Ops Admin Platform
Integrated operations platform for Host SSH, Kubernetes, MySQL DBMS, and Job Automation
# Ops Admin Operation and Maintenance Management Platform > ** One-stop lightweight IT infrastructure operation and maintenance management platform ** > A modern operation and maintenance workbench for teams and developers, integrating host assets, Web terminals, Kubernetes clusters, MySQL databases, job orchestration and monitoring alarms. Deeply adapted to the lazy cat micro-clothing ecology, use it right out of the box. --- ##Platform Introduction **Ops Admin** is a high-performance full-stack IT operation and maintenance management platform built based on **Go + Vue 3**. The platform aims to solve the pain points faced by small and medium-sized development teams and independent operations and maintenance teams when managing multiple hosts, multiple clusters, databases, and automated scripts such as "tool fragmentation, confused permissions, and difficult traceability of operations". By connecting to the Lazy Cat Micro Service environment, Ops Admin natively integrates ** Lazy Cat Micro Service Unified Identity Authentication (OIDC / SSO)**, allowing platform administrators to directly log in to the super administrator role with one click without secret. The system fully reduces local privilege dependence, and all multi-node operation and maintenance and construction operations are performed through a secure and controllable remote SSH channel. It combines powerful enterprise-level operation and maintenance functions with extreme privatization operation security. --- ##Core features and highlights 1. ** Lazy cat micro-clothing is native and dense **: - Support Lazy Cat Micro Service OIDC single sign-on and transparent gateway identity transfer. Click [Authorize Lazy Cat Account Login] on the login page to log in directly to the system; - Platform administrators are automatically mapped to system super administrators (`super-admin`), eliminating the cumbersome steps of manually initializing database passwords; - The logout process is closed-loop and safe. After logout, it stays stably in the authorization interface to avoid the automatic re-login loop. 2. ** Free client-side Web SSH terminal and credential hosting **: - Built-in high-performance Web SSH terminal based on WebSocket-directly interacts with remote Linux servers in the browser; - Unify hosting server login credentials (support account password and SSH private key authentication), and support Gateway multi-level penetration access to intranet assets. 3. **ˇ Full-featured Kubernetes multi-cluster management **: - Importing Kubeconfig can seamlessly manage multiple Kubernetes clusters; - Provides visual views of nodes, namespaces, workloads (Deployment / StatefulSet / DaemonSet), Pod and network configurations; - Support clicking to enter the Web Terminal inside the Pod and instantly view the container standard output log in the browser. 4. ** ˇ MySQL DBMS database cloud workbench **: - Centrally manage various MySQL database instances; - Provides an intuitive SQL query editor and table structure designer, supporting online SQL execution, view result sets, data import and export, and backup and restore. 5. ** Automated operation and maintenance and visual job scheduling (DAG)**: - Precipitate the team to standardize the script library (support Shell, Python, etc.); - Support batch fast command execution, script distribution and batch distribution of large files on one-to-many servers; - Provides a visual job designer to flexibly assemble code pulling, script execution, file distribution and ** manual approval nodes ** into an automated workflow. 6. ** Large monitoring screen, log retrieval and alarm integration **: - Access Prometheus metrics, Elasticsearch logs and Jaeger distributed link trace (Trace); - Provide PromQL instant query panel and global intelligent operation and maintenance cockpit large screen; - Alarm rule configuration, alarm convergence and silence, and support docking nails, corporate WeChat, flying books and other notification media. 7. ** Domain name resolution and life cycle management of SSL Certificates **: - Connect with DNS accounts of major cloud manufacturers and centrally maintain public network resolution records; - Automate the application, renewal, synchronization and download of SSL Certificates, saying goodbye to business interruptions caused by certificate expiration. 8. ** Strict enterprise-level RBAC authority and operation audit **: - Permission matrix control from fine-grained to menu, API and button levels; - Detailed login logs and operational audit trails allow all high-risk instructions and changes to be documented. --- ##ˇDetailed functional module description ### 1. Assets and Credential Center (Assets) - ** Host ledger **: Register physical servers, public cloud ECS/CVM, and local area network devices in categories, and record IP, configuration, affiliated department and label grouping; - ** Credential Safe Deposit Box **: Securely encrypt the password or SSH private key of the storage server to avoid disclosure of the private key or sharing across teams; - ** Fortress springboard machine **: Configure SSH springboard gateway to support penetrating corporate private networks or VPC access to back-end isolated assets without external IP; - **Web SSH interactive terminal **: Adaptive window resolution, support right-click copy and paste, code syntax highlighting and session retention. ### 2. Containers and Kubernetes (Containers) - ** Overview of multiple clusters **: Real-time statistics on CPU/memory resource utilization, node health status and Pod distribution of each cluster; - ** Workload overview **: Visually scale the number of ReplicaSet copies, restart the Pod with one click, or update the image version on a rolling basis; - **Pod terminal and log **: Select clusters, namespaces and Pod online, open container Shell with one click, and support streaming log tracking; - ** Network and Routing **: Visually view Service port mapping, Ingress domain name routing and ConfigMap / Secret configuration. ### 3. Database workbench - ** Unified access to multiple instances **: Centralized registration of business libraries, slave libraries and offline analysis libraries; - **SQL execution workbench **: Supports SQL syntax prompts, fast execution, transaction rollback prompts and formatted output; - ** Data management and backup **: Provides one-click data export (SQL/CSV format), online data import and scheduled full backup strategies. ### 4. Automated jobs and batch execution (Ops) - ** Standardized script library **: Unify maintenance of high-frequency inspection, environment initialization, and service deployment scripts, and support version management and execution parameter templates; - ** Batch operation and maintenance execution **: Select a host group or multiple servers, execute Shell instructions concurrently with one click and summarize the output of each node in the form of a card; - ** One-to-many file distribution **: Support the distribution of micro-service local files to designated directories on dozens of remote nodes, and support speed limit and privilege configuration; - ** Job scheduling and approval **: Organize complex jobs across nodes through drag-and-drop or process chain, supporting the insertion of "manual confirmation" cards at critical stages, and then advancing after approval by the administrator. ### 5. CI/CD Application Line (Applications) - ** Project warehouse association **: associate Git/SVN code warehouse with application service classification; - ** Multi-stage pipeline **: choreograph the code pulling, automated testing, product archiving and container update processes; - ** Secure collaborative construction **: In the microserver environment, dangerous Docker Socket mounting in containers is blocked, and remote target hosts are seamlessly guided to perform Docker image construction and publishing through SSH. ### 6. Observability and Warning Cockpit (Monitor) - ** Monitoring large-screen cockpit **: Integrate business topology, core system indicators, water level and hotspot alarm events; - ** Multi-data source query **: Support direct entry of PromQL into the UI to retrieve indicator changes, and support retrieval of Elasticsearch business logs by time range; - ** Alarm Life Cycle **: Supports batch generation of alarm rules based on templates, and supports alarm event claim, closure and silent convergence. ### 7. Domain Names and SSL Certificates (Domains) - **DNS account integration **: Support synchronization of cloud manufacturers 'public network DNS resolution records, and support batch additions, deletions, modifications and searches; - ** Certificate hosting **: Manage business SSL Certificates online and support certificate expiration warning and private key download. ### 8. System and Security Management (System) - **RBAC role permissions **: Free definition of administrator roles, and allocation of menu access rights and sensitive operation rights by position; - ** Security audit trail **: Record the time, IP, and user agent of each login in detail, and record all configuration changes and operation and maintenance instructions. --- ###Security and Architecture Specifications for Lazy Cat Micro Services🔒 - ** Architecture adaptation **: Fully adopt the standard 'linux/amd64' image architecture to run at high speed on various X86 hardware boxes of Lazy Cat; - ** Data security persistence **: Database and business data are mounted to `/lzcapp/var/mysql` and `/lzcapp/var/uploads`, and there is zero loss of upgrade and restart data; - ** Random password injection **: Internal communication uses micro-service dynamic `stable_secret` to generate high-entropy keys, completely eliminating the risk of external passwords colliding with the library; - ** Resource isolation **: Strictly disable the 53 DNS local port to avoid any conflicts with the box system network services. --- ##Recommendedsuitable population - ** Small and medium-sized enterprise development and operation and maintenance team **: Need a unified asset and distribution platform that is out-of-the-box and does not require the support of heavy server clusters; - ** Individual developers and independent webmasters **: Centrally manage their own cloud hosts, VPS, databases and domain names certificates on the lazy cat box; - ** Operation and maintenance engineer **: A lightweight automated tool chain with a Web terminal, batch script distribution and audit trail is required.
