初始提交：OCI 面板后端（含 GenAI 网关一期）

2026-07-09 15:31:04 +08:00
commit b9a3e97e84
168 changed files with 31794 additions and 0 deletions
@@ -0,0 +1,132 @@
+package oci
+
+import (
+	"context"
+	"fmt"
+
+	"github.com/oracle/oci-go-sdk/v65/core"
+)
+
+// instanceVnics 列出实例的全部 VNIC，并一并返回实例所在 compartment，
+// 供调用方复用为后续按实例定位查询的 compartmentId，避免重复 GetInstance。
+func (c *RealClient) instanceVnics(ctx context.Context, cred Credentials, region, instanceID string) ([]core.Vnic, string, error) {
+	cc, err := c.computeClient(cred, region)
+	if err != nil {
+		return nil, "", err
+	}
+	vn, err := c.vcnClient(cred, region)
+	if err != nil {
+		return nil, "", err
+	}
+	// VNIC 挂载记录在实例所在 compartment，先取实例定位，传租户根会漏查
+	instResp, err := cc.GetInstance(ctx, core.GetInstanceRequest{InstanceId: &instanceID})
+	if err != nil {
+		return nil, "", fmt.Errorf("get instance %s: %w", instanceID, err)
+	}
+	compartmentID := hostCompartment(cred, deref(instResp.CompartmentId))
+	resp, err := cc.ListVnicAttachments(ctx, core.ListVnicAttachmentsRequest{
+		CompartmentId: compartmentID,
+		InstanceId:    &instanceID,
+	})
+	if err != nil {
+		return nil, "", fmt.Errorf("list vnic attachments: %w", err)
+	}
+	return attachedVnics(ctx, vn, resp.Items), *compartmentID, nil
+}
+
+// attachedVnics 逐挂载记录查询 VNIC 详情，跳过查询失败的记录。
+func attachedVnics(ctx context.Context, vn core.VirtualNetworkClient, atts []core.VnicAttachment) []core.Vnic {
+	vnics := make([]core.Vnic, 0, len(atts))
+	for _, att := range atts {
+		if att.VnicId == nil {
+			continue
+		}
+		vnicResp, err := vn.GetVnic(ctx, core.GetVnicRequest{VnicId: att.VnicId})
+		if err != nil {
+			continue
+		}
+		vnics = append(vnics, vnicResp.Vnic)
+	}
+	return vnics
+}
+
+// lookupPublicIP 查询私有 IP 绑定的公网 IP，未绑定返回 nil。
+func lookupPublicIP(ctx context.Context, vn core.VirtualNetworkClient, privateIPID *string) *core.PublicIp {
+	resp, err := vn.GetPublicIpByPrivateIpId(ctx, core.GetPublicIpByPrivateIpIdRequest{
+		GetPublicIpByPrivateIpIdDetails: core.GetPublicIpByPrivateIpIdDetails{PrivateIpId: privateIPID},
+	})
+	if err != nil || resp.Id == nil {
+		return nil
+	}
+	return &resp.PublicIp
+}
+
+// ChangeInstancePublicIP 实现 Client：为实例主 VNIC 主私有 IP 更换临时公网 IP。
+// 删除旧的临时公网 IP 再分配新的；若旧地址是保留 IP（RESERVED），拒绝操作。
+func (c *RealClient) ChangeInstancePublicIP(ctx context.Context, cred Credentials, region, instanceID string) (string, error) {
+	vn, err := c.vcnClient(cred, region)
+	if err != nil {
+		return "", err
+	}
+	priv, err := c.primaryPrivateIP(ctx, cred, region, instanceID)
+	if err != nil {
+		return "", err
+	}
+	if existing := lookupPublicIP(ctx, vn, priv.Id); existing != nil {
+		if existing.Lifetime == core.PublicIpLifetimeReserved {
+			return "", fmt.Errorf("change public ip: private ip has a reserved public ip, release it manually")
+		}
+		if _, err := vn.DeletePublicIp(ctx, core.DeletePublicIpRequest{PublicIpId: existing.Id}); err != nil {
+			return "", fmt.Errorf("delete old public ip: %w", err)
+		}
+	}
+	// OCI 要求临时公网 IP 与其私有 IP 同 compartment，故不能用生效 compartment
+	resp, err := vn.CreatePublicIp(ctx, core.CreatePublicIpRequest{
+		CreatePublicIpDetails: core.CreatePublicIpDetails{
+			CompartmentId: hostCompartment(cred, deref(priv.CompartmentId)),
+			Lifetime:      core.CreatePublicIpDetailsLifetimeEphemeral,
+			PrivateIpId:   priv.Id,
+		},
+	})
+	if err != nil {
+		return "", fmt.Errorf("create public ip: %w", err)
+	}
+	return deref(resp.IpAddress), nil
+}
+
+// primaryVnic 返回实例的主 VNIC。
+func (c *RealClient) primaryVnic(ctx context.Context, cred Credentials, region, instanceID string) (core.Vnic, error) {
+	vnics, _, err := c.instanceVnics(ctx, cred, region, instanceID)
+	if err != nil {
+		return core.Vnic{}, err
+	}
+	for i := range vnics {
+		if vnics[i].IsPrimary != nil && *vnics[i].IsPrimary {
+			return vnics[i], nil
+		}
+	}
+	return core.Vnic{}, fmt.Errorf("instance %s has no primary vnic", instanceID)
+}
+
+// primaryPrivateIP 返回实例主 VNIC 上的主私有 IP 对象；
+// 保留完整对象是为了让调用方能拿到私有 IP 所在的 compartment。
+func (c *RealClient) primaryPrivateIP(ctx context.Context, cred Credentials, region, instanceID string) (core.PrivateIp, error) {
+	vn, err := c.vcnClient(cred, region)
+	if err != nil {
+		return core.PrivateIp{}, err
+	}
+	vnic, err := c.primaryVnic(ctx, cred, region, instanceID)
+	if err != nil {
+		return core.PrivateIp{}, err
+	}
+	privResp, err := vn.ListPrivateIps(ctx, core.ListPrivateIpsRequest{VnicId: vnic.Id})
+	if err != nil {
+		return core.PrivateIp{}, fmt.Errorf("list private ips: %w", err)
+	}
+	for _, priv := range privResp.Items {
+		if priv.IsPrimary != nil && *priv.IsPrimary {
+			return priv, nil
+		}
+	}
+	return core.PrivateIp{}, fmt.Errorf("change public ip: primary vnic has no primary private ip")
+}