feat: 관리자 대시보드 API 및 상태 체크 추가

.github/workflows/deploy.yml

@@ -57,10 +57,11 @@ jobs:
       - name: Write .env file
         uses: appleboy/ssh-action@v0.1.10
         env:
-          ENV_LIST: RCP_JWT_SECRET,OS_AUTH_URL,OS_USERNAME,OS_PASSWORD,OS_PROJECT_NAME,OS_USER_DOMAIN_NAME,OS_PROJECT_ID,CF_ACCESS_CLIENT_ID,CF_ACCESS_CLIENT_SECRET,GG_OAUTH_CLIENT,GG_OAUTH_SECRET,GG_REDIRECT_URL,DB_DRIVER,DB_DSN,PORT,RCP_NS_PROXY_SOCK,RCP_WEB_CONSOLE_BASE_URL,RCP_WEB_CONSOLE_ALLOWED_ORIGINS,RCP_VM_KNOWN_HOSTS_PATH,RCP_SSH_GW_KNOWN_HOSTS_PATH,FRONTEND_URL,RCP_FRONTEND_BASE_URL,RCP_ALLOWED_FRONTEND_ORIGIN_PATTERN,RCP_AUTH_COOKIE_SAMESITE,RCP_AUTH_COOKIE_SECURE,RCP_ALLOWED_ORIGINS,RCP_ALLOWED_ORIGIN_PATTERN,RCP_DEFAULT_NETWORK_ID,RCP_SSH_GW_NOTIFY_SOCK,RCP_SSH_GW_NOTIFY_SECRET
+          ENV_LIST: RCP_JWT_SECRET,RCP_ADMIN_EMAILS,OS_AUTH_URL,OS_USERNAME,OS_PASSWORD,OS_PROJECT_NAME,OS_USER_DOMAIN_NAME,OS_PROJECT_ID,CF_ACCESS_CLIENT_ID,CF_ACCESS_CLIENT_SECRET,GG_OAUTH_CLIENT,GG_OAUTH_SECRET,GG_REDIRECT_URL,DB_DRIVER,DB_DSN,PORT,RCP_NS_PROXY_SOCK,RCP_WEB_CONSOLE_BASE_URL,RCP_WEB_CONSOLE_ALLOWED_ORIGINS,RCP_VM_KNOWN_HOSTS_PATH,RCP_SSH_GW_KNOWN_HOSTS_PATH,FRONTEND_URL,RCP_FRONTEND_BASE_URL,RCP_ALLOWED_FRONTEND_ORIGIN_PATTERN,RCP_AUTH_COOKIE_SAMESITE,RCP_AUTH_COOKIE_SECURE,RCP_ALLOWED_ORIGINS,RCP_ALLOWED_ORIGIN_PATTERN,RCP_DEFAULT_NETWORK_ID,RCP_SSH_GW_NOTIFY_SOCK,RCP_SSH_GW_NOTIFY_SECRET
           FRONTEND_URL: ${{ secrets.FRONTEND_URL }}
           RCP_FRONTEND_BASE_URL: ${{ secrets.RCP_FRONTEND_BASE_URL }}
           RCP_JWT_SECRET: ${{ secrets.RCP_JWT_SECRET }}
+          RCP_ADMIN_EMAILS: ${{ secrets.RCP_ADMIN_EMAILS }}
           OS_AUTH_URL: ${{ secrets.OS_AUTH_URL }}
           OS_USERNAME: ${{ secrets.OS_USERNAME }}
           OS_PASSWORD: ${{ secrets.OS_PASSWORD }}

cmd/api/main.go

@@ -58,7 +58,15 @@ func main() {
 	}
 
 	notifySock := strings.TrimSpace(os.Getenv("RCP_SSH_GW_NOTIFY_SOCK"))
+	if notifySock == "" {
+		notifySock = "/run/rcp/ssh-gateway-notify.sock"
+	}
 	notifySecret := []byte(strings.TrimSpace(os.Getenv("RCP_SSH_GW_NOTIFY_SECRET")))
+	nsProxySock := strings.TrimSpace(os.Getenv("RCP_NS_PROXY_SOCK"))
+	if nsProxySock == "" {
+		nsProxySock = "/run/rcp/ns-proxy.sock"
+	}
+	httpProxyAddress := resolveAppGatewayAddress(os.Getenv)
 
 	frontendBaseURL := resolveFrontendBaseURL(os.Getenv)
 	if frontendBaseURL == "" {
@@ -74,6 +82,8 @@ func main() {
 		JWTSecret:        jwtSecret,
 		SSHGatewaySock:   notifySock,
 		SSHGatewaySecret: notifySecret,
+		NSProxySock:      nsProxySock,
+		HTTPProxyAddress: httpProxyAddress,
 		FrontendBaseURL:  frontendBaseURL,
 	})
 	if err != nil {
@@ -101,6 +111,20 @@ func resolveFrontendBaseURL(getenv func(string) string) string {
 	return ""
 }
 
+func resolveAppGatewayAddress(getenv func(string) string) string {
+	port := strings.TrimSpace(getenv("APP_GATEWAY_PORT"))
+	if port == "" {
+		port = "18080"
+	}
+	if strings.HasPrefix(port, ":") {
+		return "127.0.0.1" + port
+	}
+	if strings.Contains(port, ":") {
+		return port
+	}
+	return "127.0.0.1:" + port
+}
+
 func resolveDBConfig(getenv func(string) string) (string, string) {
 	driver := strings.TrimSpace(getenv("DB_DRIVER"))
 	if driver == "" {

internal/domain/admin/handler.go

@@ -0,0 +1,130 @@
+package admin
+
+import (
+	"net/http"
+
+	"github.com/KHU-RETURN/rcp-server/ent"
+	"github.com/gin-gonic/gin"
+	"github.com/google/uuid"
+
+	"github.com/KHU-RETURN/rcp-server/internal/api"
+)
+
+type Handler struct {
+	Svc *Service
+}
+
+func NewHandler(svc *Service) *Handler {
+	return &Handler{Svc: svc}
+}
+
+func (h *Handler) InitRoutes(rg *gin.RouterGroup) {
+	adminGroup := rg.Group("/admin")
+	{
+		adminGroup.GET("/summary", h.Summary)
+		adminGroup.GET("/users", h.Users)
+		adminGroup.GET("/users/:id/resources", h.UserResources)
+		adminGroup.GET("/instances", h.Instances)
+		adminGroup.GET("/instances/:id", h.Instance)
+		adminGroup.GET("/containers", h.Containers)
+		adminGroup.GET("/containers/:id", h.Container)
+		adminGroup.GET("/system", h.System)
+	}
+}
+
+func (h *Handler) Summary(c *gin.Context) {
+	res, err := h.Svc.Summary(c.Request.Context())
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, api.ErrorResponse{Error: err.Error()})
+		return
+	}
+	c.JSON(http.StatusOK, res)
+}
+
+func (h *Handler) Users(c *gin.Context) {
+	res, err := h.Svc.Users(c.Request.Context(), c.Query("page"), c.Query("limit"))
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, api.ErrorResponse{Error: err.Error()})
+		return
+	}
+	c.JSON(http.StatusOK, res)
+}
+
+func (h *Handler) Instances(c *gin.Context) {
+	res, err := h.Svc.Instances(c.Request.Context(), c.Query("page"), c.Query("limit"))
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, api.ErrorResponse{Error: err.Error()})
+		return
+	}
+	c.JSON(http.StatusOK, res)
+}
+
+func (h *Handler) Instance(c *gin.Context) {
+	id := c.Param("id")
+	if id == "" {
+		c.JSON(http.StatusBadRequest, api.ErrorResponse{Error: "invalid instance id"})
+		return
+	}
+
+	res, err := h.Svc.Instance(c.Request.Context(), id)
+	if err != nil {
+		if ent.IsNotFound(err) {
+			c.JSON(http.StatusNotFound, api.ErrorResponse{Error: "instance not found"})
+			return
+		}
+		c.JSON(http.StatusInternalServerError, api.ErrorResponse{Error: err.Error()})
+		return
+	}
+	c.JSON(http.StatusOK, res)
+}
+
+func (h *Handler) Containers(c *gin.Context) {
+	res, err := h.Svc.Containers(c.Request.Context(), c.Query("page"), c.Query("limit"))
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, api.ErrorResponse{Error: err.Error()})
+		return
+	}
+	c.JSON(http.StatusOK, res)
+}
+
+func (h *Handler) Container(c *gin.Context) {
+	id := c.Param("id")
+	if _, err := uuid.Parse(id); err != nil {
+		c.JSON(http.StatusBadRequest, api.ErrorResponse{Error: "invalid container id"})
+		return
+	}
+
+	res, err := h.Svc.Container(c.Request.Context(), id)
+	if err != nil {
+		if ent.IsNotFound(err) {
+			c.JSON(http.StatusNotFound, api.ErrorResponse{Error: "container not found"})
+			return
+		}
+		c.JSON(http.StatusInternalServerError, api.ErrorResponse{Error: err.Error()})
+		return
+	}
+	c.JSON(http.StatusOK, res)
+}
+
+func (h *Handler) UserResources(c *gin.Context) {
+	id := c.Param("id")
+	if _, err := uuid.Parse(id); err != nil {
+		c.JSON(http.StatusBadRequest, api.ErrorResponse{Error: "invalid user id"})
+		return
+	}
+
+	res, err := h.Svc.UserResources(c.Request.Context(), id)
+	if err != nil {
+		if ent.IsNotFound(err) {
+			c.JSON(http.StatusNotFound, api.ErrorResponse{Error: "user not found"})
+			return
+		}
+		c.JSON(http.StatusInternalServerError, api.ErrorResponse{Error: err.Error()})
+		return
+	}
+	c.JSON(http.StatusOK, res)
+}
+
+func (h *Handler) System(c *gin.Context) {
+	c.JSON(http.StatusOK, h.Svc.System(c.Request.Context()))
+}