   X-Real-IP $remote_addr;
    proxy_set_header   X-Forwarded-Host $server_name;
    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
  }
  location /nacos/ {
  	proxy_pass  http://crm1_nacos_server:8848/nacos/;
    proxy_set_header   Host $host;
    proxy_set_header   X-Real-IP $remote_addr;
    proxy_set_header   X-Forwarded-Host $server_name;
    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
  }
  location /xxl-job-admin {
  	proxy_pass  http://crm1_xxl_job_server:8080/xxl-job-admin;
    proxy_set_header   Host $host;
    proxy_set_header   X-Real-IP $remote_addr;
    proxy_set_header   X-Forwarded-Host $server_name;
    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
  }
  location /boot-admin/ {
  	proxy_pass  http://ss209_boot-admin_svc:8080/boot-admin/;
    proxy_set_header   Host $host;
    proxy_set_header   X-Real-IP $remote_addr;
    proxy_set_header   X-Forwarded-Host $server_name;
    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
  }
  location /mq/ {
  	proxy_pass  http://crm1_rabbitmq_stats:15672/;
    proxy_set_header   Host $host;
    proxy_set_header   X-Real-IP $remote_addr;
    proxy_set_header   X-Forwarded-Host $server_name;
    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
  }
 }
--- a/docker-swarm-review/nginx-proxy-simple/deploy.sh
+++ b/docker-swarm-review/nginx-proxy-simple/deploy.sh
@@ -0,0 +1,53 @@
 #!/bin/bash
 # 在 192.168.3.132 上执行
 # 1. 创建配置目录
 mkdir -p /data/nginx-proxy
 # 2. 写入 nginx 配置
 cat > /data/nginx-proxy/nginx.conf << 'EOF'
 worker_processes auto;
 events {
    worker_connections 1024;
 }
 http {
    include       mime.types;
    default_type  application/octet-stream;
    sendfile      on;
    keepalive_timeout 65;
    client_max_body_size 100M;
    server {
        listen 8080;
        # 前端
        location / {
            proxy_pass http://192.168.3.132:8081/;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
        # 后端网关
        location ~ ^/(common|order|supplier|contract|base|export-app|auth|user|system|api|ws|return|returnVehicle|returnOrder|supplierManage|agg-api|zgs|gps|data-search)/ {
            proxy_pass http://192.168.3.132:28092;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
        }
    }
 }
 EOF
 # 3. 启动 nginx 容器
 docker run -d \
  --name nginx-proxy \
  --restart always \
  -p 8080:8080 \
  -v /data/nginx-proxy/nginx.conf:/etc/nginx/nginx.conf:ro \
  nginx:alpine
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
yumengcheng	5074e9cc42	docker-swarm-review	2026-05-13 15:27:39 +08:00
yumengcheng	da02c6a994	Revert "docker-swarm-review" This reverts commit 49d2697ef4c5047934a642b0df656c5112d37509.	2026-05-13 15:27:26 +08:00
yumengcheng	95a34b2f89	docker-swarm-review	2026-05-13 15:27:25 +08:00
wangyuhang	33daa2864b	新的es进行	2026-03-02 12:38:07 +08:00
marsal	984fa247d7	new	2025-08-21 18:57:57 +08:00
marsal	bdd2b461dc	mysql backup	2025-05-08 21:24:56 +08:00
marsal	15dd2396d6	mysql backup	2025-05-08 21:24:40 +08:00
marsal	b2eb2928d8	swarm	2024-10-21 13:29:47 +08:00
marsal	74efe62045	nacos	2024-06-05 13:40:07 +08:00
marsal	5aa3536ae7	nacos portainer	2024-06-05 13:38:58 +08:00
marsal	9f2bd6db5f	json	2024-06-05 13:24:35 +08:00
		`@@ -0,0 +1,2 @@`
							`1. redis的数据需要全部切换为无状态`
							`2.`
		`@@ -0,0 +1,5 @@`

							`# crm1环境下部署单机nacos`

							`env $(cat ./env_crm1 \| xargs) envsubst < ./standalone-derby.yml \| docker stack deploy --compose-file - crm1_nacos`