cherry pick #4728 to release 4.3.0

pkg/microservice/aslan/core/common/repository/models/settings.go

@@ -30,9 +30,19 @@ type SystemSetting struct {
 	ServerURL           string                   `bson:"server_url" json:"server_url"`
 	WorkflowHook        *WorkflowHookSettings    `bson:"workflow_hook" json:"workflow_hook"`
 	ReleasePlanHook     *ReleasePlanHookSettings `bson:"release_plan_hook" json:"release_plan_hook"`
+	DindTLSCerts        *DindTLSCerts            `bson:"dind_tls_certs,omitempty" json:"-"`
 	UpdateTime          int64                    `bson:"update_time" json:"update_time"`
 }
 
+type DindTLSCerts struct {
+	CAPem         string `bson:"ca_pem"`
+	CAKeyPem      string `bson:"ca_key_pem"`
+	ServerCertPem string `bson:"server_cert_pem"`
+	ServerKeyPem  string `bson:"server_key_pem"`
+	ClientCertPem string `bson:"client_cert_pem"`
+	ClientKeyPem  string `bson:"client_key_pem"`
+}
+
 type Theme struct {
 	ThemeType   string       `bson:"theme_type" json:"theme_type"`
 	CustomTheme *CustomTheme `bson:"custom_theme" json:"custom_theme"`

pkg/microservice/aslan/core/common/repository/mongodb/settings.go

@@ -59,6 +59,19 @@ func (c *SystemSettingColl) Get() (*models.SystemSetting, error) {
 	return resp, err
 }
 
+func (c *SystemSettingColl) GetByID() (*models.SystemSetting, error) {
+	objectID, err := primitive.ObjectIDFromHex(setting.LocalClusterID)
+	if err != nil {
+		return nil, err
+	}
+
+	query := bson.M{"_id": objectID}
+	resp := &models.SystemSetting{}
+
+	err = c.FindOne(context.TODO(), query).Decode(resp)
+	return resp, err
+}
+
 func (c *SystemSettingColl) UpdateDefaultLoginSetting(defaultLogin string) error {
 	id, _ := primitive.ObjectIDFromHex(setting.LocalClusterID)
 	change := bson.M{"$set": bson.M{
@@ -196,6 +209,26 @@ func (c *SystemSettingColl) UpdateServerURL(serverURL string) error {
 	return err
 }
 
+func (c *SystemSettingColl) InitDindTLSCertsIfNeeded(certs *models.DindTLSCerts) (bool, error) {
+	id, _ := primitive.ObjectIDFromHex(setting.LocalClusterID)
+	query := bson.M{
+		"_id": id,
+		"$or": []bson.M{
+			{"dind_tls_certs": bson.M{"$exists": false}},
+			{"dind_tls_certs": nil},
+		},
+	}
+	change := bson.M{"$set": bson.M{
+		"dind_tls_certs": certs,
+		"update_time":    time.Now().Unix(),
+	}}
+	result, err := c.UpdateOne(context.TODO(), query, change)
+	if err != nil {
+		return false, err
+	}
+	return result.ModifiedCount > 0, nil
+}
+
 func (c *SystemSettingColl) UpdateReleasePlanHookSetting(hookSetting *models.ReleasePlanHookSettings) error {
 	id, _ := primitive.ObjectIDFromHex(setting.LocalClusterID)
 	query := bson.M{"_id": id}