382 lines
19 KiB
Java
382 lines
19 KiB
Java
package com.kaidi.oa.seed;
|
|
|
|
import com.kaidi.oa.domain.ItAsset;
|
|
import com.kaidi.oa.domain.ItAssetEvent;
|
|
import com.kaidi.oa.domain.ItInspection;
|
|
import com.kaidi.oa.domain.ItMonitorItem;
|
|
import com.kaidi.oa.domain.ItNetworkDevice;
|
|
import com.kaidi.oa.domain.ItSecPolicyConfig;
|
|
import com.kaidi.oa.repository.ItAssetEventRepository;
|
|
import com.kaidi.oa.repository.ItAssetRepository;
|
|
import com.kaidi.oa.repository.ItInspectionRepository;
|
|
import com.kaidi.oa.repository.ItMonitorItemRepository;
|
|
import com.kaidi.oa.repository.ItNetworkDeviceRepository;
|
|
import com.kaidi.oa.repository.ItSecPolicyConfigRepository;
|
|
import org.springframework.boot.ApplicationArguments;
|
|
import org.springframework.boot.ApplicationRunner;
|
|
import org.springframework.core.annotation.Order;
|
|
|
|
import java.math.BigDecimal;
|
|
import java.time.Instant;
|
|
import java.time.LocalDate;
|
|
import java.time.ZoneOffset;
|
|
|
|
/**
|
|
* 信息部演示数据Seeder：补全监控项/巡检读数/网络设备/安全策略零数据演示缺口。
|
|
* @Order(204) 在所有主数据Seeder后运行，幂等（count > 0 则跳过）。
|
|
*/
|
|
@Order(204)
|
|
@DemoSeed
|
|
public class ItDeptDemoSeeder implements ApplicationRunner {
|
|
|
|
private final ItMonitorItemRepository monitorRepo;
|
|
private final ItInspectionRepository inspectionRepo;
|
|
private final ItNetworkDeviceRepository networkRepo;
|
|
private final ItSecPolicyConfigRepository policyRepo;
|
|
private final ItAssetRepository assetRepo;
|
|
private final ItAssetEventRepository assetEventRepo;
|
|
|
|
public ItDeptDemoSeeder(ItMonitorItemRepository monitorRepo,
|
|
ItInspectionRepository inspectionRepo,
|
|
ItNetworkDeviceRepository networkRepo,
|
|
ItSecPolicyConfigRepository policyRepo,
|
|
ItAssetRepository assetRepo,
|
|
ItAssetEventRepository assetEventRepo) {
|
|
this.monitorRepo = monitorRepo;
|
|
this.inspectionRepo = inspectionRepo;
|
|
this.networkRepo = networkRepo;
|
|
this.policyRepo = policyRepo;
|
|
this.assetRepo = assetRepo;
|
|
this.assetEventRepo = assetEventRepo;
|
|
}
|
|
|
|
@Override
|
|
public void run(ApplicationArguments args) {
|
|
seedMonitorItems();
|
|
seedNetworkDevices();
|
|
seedSecPolicies();
|
|
seedAssetAmounts();
|
|
seedAssetEvents();
|
|
}
|
|
|
|
// -------- 监控项 + 巡检读数 --------
|
|
|
|
private void seedMonitorItems() {
|
|
if (monitorRepo.count() > 0) return;
|
|
|
|
// ERP应用服务器 CPU
|
|
ItMonitorItem m1 = monitor("ERP应用服务器", "CPU使用率", "%", "above", 75.0, 90.0, "张伟");
|
|
addInspection(m1, 45.2, "正常", false, "张伟", "-3");
|
|
addInspection(m1, 68.5, "正常", false, "张伟", "-2");
|
|
addInspection(m1, 82.1, "告警", true, "张伟", "-1");
|
|
addInspection(m1, 55.3, "正常", false, "张伟", "0");
|
|
|
|
// ERP应用服务器 内存
|
|
ItMonitorItem m2 = monitor("ERP应用服务器", "内存使用率", "%", "above", 80.0, 92.0, "张伟");
|
|
addInspection(m2, 71.0, "正常", false, "系统", "-2");
|
|
addInspection(m2, 88.5, "告警", true, "系统", "-1");
|
|
addInspection(m2, 93.2, "故障", true, "系统", "0");
|
|
|
|
// 数据库主库
|
|
ItMonitorItem m3 = monitor("数据库主库", "磁盘使用率", "%", "above", 70.0, 85.0, "李娜");
|
|
addInspection(m3, 52.3, "正常", false, "李娜", "-5");
|
|
addInspection(m3, 65.7, "正常", false, "李娜", "-2");
|
|
addInspection(m3, 73.4, "告警", true, "李娜", "0");
|
|
|
|
// 数据库连接数
|
|
ItMonitorItem m4 = monitor("数据库主库", "连接数", "个", "above", 150.0, 200.0, "李娜");
|
|
addInspection(m4, 87.0, "正常", false, "李娜", "-3");
|
|
addInspection(m4, 134.0, "正常", false, "李娜", "-1");
|
|
addInspection(m4, 112.0, "正常", false, "李娜", "0");
|
|
|
|
// OA服务响应时间
|
|
ItMonitorItem m5 = monitor("OA应用系统", "响应时间", "ms", "above", 500.0, 2000.0, "陈静");
|
|
addInspection(m5, 235.0, "正常", false, "系统", "-4");
|
|
addInspection(m5, 312.0, "正常", false, "系统", "-2");
|
|
addInspection(m5, 648.0, "告警", true, "系统", "0");
|
|
|
|
// 核心交换机 网络流量
|
|
ItMonitorItem m6 = monitor("核心交换机", "网络流量", "Mbps", "above", 800.0, 950.0, "张伟");
|
|
addInspection(m6, 452.0, "正常", false, "张伟", "-6");
|
|
addInspection(m6, 623.0, "正常", false, "张伟", "-3");
|
|
addInspection(m6, 712.0, "正常", false, "张伟", "0");
|
|
|
|
// 存储阵列 可用空间
|
|
ItMonitorItem m7 = monitor("存储阵列", "可用空间率", "%", "below", 20.0, 10.0, "李娜");
|
|
addInspection(m7, 45.0, "正常", false, "李娜", "-7");
|
|
addInspection(m7, 28.5, "正常", false, "李娜", "-3");
|
|
addInspection(m7, 18.2, "告警", true, "李娜", "0");
|
|
}
|
|
|
|
private ItMonitorItem monitor(String target, String metric, String unit,
|
|
String direction, Double warn, Double crit, String owner) {
|
|
ItMonitorItem m = new ItMonitorItem();
|
|
m.setTarget(target);
|
|
m.setMetric(metric);
|
|
m.setUnit(unit);
|
|
m.setDirection(direction);
|
|
m.setWarnThreshold(warn);
|
|
m.setCritThreshold(crit);
|
|
m.setOwner(owner);
|
|
m.setEnabled(Boolean.TRUE);
|
|
m.setLastStatus("未采集");
|
|
m.setCreatedAt(Instant.now());
|
|
return monitorRepo.save(m);
|
|
}
|
|
|
|
private void addInspection(ItMonitorItem m, double value, String result,
|
|
boolean alerted, String inspector, String daysAgo) {
|
|
int days = Integer.parseInt(daysAgo);
|
|
LocalDate date = LocalDate.now().plusDays(days);
|
|
ItInspection ins = new ItInspection();
|
|
ins.setMonitorItemId(m.getId());
|
|
ins.setTarget(m.getTarget());
|
|
ins.setMetric(m.getMetric());
|
|
ins.setValue(value);
|
|
ins.setResult(result);
|
|
ins.setAlerted(alerted);
|
|
ins.setInspector(inspector);
|
|
ins.setCheckDate(date.toString());
|
|
ins.setCheckedAt(date.atStartOfDay(ZoneOffset.UTC).toInstant());
|
|
ins.setCreatedAt(Instant.now());
|
|
ItInspection saved = inspectionRepo.save(ins);
|
|
// 回写监控项最近状态
|
|
m.setLastValue(value);
|
|
m.setLastStatus(result);
|
|
m.setLastCheckAt(saved.getCheckedAt());
|
|
monitorRepo.save(m);
|
|
}
|
|
|
|
// -------- 网络设备 --------
|
|
|
|
private void seedNetworkDevices() {
|
|
if (networkRepo.count() > 0) return;
|
|
|
|
netdev("深信服AF-2000防火墙", "防火墙", "深信服 AF-2000",
|
|
"192.168.1.1", "全网", "机房A", "V5.5.0.6", "张伟",
|
|
"2025-01-20", "2028-01-20", "VLAN10-管理区/VLAN20-业务区/VLAN30-DMZ区；安全策略48条", "正常", "2026-05-15");
|
|
netdev("华为S5720核心交换机", "交换机", "华为 S5720-52X",
|
|
"192.168.1.2", "VLAN10/20/30/40", "机房A", "V200R020C10", "张伟",
|
|
"2024-06-15", "2027-06-15", "24口PoE+4个SFP+上行口；VLAN间路由已配置", "正常", "2026-05-20");
|
|
netdev("华为S5700接入交换机-1F", "交换机", "华为 S5700-28X",
|
|
"192.168.1.3", "VLAN20/40", "1楼弱电箱", "V200R019C10", "李娜",
|
|
"2024-08-10", "2027-08-10", "负责1楼24个信息点接入", "正常", "2026-04-18");
|
|
netdev("深信服VPN网关", "VPN网关", "深信服 SSL-VPN 2000",
|
|
"192.168.1.4", "VPN-Pool/10.8.0.0/24", "机房B", "V5.2.3", "张伟",
|
|
"2024-12-01", "2027-12-01", "IKEv2 AES-256-GCM/SHA2-256；在线用户峰值50人", "正常", "2026-06-01");
|
|
netdev("深信服IPS-2000入侵防御", "IDS/IPS", "深信服 IPS-2000",
|
|
"192.168.1.5", "旁路检测", "机房A", "IPS-V4.1.2", "张伟",
|
|
"2024-03-15", "2027-03-15", "特征库版本2026.06.01；每日自动更新；高风险告警即时阻断", "正常", "2026-06-01");
|
|
netdev("华为AR路由器", "路由器", "华为 AR3260",
|
|
"10.0.0.1", "外网/内网边界", "机房B", "V200R009C10", "张伟",
|
|
"2024-05-01", "2027-05-01", "双ISP链路，主链路电信100M，备链路联通50M", "正常", "2026-05-28");
|
|
netdev("360天擎防病毒服务器", "防病毒服务器", "360天擎 v4.5",
|
|
"192.168.1.10", "VLAN20/40", "机房A", "V4.5.11.0", "李娜",
|
|
"2023-09-01", "2026-09-01", "病毒库2026-06-15；全网200终端已接入", "正常", "2026-06-15");
|
|
netdev("SANGFOR上网行为管理", "上网行为管理", "深信服 AC-3000",
|
|
"192.168.1.6", "出口前", "机房A", "V12.0.73", "张伟",
|
|
"2023-11-10", "2026-11-10", "违规内容拦截/带宽管理/行为审计；日均报表已启用", "告警", null);
|
|
}
|
|
|
|
private void netdev(String name, String deviceType, String model,
|
|
String ip, String vlan, String location, String firmware,
|
|
String admin, String purchase, String warranty, String note,
|
|
String runStatus, String lastBackup) {
|
|
ItNetworkDevice d = new ItNetworkDevice();
|
|
d.setName(name);
|
|
d.setDeviceType(deviceType);
|
|
d.setModel(model);
|
|
d.setManagementIp(ip);
|
|
d.setVlanSegment(vlan);
|
|
d.setLocation(location);
|
|
d.setFirmwareVersion(firmware);
|
|
d.setAdmin(admin);
|
|
d.setPurchaseDate(purchase);
|
|
d.setWarrantyDate(warranty);
|
|
d.setNote(note);
|
|
d.setRunStatus(runStatus);
|
|
d.setConfigBackupStatus(lastBackup != null ? "已备份" : "未备份");
|
|
d.setLastConfigBackupDate(lastBackup);
|
|
d.setCreatedAt(Instant.now());
|
|
networkRepo.save(d);
|
|
}
|
|
|
|
// -------- 安全策略配置 --------
|
|
|
|
private void seedSecPolicies() {
|
|
if (policyRepo.count() > 0) return;
|
|
|
|
// VPN策略
|
|
policy(null, "深信服VPN网关", "VPN策略", "总部-远程访问VPN",
|
|
"VPN-001", "外网→内网", "任意", "192.168.0.0/16", "TCP/443,UDP/500-4500",
|
|
"允许", 1, "IKEv2/AES-256-GCM/SHA2-256；证书认证；MFA双因子；最大并发500用户");
|
|
policy(null, "深信服VPN网关", "VPN策略", "分公司点对点VPN",
|
|
"VPN-002", "分公司→总部", "10.2.0.0/24", "192.168.0.0/16", "ANY",
|
|
"允许", 2, "分公司岳阳（10.2.0.0/24）通过IPSEC VPN访问总部内网；预共享密钥AES-256");
|
|
|
|
// 防火墙规则
|
|
policy(null, "深信服AF-2000防火墙", "防火墙规则", "拒绝外网访问内网管理口",
|
|
"FW-001", "外网→内网", "ANY", "192.168.1.0/24", "TCP/22,TCP/23,TCP/3389",
|
|
"拒绝", 1, "安全基线：禁止外网直接SSH/Telnet/RDP到内网管理设备");
|
|
policy(null, "深信服AF-2000防火墙", "防火墙规则", "允许内网访问外网HTTP/HTTPS",
|
|
"FW-002", "内网→外网", "192.168.0.0/16", "ANY", "TCP/80,TCP/443",
|
|
"允许", 10, "员工上网；经上网行为管理过滤后允许");
|
|
policy(null, "深信服AF-2000防火墙", "防火墙规则", "DMZ区发布ERP对外服务",
|
|
"FW-003", "外网→DMZ", "ANY", "192.168.30.100", "TCP/443",
|
|
"允许", 5, "ERP系统移动端访问入口；仅开放HTTPS 443端口");
|
|
|
|
// IPS规则
|
|
policy(null, "深信服IPS-2000入侵防御", "IPS规则", "SQL注入攻击拦截",
|
|
"IPS-001", "双向", "ANY", "任意", "TCP/80,TCP/443,TCP/8080",
|
|
"阻断", 1, "特征库SQL注入检测；严格模式；每日告警统计");
|
|
policy(null, "深信服IPS-2000入侵防御", "IPS规则", "暴力破解攻击防护",
|
|
"IPS-002", "入站", "ANY", "任意", "TCP/22,TCP/3389,TCP/8090",
|
|
"阻断", 2, "5次/分钟触发阻断；IP封锁1小时；通知管理员");
|
|
policy(null, "深信服IPS-2000入侵防御", "IPS规则", "Web漏洞利用检测",
|
|
"IPS-003", "入站", "ANY", "任意", "TCP/80,TCP/443",
|
|
"告警", 3, "XSS/文件包含/目录遍历检测；告警模式记录日志");
|
|
|
|
// IDS特征
|
|
policy(null, "深信服IPS-2000入侵防御", "IDS特征", "异常流量基线检测",
|
|
"IDS-001", "双向", "内网", "内网", "ANY",
|
|
"告警", 1, "基于流量基线的异常检测：单IP流量超基线3倍触发告警");
|
|
|
|
// 上网行为
|
|
policy(null, "SANGFOR上网行为管理", "上网行为", "禁止访问非工作网站",
|
|
"AC-001", "内网→外网", "192.168.0.0/16", "ANY", "TCP/80,TCP/443",
|
|
"拒绝", 5, "工作时间(9:00-18:00)拦截娱乐/游戏/社交类网站；白名单放行业务系统");
|
|
policy(null, "SANGFOR上网行为管理", "上网行为", "带宽QoS策略",
|
|
"AC-002", "内网→外网", "192.168.0.0/16", "ANY", "ANY",
|
|
"允许", 10, "业务系统优先级最高；视频流媒体限速2Mbps/人；总出口100M按部门分配");
|
|
}
|
|
|
|
private void policy(Long deviceId, String deviceName, String policyType, String policyName,
|
|
String policyNo, String trafficDir, String srcAddr, String dstAddr,
|
|
String portProto, String policyAction, Integer priority, String remark) {
|
|
ItSecPolicyConfig c = new ItSecPolicyConfig();
|
|
c.setDeviceId(deviceId);
|
|
c.setDeviceName(deviceName);
|
|
c.setPolicyType(policyType);
|
|
c.setPolicyName(policyName);
|
|
c.setPolicyNo(policyNo);
|
|
c.setTrafficDir(trafficDir);
|
|
c.setSrcAddress(srcAddr);
|
|
c.setDstAddress(dstAddr);
|
|
c.setPortProto(portProto);
|
|
c.setPolicyAction(policyAction);
|
|
c.setEnabled(Boolean.TRUE);
|
|
c.setPriority(priority);
|
|
c.setRemark(remark);
|
|
c.setLastSyncDate(LocalDate.now().toString());
|
|
c.setOperator("张伟");
|
|
c.setCreatedAt(Instant.now());
|
|
policyRepo.save(c);
|
|
}
|
|
|
|
// -------- 回填IT资产采购金额（让折旧能算出真实金额）--------
|
|
|
|
private void seedAssetAmounts() {
|
|
// 为现有IT资产补全采购金额、折旧年限，让折旧端点能返回真实金额。
|
|
for (ItAsset a : assetRepo.findAll()) {
|
|
if (a.getPurchaseAmount() != null && a.getPurchaseAmount().compareTo(BigDecimal.ZERO) > 0) {
|
|
continue; // 已有金额跳过
|
|
}
|
|
// 根据类型设置参考采购金额
|
|
BigDecimal amount;
|
|
int depYears;
|
|
int residual;
|
|
switch (a.getCategory() != null ? a.getCategory() : "") {
|
|
case "服务器" -> { amount = new BigDecimal("55000.00"); depYears = 5; residual = 5; }
|
|
case "网络设备" -> { amount = new BigDecimal("18000.00"); depYears = 5; residual = 5; }
|
|
case "终端" -> { amount = new BigDecimal("8500.00"); depYears = 3; residual = 5; }
|
|
case "软件" -> { amount = new BigDecimal("25000.00"); depYears = 3; residual = 0; }
|
|
case "办公设备" -> { amount = new BigDecimal("6500.00"); depYears = 5; residual = 5; }
|
|
default -> { amount = new BigDecimal("5000.00"); depYears = 5; residual = 5; }
|
|
}
|
|
// 根据资产编号微调真实感
|
|
if ("IT-001".equals(a.getAssetNo())) amount = new BigDecimal("62800.00");
|
|
if ("IT-002".equals(a.getAssetNo())) amount = new BigDecimal("128000.00");
|
|
if ("IT-008".equals(a.getAssetNo())) amount = new BigDecimal("180000.00");
|
|
if ("IT-009".equals(a.getAssetNo())) amount = new BigDecimal("68000.00");
|
|
|
|
a.setPurchaseAmount(amount);
|
|
if (a.getDepreciationYears() == null) a.setDepreciationYears(depYears);
|
|
if (a.getResidualRatePct() == null) a.setResidualRatePct(residual);
|
|
if (a.getSerialNo() == null) {
|
|
a.setSerialNo("SN" + a.getAssetNo().replace("-", "") + "2024");
|
|
}
|
|
if (a.getBarcode() == null) {
|
|
a.setBarcode("BC" + a.getAssetNo().replace("-", ""));
|
|
}
|
|
assetRepo.save(a);
|
|
}
|
|
}
|
|
|
|
// -------- 资产生命周期事件演示数据 --------
|
|
|
|
private void seedAssetEvents() {
|
|
if (assetEventRepo.count() > 0) return;
|
|
// 为IT-007 (闲置惠普笔记本) 生成一条历史调拨记录
|
|
for (ItAsset a : assetRepo.findAll()) {
|
|
if (!"IT-007".equals(a.getAssetNo())) continue;
|
|
ItAssetEvent ev = new ItAssetEvent();
|
|
ev.setAssetId(a.getId());
|
|
ev.setAssetNo(a.getAssetNo());
|
|
ev.setAssetName(a.getName());
|
|
ev.setEventType("调拨");
|
|
ev.setEventNo("TR-20250618-0001");
|
|
ev.setFromHolder("设计研究中心");
|
|
ev.setToHolder("");
|
|
ev.setFromLocation("设计室");
|
|
ev.setToLocation("信息部库房");
|
|
ev.setReason("项目结束，设备归还信息部统一管理");
|
|
ev.setOperator("陈静");
|
|
ev.setStatus("已完成");
|
|
ev.setEventDate("2025-06-18");
|
|
ev.setCreatedAt(Instant.now());
|
|
assetEventRepo.save(ev);
|
|
break;
|
|
}
|
|
// 为IT-010 (维修复印机) 生成维修工单
|
|
for (ItAsset a : assetRepo.findAll()) {
|
|
if (!"IT-010".equals(a.getAssetNo())) continue;
|
|
ItAssetEvent ev = new ItAssetEvent();
|
|
ev.setAssetId(a.getId());
|
|
ev.setAssetNo(a.getAssetNo());
|
|
ev.setAssetName(a.getName());
|
|
ev.setEventType("维修");
|
|
ev.setEventNo("WO-20260608-0001");
|
|
ev.setFromHolder("行政部");
|
|
ev.setVendor("佳能维修服务中心(长沙)");
|
|
ev.setReason("定影器故障，打印出现竖向条纹");
|
|
ev.setExpectedReturnDate("2026-06-20");
|
|
ev.setOperator("李娜");
|
|
ev.setStatus("处理中");
|
|
ev.setEventDate("2026-06-08");
|
|
ev.setCreatedAt(Instant.now());
|
|
assetEventRepo.save(ev);
|
|
break;
|
|
}
|
|
// 为IT-011 (已报废爱普生投影仪) 生成报废记录
|
|
for (ItAsset a : assetRepo.findAll()) {
|
|
if (!"IT-011".equals(a.getAssetNo())) continue;
|
|
ItAssetEvent ev = new ItAssetEvent();
|
|
ev.setAssetId(a.getId());
|
|
ev.setAssetNo(a.getAssetNo());
|
|
ev.setAssetName(a.getName());
|
|
ev.setEventType("报废");
|
|
ev.setEventNo("SC-20260101-0001");
|
|
ev.setFromHolder("行政部");
|
|
ev.setReason("灯泡寿命耗尽，维修费用超过设备残值，申请报废");
|
|
ev.setOperator("陈静");
|
|
ev.setStatus("已完成");
|
|
ev.setResult("报废处置");
|
|
ev.setCompletedDate("2026-01-05");
|
|
ev.setEventDate("2026-01-02");
|
|
ev.setCreatedAt(Instant.now());
|
|
assetEventRepo.save(ev);
|
|
break;
|
|
}
|
|
}
|
|
}
|