tencent cloud

package main

import (
	"flag"
	"fmt"
	_ "github.com/go-sql-driver/mysql"
	"github.com/tencentcloud/ssm-rotation-sdk-golang/lib/db"
	"github.com/tencentcloud/ssm-rotation-sdk-golang/lib/ssm"
	"github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common"
	"log"
	"time"
)

var (
	roleArn, tokenPath, providerId, regionName, saToken string
	secretName, dbAddress, dbName, ssmRegionName        string
	dbPort                                              uint64
	dbConn                                              *db.DynamicSecretRotationDb
	Header                                              = map[string]string{
		"Authorization":      "SKIP",
		"X-TC-Action":        "AssumeRoleWithWebIdentity",
		"Host":               "sts.internal.tencentcloudapi.com",
		"X-TC-RequestClient": "PHP_SDK",
		"X-TC-Version":       "2018-08-13",
		"X-TC-Region":        regionName,
		"X-TC-Timestamp":     "1659944952",
		"Content-type":       "application/json",
	}
)

type Credentials struct {
	TmpSecretId  string
	TmpSecretKey string
	Token        string
	ExpiredTime  uint64
}

func main() {
	flag.StringVar(&secretName, "ssmName", "", "ssm name")
	flag.StringVar(&ssmRegionName, "ssmRegionName", "", "ssm region")
	flag.StringVar(&dbAddress, "dbAddress", "", "database address")
	flag.StringVar(&dbName, "dbName", "", "database name")
	flag.Uint64Var(&dbPort, "dbPort", 0, "database port")
	flag.Parse()

	provider, err := common.DefaultTkeOIDCRoleArnProvider()
	if err != nil {
		log.Fatal("failed to assume role with web identity, err:", err)
	}
	assumeResp, err := provider.GetCredential()
	if err != nil {
		log.Fatal("failed to assume role with web identity, err:", err)
	}

	var credential Credentials
	if assumeResp != nil {
		credential = Credentials{
			TmpSecretId:  assumeResp.GetSecretId(),
			TmpSecretKey: assumeResp.GetSecretKey(),
			Token:        assumeResp.GetToken(),
		}
	}
	log.Printf("secretId:%v,secretey%v,token%v\\n", credential.TmpSecretId, credential.TmpSecretKey, credential.Token)
	DB(credential)
}

func DB(credential Credentials) {
	// Initialize the database connection
	dbConn = &db.DynamicSecretRotationDb{}
	err := dbConn.Init(&db.Config{
		DbConfig: &db.DbConfig{
			MaxOpenConns:        100,
			MaxIdleConns:        50,
			IdleTimeoutSeconds:  100,
			ReadTimeoutSeconds:  5,
			WriteTimeoutSeconds: 5,
			SecretName:          secretName, // Secret name
			IpAddress:           dbAddress,  // Database address
			Port:                dbPort,     // Database port
			DbName:              dbName,     // Leave it empty or specify a database name
			ParamStr:            "charset=utf8&loc=Local",
		},
		SsmServiceConfig: &ssm.SsmAccount{
			‌SecretId:  credential.TmpSecretId,  // Fill in the actual available SecretId
			SecretKey: credential.TmpSecretKey, // Fill in the actual available SecretKey
			Token:     credential.Token,
			Region:    ssmRegionName, // Select the region where the secret is stored
		},
		WatchChangeInterval: time.Second * 10, // Interval to check the secret rotation
	})
	if err != nil {
		fmt.Errorf("failed to init dbConn, err:%v\\n", err)
		return
	}
	// In ‍the simulation process, you need to get a db connection to operate the database at regular intervals (usually in milliseconds)
	t := time.Tick(time.Second)
	for {
		select {
		case <-t:
			accessDb()
			queryDb()
		}
	}
}

func accessDb() {
	fmt.Println("--- accessDb start")
	c := dbConn.GetConn()
	if err := c.Ping(); err != nil {
		log.Fatal("failed to access db with err:", err)
	}
	log.Println("--- succeed to access db")
}

func queryDb() {
	var (
		id   int
		name string
	)
	log.Println("--- queryDb start")
	c := dbConn.GetConn()
	rows, err := c.Query("select id, name from user where id = ?", 1)
	if err != nil {
		log.Printf("failed to query db with err: ", err)
		log.Fatal(err)
	}
	defer rows.Close()
	for rows.Next() {
		err := rows.Scan(&id, &name)
		if err != nil {
			log.Fatal(err)
		}
		log.Println(id, name)
	}
	err = rows.Err()
	if err != nil {
		log.Fatal(err)
	}
	log.Println("--- succeed to query db")
}